| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
Reviewed by: kp (changes related to pf)
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 0a7e5f1f02aad2ff5fff1c60f44c6975fd07e1d9)
(cherry picked from commit d72f87c0fd1418bdb814594ea8fc76a202f7d5c6)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Prior to this MFC, the stable/13 tcpdump was at version 4.9.3, which was
released over five years ago. Several CVEs have been identified in that
version. For a detailed list, see
https://www.tcpdump.org/public-cve-list.txt.
Reviewed by: kp (print-pf changes)
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 1cdec2832d051ddcb1417f3f2601e6212aff2613)
(cherry picked from commit ee67461e56828dd1f8de165947ba83f6d9148a87)
(cherry picked from commit a75d93a74d55d371876f5444075de4ecd685297f)
(cherry picked from commit 171a7bbfc04885150401ab64d96793373a8b2061)
(cherry picked from commit 1ad8d2ee1f7dec1d747ec955a68fbbb362958315)
(cherry picked from commit 7e0a7ef95fac1183854cab662bd9afa4647422d6)
(cherry picked from commit 85247ee6a2ba1c2dd0053e9be9055efa4be1438e)
Commit 1cdec2832d051ddcb1417f3f2601e6212aff2613 has been adapted for
stable/13. Changes to usr.sbin/ndp/ndp_netlink.c have been omitted
because 91fbe0819bb9 (ndp: convert ndp(8) to netlink) has not been
MFCed.
Commit ee67461e56828dd1f8de165947ba83f6d9148a87 has been adapted for
stable/13. Most modifications were required because
4bf98559d9d6fa7c3571d26ed6f2b18823e3a30b was not MFCed to stable/13.
Also incorporate a small change from
4848eb3af2a91b133c4b70cb9b71dd92ffec7f46 to fix the build.
|
|\
| |
| |
| |
| |
| |
| |
| |
| | |
Update tcpdump from 4.9.2 to 4.9.3.
MFC after: 2 weeks
Notes:
svn path=/head/; revision=355989
|
|\|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
It contains many fixes, including bounds checking, buffer overflows (in
SLIP and bittok2str_internal), buffer over-reads, and infinite loops.
One other notable change:
Do not use getprotobynumber() for protocol name resolution.
Do not do any protocol name resolution if -n is specified.
Submitted by: gordon
Reviewed by: delphij, emaste, glebius
MFC after: 1 week
Relnotes: Yes
Security: CVE-2017-11108, CVE-2017-11541, CVE-2017-11542
Security: CVE-2017-11543, CVE-2017-12893, CVE-2017-12894
Security: CVE-2017-12895, CVE-2017-12896, CVE-2017-12897
Security: CVE-2017-12898, CVE-2017-12899, CVE-2017-12900
Security: CVE-2017-12901, CVE-2017-12902, CVE-2017-12985
Security: CVE-2017-12986, CVE-2017-12987, CVE-2017-12988
Security: CVE-2017-12989, CVE-2017-12990, CVE-2017-12991
Security: CVE-2017-12992, CVE-2017-12993, CVE-2017-12994
Security: CVE-2017-12995, CVE-2017-12996, CVE-2017-12997
Security: CVE-2017-12998, CVE-2017-12999, CVE-2017-13000
Security: CVE-2017-13001, CVE-2017-13002, CVE-2017-13003
Security: CVE-2017-13004, CVE-2017-13005, CVE-2017-13006
Security: CVE-2017-13007, CVE-2017-13008, CVE-2017-13009
Security: CVE-2017-13010, CVE-2017-13011, CVE-2017-13012
Security: CVE-2017-13013, CVE-2017-13014, CVE-2017-13015
Security: CVE-2017-13016, CVE-2017-13017, CVE-2017-13018
Security: CVE-2017-13019, CVE-2017-13020, CVE-2017-13021
Security: CVE-2017-13022, CVE-2017-13023, CVE-2017-13024
Security: CVE-2017-13025, CVE-2017-13026, CVE-2017-13027
Security: CVE-2017-13028, CVE-2017-13029, CVE-2017-13030
Security: CVE-2017-13031, CVE-2017-13032, CVE-2017-13033
Security: CVE-2017-13034, CVE-2017-13035, CVE-2017-13036
Security: CVE-2017-13037, CVE-2017-13038, CVE-2017-13039
Security: CVE-2017-13040, CVE-2017-13041, CVE-2017-13042
Security: CVE-2017-13043, CVE-2017-13044, CVE-2017-13045
Security: CVE-2017-13046, CVE-2017-13047, CVE-2017-13048
Security: CVE-2017-13049, CVE-2017-13050, CVE-2017-13051
Security: CVE-2017-13052, CVE-2017-13053, CVE-2017-13054
Security: CVE-2017-13055, CVE-2017-13687, CVE-2017-13688
Security: CVE-2017-13689, CVE-2017-13690, CVE-2017-13725
Differential Revision: https://reviews.freebsd.org/D12404
Notes:
svn path=/head/; revision=326613
|
|\|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
It fixes many buffer overflow in different protocol parsers, but none of
them are critical, even in absense of Capsicum.
Security: CVE-2016-7922, CVE-2016-7923, CVE-2016-7924, CVE-2016-7925
Security: CVE-2016-7926, CVE-2016-7927, CVE-2016-7928, CVE-2016-7929
Security: CVE-2016-7930, CVE-2016-7931, CVE-2016-7932, CVE-2016-7933
Security: CVE-2016-7934, CVE-2016-7935, CVE-2016-7936, CVE-2016-7937
Security: CVE-2016-7938, CVE-2016-7939, CVE-2016-7940, CVE-2016-7973
Security: CVE-2016-7974, CVE-2016-7975, CVE-2016-7983, CVE-2016-7984
Security: CVE-2016-7985, CVE-2016-7986, CVE-2016-7992, CVE-2016-7993
Security: CVE-2016-8574, CVE-2016-8575, CVE-2017-5202, CVE-2017-5203
Security: CVE-2017-5204, CVE-2017-5205, CVE-2017-5341, CVE-2017-5342
Security: CVE-2017-5482, CVE-2017-5483, CVE-2017-5484, CVE-2017-5485
Security: CVE-2017-5486
Notes:
svn path=/head/; revision=313048
|
|\|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Also, the changes made in r272451 and r272653 that were lost in the
merge of 4.6.2 (r276788) have been restored.
PR: 199568
Differential Revision: https://reviews.freebsd.org/D3007
Reviewed by: brooks, hiren
Approved by: jmallett (mentor)
MFC after: 1 month
Notes:
svn path=/head/; revision=285275
|
|\|
| |
| |
| |
| |
| |
| | |
MFC after: 1 month
Notes:
svn path=/head/; revision=276788
|
|\|
| |
| |
| |
| |
| |
| | |
MFC after: 4 weeks
Notes:
svn path=/head/; revision=251158
|
|\|
| |
| |
| |
| |
| |
| | |
MFC after: 4 weeks
Notes:
svn path=/head/; revision=241235
|
|\|
| |
| |
| |
| |
| |
| | |
MFC after: 2 weeks
Notes:
svn path=/head/; revision=235530
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
against icmp6_hdr::icmp6_type is done incorrectly. (This fix has
already been applied upstream, but we do not have the latest version of
tcpdump.)
MFC after: 1 week
Notes:
svn path=/head/; revision=228713
|
|\|
| |
| |
| | |
Notes:
svn path=/head/; revision=214478
|
|\|
| |
| |
| | |
Notes:
svn path=/head/; revision=190207
|
|/
|
|
| |
Notes:
svn path=/vendor/tcpdump/dist/; revision=190150
|
|
|
|
| |
Notes:
svn path=/vendor/tcpdump/dist/; revision=162017
|
|
|
|
|
|
|
| |
Approved by: re (scottl)
Notes:
svn path=/vendor/tcpdump/dist/; revision=147899
|
|
|
|
| |
Notes:
svn path=/vendor/tcpdump/dist/; revision=146773
|
|
|
|
| |
Notes:
svn path=/vendor/tcpdump/dist/; revision=127668
|
|
|
|
|
|
|
| |
http://www.tcpdump.org/release/tcpdump-3.7.2.tar.gz
Notes:
svn path=/vendor/tcpdump/dist/; revision=111726
|
|
|
|
|
|
|
| |
http://www.tcpdump.org/release/tcpdump-3.7.1.tar.gz
Notes:
svn path=/vendor/tcpdump/dist/; revision=98524
|
|
|
|
| |
Notes:
svn path=/vendor/tcpdump/dist/; revision=75115
|
|
Notes:
svn path=/vendor/tcpdump/dist/; revision=56893
|