CVE-2025-47268
ping in iputils through 20240905 allows a denial of service (application
error or incorrect data collection) via a crafted ICMP Echo Reply
packet, because of a signed 64-bit integer overflow in timestamp
multiplication.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-47268
Patch from:
070cfacd73
(From OE-Core rev: a4a58d3f6cd49a54a8c271abaad8098958d4f27f)
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
- Allow to disable reverse DNS resolution (PTR lookup) with with
environment variable IPUTILS_PING_PTR_LOOKUP=0
- Lower max allowed -s value to 65507 (IPv4) or 65527 (IPv6).
That is the maximum the Linux kernel supports.
- Include pre-generated man pages & HTML docs in dist tarballs.
This allows to avoid libxslt, docbook, ... as a build dependencies.
- require meson >= 0.44
- ping has new option -3
(From OE-Core rev: 6e950f5edd36a2ef1b1a7c46c1bb860ddce7a70f)
Signed-off-by: Changhyeok Bae <changhyeok.bae@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
