Neglect this if it's duplicated, I send this again just in case the former 
email wasn't received because I'm not a member of the mailing list.
The tcpdump used in openbsd is an old verison which contains 
CVE-2016-7939<https://nvd.nist.gov/vuln/detail/CVE-2016-7939> . Though some of 
the functions modified in the 
patch<https://github.com/the-tcpdump-group/tcpdump/commit/237efcf593ee369519e9dfdc9166702219dabfec>
 doesn't exist in the corresponding file, i.e. 
print-gre.c<https://github.com/openbsd/src/blob/master/usr.sbin/tcpdump/print-gre.c>
 , functions such as gre_sre_ip_print is in it.
I believe this can be easily avoid by applying the patch above, or just update 
the tcpdump to a newer version. Would you please fix this? I'm looking forward 
to your reply.

Reply via email to