#1680 Rebase tcpdump in Fedora 25
Closed Opened by msehnout.

There is 41 CVEs filled in against tcpdump in Fedora (tracker bug: https://bugzilla.redhat.com/show_bug.cgi?id=1419114). Trying to backport all patches would be both cumbersome and error prone. I suggest we rebase to the newest upstream version 4.9.0 which is currently in rawhide.


I guess you're trying to follow https://fedoraproject.org/wiki/Updates_Policy#Security_fixes , so please tell us if any of the listed issues apply to this rebase:

  • The update requires user or administrator intervention to keep working
  • The update requires configuration files or databases or other resources to convert to a new format
  • The update causes policy or behavior changes (such as when something that was previously denied is now allowed, etc.)
  • The update changes the way the end user interacts with the user interface (such as moving menus or buttons to a new location, changing names of command-line arguments, etc.)
  • The rebase only addresses issues that are likely to affect a subjectively small number of Fedora users
  • no, there is no need for intervention
  • no, it's just a command line utility
  • I'm not aware about any changes
  • no
  • I'm not sure how to respond to this. I think most users use tcpdump only as an interactive tool. Anyway less segfaults is always better, considering number of fixed bound checking in the changelog: http://www.tcpdump.org/tcpdump-changes.txt

Thanks for the answers, Martin.
I'm +1 to this rebase request.

  • AGREED: tcpdump Rebase in F25 is approved

@jforbes changed the status to Closed

Metadata