Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tcpreplay for openSUSE:Factory checked in at 2026-08-01 18:34:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tcpreplay (Old) and /work/SRC/openSUSE:Factory/.tcpreplay.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tcpreplay" Sat Aug 1 18:34:32 2026 rev:20 rq:1368904 version:4.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/tcpreplay/tcpreplay.changes 2026-07-26 11:32:44.499533984 +0200 +++ /work/SRC/openSUSE:Factory/.tcpreplay.new.16738/tcpreplay.changes 2026-08-01 18:37:38.112984385 +0200 @@ -1,0 +2,26 @@ +Wed Jul 29 06:57:54 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 4.6.0: + * Fixes three advisories reported by tinyb0y, none of which have a + CVE assigned yet: GHSA-fwcr-mqg6-hqmx (stack buffer overflow in + the tcpprep --services file parser), GHSA-m6w7-8497-g9c9 (heap + out-of-bounds read via --pktlen with --preload-pcap) and + GHSA-5q26-7fxx-v8fh (heap out-of-bounds access in ARP address + rewriting) + * Fix Linux TX_RING support, broken by a header and probe + collision + * Fix an out-of-bounds read in libopts --save-opts handling + * Fix jumbo-frame truncation that silently mangled captures with + frames larger than the MTU + * AF_XDP and io_uring injection backends now reach line rate; new + --raw PF_INET/SOCK_RAW injection path and --loss option + * CMake joins autotools as a supported build system; GNU AutoGen + is no longer required and release tarballs ship pre-built files + for both + * Install the replay engine as a static C library +- Drop tcpreplay-fix-txring-includes.patch, merged upstream +- Do not ship the newly installed libtcpreplay: it is static-only, + has no configure switch to disable it and nothing in Factory links + against it, so the package stays a command-line tool set + +------------------------------------------------------------------- Old: ---- tcpreplay-4.5.5.tar.xz tcpreplay-4.5.5.tar.xz.asc tcpreplay-fix-txring-includes.patch New: ---- tcpreplay-4.6.0.tar.xz tcpreplay-4.6.0.tar.xz.asc ----------(Old B)---------- Old: * Install the replay engine as a static C library - Drop tcpreplay-fix-txring-includes.patch, merged upstream - Do not ship the newly installed libtcpreplay: it is static-only, ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tcpreplay.spec ++++++ --- /var/tmp/diff_new_pack.YsNyVo/_old 2026-08-01 18:37:38.697004479 +0200 +++ /var/tmp/diff_new_pack.YsNyVo/_new 2026-08-01 18:37:38.697004479 +0200 @@ -17,7 +17,7 @@ Name: tcpreplay -Version: 4.5.5 +Version: 4.6.0 Release: 0 Summary: Network analysis and testing tools License: GPL-3.0-only @@ -25,9 +25,6 @@ Source0: https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.xz Source1: https://github.com/appneta/tcpreplay/releases/download/v%{version}/%{name}-%{version}.tar.xz.asc Source2: %{name}.keyring -# Fix the __GLIBC_MINOR typo in txring.h and include <linux/if_packet.h>, -# which is what actually defines the PACKET_TX_RING API - sent upstream -Patch0: tcpreplay-fix-txring-includes.patch BuildRequires: libdnet-devel BuildRequires: libpcap-devel BuildRequires: pkgconfig @@ -61,6 +58,15 @@ %install %make_install +# 4.6.0 started installing the replay engine as a STATIC library plus its +# headers and pkgconfig file. There is no configure switch to turn that +# off, and openSUSE does not ship static-only libraries without a consumer +# to justify them -- nothing in Factory links against libtcpreplay. Drop +# them and keep this package what it has always been: the command-line +# tools. Revisit if upstream grows a shared library or a consumer appears. +rm -r %{buildroot}%{_includedir}/%{name} +rm %{buildroot}%{_libdir}/lib%{name}.a +rm %{buildroot}%{_libdir}/pkgconfig/lib%{name}.pc %files %license docs/LICENSE ++++++ tcpreplay-4.5.5.tar.xz -> tcpreplay-4.6.0.tar.xz ++++++ ++++ 26015 lines of diff (skipped)
