SUSE alert openSUSE-SU-2026:0044-1 (tcpreplay)
| From: | maintenance@opensuse.org | |
| To: | security-announce@lists.opensuse.org | |
| Subject: | openSUSE-SU-2026:0044-1: important: Security update for tcpreplay | |
| Date: | Thu, 12 Feb 2026 18:04:43 +0100 | |
| Message-ID: | <20260212170443.3A372FD9A@maintenance.suse.de> | |
| Archive-link: | Article |
openSUSE Security Update: Security update for tcpreplay ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0044-1 Rating: important References: #1218249 #1221324 #1222131 #1243845 #1247919 #1248322 #1248595 #1248596 #1248597 #1248964 #1250356 Cross-References: CVE-2023-4256 CVE-2023-43279 CVE-2024-22654 CVE-2024-3024 CVE-2025-51006 CVE-2025-8746 CVE-2025-9157 CVE-2025-9384 CVE-2025-9385 CVE-2025-9386 CVE-2025-9649 CVSS scores: CVE-2024-22654 (SUSE): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVE-2025-8746 (SUSE): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP7 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for tcpreplay fixes the following issues: - update to 4.5.2: * features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AF_XDP socket support - tcpreplay -w (write into a pcap file) - tcpreaplay --fixhdrlen - --include and --exclude options - SLL2 support - Haiku support * security fixes reported for 4.4.4 fixed in 4.5.2 - CVE-2023-4256 / boo#1218249 - CVE-2023-43279 / boo#1221324 - CVE-2024-3024 / boo#1222131 (likely) - CVE-2024-22654 / boo#1243845 - CVE-2025-9157 / boo#1248322 - CVE-2025-9384 / boo#1248595 - CVE-2025-9385 / boo#1248596 - CVE-2025-9386 / boo#1248597 - CVE-2025-9649 / boo#1248964 - CVE-2025-51006 / boo#1250356 - see https://github.com/appneta/tcpreplay/compare/v4.4.4...v4.5.2 for full changelog - security fix for CVE-2025-8746 / boo#1247919 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2026-44=1 Package List: - openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64): tcpreplay-4.5.2-bp157.2.3.1 References: https://www.suse.com/security/cve/CVE-2023-4256.html https://www.suse.com/security/cve/CVE-2023-43279.html https://www.suse.com/security/cve/CVE-2024-22654.html https://www.suse.com/security/cve/CVE-2024-3024.html https://www.suse.com/security/cve/CVE-2025-51006.html https://www.suse.com/security/cve/CVE-2025-8746.html https://www.suse.com/security/cve/CVE-2025-9157.html https://www.suse.com/security/cve/CVE-2025-9384.html https://www.suse.com/security/cve/CVE-2025-9385.html https://www.suse.com/security/cve/CVE-2025-9386.html https://www.suse.com/security/cve/CVE-2025-9649.html https://bugzilla.suse.com/1218249 https://bugzilla.suse.com/1221324 https://bugzilla.suse.com/1222131 https://bugzilla.suse.com/1243845 https://bugzilla.suse.com/1247919 https://bugzilla.suse.com/1248322 https://bugzilla.suse.com/1248595 https://bugzilla.suse.com/1248596 https://bugzilla.suse.com/1248597 https://bugzilla.suse.com/1248964 https://bugzilla.suse.com/1250356