blob: 4fde221f31bf99a9f4237d0ad250caefe89ad46a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=tcpdump
pkgver=4.9.3
pkgrel=2
pkgdesc="A tool for network monitoring and data acquisition"
url="https://www.tcpdump.org/"
arch="all"
license="BSD-3-Clause"
options="!check" # fail on ppc64le
makedepends="libpcap-dev openssl-dev perl"
subpackages="$pkgname-doc"
source="https://www.tcpdump.org/release/tcpdump-$pkgver.tar.gz
CVE-2020-8037.patch::https://github.com/the-tcpdump-group/tcpdump/commit/32027e199368dad9508965aae8cd8de5b6ab5231.patch
"
# secfixes:
# 4.9.3-r1:
# - CVE-2020-8037
# 4.9.3-r0:
# - CVE-2017-16808 (AoE)
# - CVE-2018-14468 (FrameRelay)
# - CVE-2018-14469 (IKEv1)
# - CVE-2018-14470 (BABEL)
# - CVE-2018-14466 (AFS/RX)
# - CVE-2018-14461 (LDP)
# - CVE-2018-14462 (ICMP)
# - CVE-2018-14465 (RSVP)
# - CVE-2018-14881 (BGP)
# - CVE-2018-14464 (LMP)
# - CVE-2018-14463 (VRRP)
# - CVE-2018-14467 (BGP)
# - CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
# - CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled)
# - CVE-2018-14880 (OSPF6)
# - CVE-2018-16451 (SMB)
# - CVE-2018-14882 (RPL)
# - CVE-2018-16227 (802.11)
# - CVE-2018-16229 (DCCP)
# - CVE-2018-16301 (was fixed in libpcap)
# - CVE-2018-16230 (BGP)
# - CVE-2018-16452 (SMB)
# - CVE-2018-16300 (BGP)
# - CVE-2018-16228 (HNCP)
# - CVE-2019-15166 (LMP)
# - CVE-2019-15167 (VRRP)
# - CVE-2018-14879 (tcpdump -V)
# 4.9.0-r0:
# - CVE-2016-7922
# - CVE-2016-7923
# - CVE-2016-7924
# - CVE-2016-7925
# - CVE-2016-7926
# - CVE-2016-7927
# - CVE-2016-7928
# - CVE-2016-7929
# - CVE-2016-7930
# - CVE-2016-7931
# - CVE-2016-7932
# - CVE-2016-7933
# - CVE-2016-7934
# - CVE-2016-7935
# - CVE-2016-7936
# - CVE-2016-7937
# - CVE-2016-7938
# - CVE-2016-7939
# - CVE-2016-7940
# - CVE-2016-7973
# - CVE-2016-7974
# - CVE-2016-7975
# - CVE-2016-7983
# - CVE-2016-7984
# - CVE-2016-7985
# - CVE-2016-7986
# - CVE-2016-7992
# - CVE-2016-7993
# - CVE-2016-8574
# - CVE-2016-8575
# - CVE-2017-5202
# - CVE-2017-5203
# - CVE-2017-5204
# - CVE-2017-5205
# - CVE-2017-5341
# - CVE-2017-5342
# - CVE-2017-5482
# - CVE-2017-5483
# - CVE-2017-5484
# - CVE-2017-5485
# - CVE-2017-5486
# 4.9.1-r0:
# - CVE-2017-11108
build() {
./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--sysconfdir=/etc \
--mandir=/usr/share/man \
--localstatedir=/var
make
}
check() {
make check
}
package() {
make DESTDIR="$pkgdir" install
rm -f "$pkgdir"/usr/sbin/tcpdump.4*
}
sha512sums="3aec673f78b996a4df884b1240e5d0a26a2ca81ee7aca8a2e6d50255bb53476e008a5ced4409e278a956710d8a4d31d85bbb800c9f1aab92b0b1046b59292a22 tcpdump-4.9.3.tar.gz
f53b5557ad2c68c28bbd6121b637ade43937ce4956fa9c2c8b187e8c62726c018509eb728f7f7479d078c9018f091f64114944b2d6106e6214662899f880445a CVE-2020-8037.patch"
|
