<div class="container">
<h1>Recommended update for iputils</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2024:3724-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2024-10-18T07:45:42Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1017616">bsc#1017616</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1057664">bsc#1057664</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1065835">bsc#1065835</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1072460">bsc#1072460</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1082788">bsc#1082788</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1196840">bsc#1196840</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1199918">bsc#1199918</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1199926">bsc#1199926</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1199927">bsc#1199927</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221439">bsc#1221439</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=674304">bsc#674304</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=795788">bsc#795788</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=860616">bsc#860616</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=860655">bsc#860655</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=927831">bsc#927831</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-9524">jsc#PED-9524</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Enterprise High Performance Computing 12 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server 12 SP5</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 12 SP5</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that contains one feature and has 15 fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for iputils fixes the following issues:</p>
<p>Update version to version s20161105 (bsc#1221439 jsc#PED-9524):</p>
<ul>
<li>This version can use ICMP datagram sockets without CAP_NET_RAW capabilites.</li>
</ul>
<p>Full changelog:</p>
<ul>
<li>ping: eliminate deadcode & simplify</li>
<li>ping: do not allow oversized packets to root</li>
<li>correctly initialize first hop</li>
<li>ping: fix ping -6 -I</li>
<li>arping,doc: fix documentation of -I</li>
<li>ping: fix error message when getting EACCES from connect()</li>
<li>renamed INSTALL to INSTALL.md</li>
<li>ping: Silence GCC warnings when building with -fstrict-aliasing</li>
<li>tftpd: Drop supplementary groups for root</li>
<li>libgcrypt: fix static linking</li>
<li>doc: Inserted a missing word</li>
<li>tracepath6: avoid redundant family variable</li>
<li>tracepath: borrow everything good from tracepath6</li>
<li>tracepath: switch to dual-stack operation</li>
<li>tracepath: remove now redundant tracepath6</li>
<li>docs: fix parallel build of manpages</li>
<li>ping: remove assignments of values that are never read</li>
<li>docs: remove references to ping6 and traceroute6</li>
<li>ping: work with older kernels that don't support ping sockets</li>
<li>Revert "ping_common.c: fix message flood when EPERM is encountered in ping"</li>
<li>reorder -I option parsing (bsc#1057664)</li>
<li>ping: also bind the ICMP socket to the specific device</li>
<li>
<p>tracepath6 is now symlink to tracepath.</p>
</li>
<li>
<p>Add fix for ICMP datagram socket ping6-Fix-device-binding.patch
(bsc#1196840, bsc#1199918, bsc#1199926, bsc#1199927).</p>
</li>
<li>
<p>Backport license information from upstream (bsc#1082788):</p>
</li>
<li>Fix PMTU discovery in ping6. (bsc#1072460)</li>
<li>Install rdisc as rdisc, do not use in.rdisc anymore (xinetd which
was using in.* names is obsolete anyways)</li>
<li>iputils: remove man pages of unused binaries: ninfod, pg3, rdisc
(rdisc is in a separate package)</li>
<li>Add systemd service for rarpd</li>
<li>mark ping also verify not caps, as these are changed by the
permissions package. (bsc#1065835)</li>
<li>Reintroduce rarpd as subpackage</li>
<li>Explicitly list content in filelist as we have two subpackages
now</li>
</ul>
<p>Update to version s20161105 (Changes taken from the RELNOTES file):</p>
<ul>
<li>ping: eliminate deadcode & simplify</li>
<li>ping: do not allow oversized packets to root</li>
<li>correctly initialize first hop</li>
<li>ping: fix ping -6 -I</li>
<li>arping,doc: fix documentation of -I</li>
<li>ping: fix error message when getting EACCES from connect()</li>
<li>renamed INSTALL to INSTALL.md</li>
<li>(re)structured INSTALL.md and transformed into markdown; added hint that installation into prefix has to be done with DESTDIR make variable and that there's no prefix support in configure, close #21</li>
<li>ping: Silence GCC warnings when building with -fstrict-aliasing</li>
<li>tftpd: Drop supplementary groups for root</li>
<li>libgcrypt: fix static linking</li>
<li>doc: Inserted a missing word</li>
<li>tracepath6: avoid redundant family variable</li>
<li>tracepath: borrow everything good from tracepath6</li>
<li>tracepath: switch to dual-stack operation</li>
<li>tracepath: remove now redundant tracepath6</li>
<li>docs: fix parallel build of manpages</li>
<li>ping: remove assignments of values that are never read</li>
<li>docs: remove references to ping6 and traceroute6</li>
<li>ping: work with older kernels that don't support ping sockets</li>
<li>Revert "ping_common.c: fix message flood when EPERM is encountered in ping"</li>
<li>reorder -I option parsing (bsc#1057664)</li>
<li>
<p>ping: also bind the ICMP socket to the specific device</p>
</li>
<li>
<p>tracepath6 is now symlink to tracepath.</p>
</li>
<li>
<p>Add ping6 symlink (bsc#1017616)</p>
</li>
<li>
<p>do not install rarpd and rarpd.8 manpage (comes from rarpd rpm currently)</p>
</li>
</ul>
<p>Update to version s20160308 (Changes taken from the RELNOTES file)</p>
<ul>
<li>use syntax compatible with busybox date in Makefile</li>
<li>'admin prohibited' should print !X not !S.</li>
<li>Makefile: use #define as in previous code changes</li>
<li>doc/Makefile: require bash, because we use pushd and popd</li>
<li>doc: don't timestamp manpages by default</li>
<li>ping: status() now returns received/transmitted instead of trans/recv</li>
<li>ping: don't mess with internals of struct msghdr</li>
<li>ping: ICMP error replies while errno < 0 is a hard error</li>
<li>ping: always use POSIX locale when parsing -i</li>
<li>ping: link against libm</li>
<li>made ping functions protocol independent</li>
<li>ping: perform dual-stack ping by default</li>
<li>ping: remove obsolete preprocessor directives</li>
<li>ping: avoid name clashes between IPv4 and IPv6 code</li>
<li>ping: merge all ping header files into a single one</li>
<li>ping: merge <code>ping6</code> command into <code>ping</code></li>
<li>ping: refactor ping options</li>
<li>ping: refactor ping socket code</li>
<li>ping: merge IPv4 and IPv6 <code>pr_addr()</code></li>
<li>ping: fix defines and libs in Makefile</li>
<li>ping: handle single protocol systems</li>
<li>iputils ping/ping6: Add a function to check if a packet is ours</li>
<li>ping: Add <linux/types.h> to fix compilation error.</li>
<li>ping6: Use GNUTLS API directly for MD5. (v2)</li>
<li>ping6: Use libgcrypt instead of gnutls for MD5.</li>
<li>Allow ping to use IPv6 addresses</li>
<li>ping,ping6 doc: More description on CAP_NET_RAW usage.</li>
<li>if IPv4 resolving fails fallback to ping6</li>
<li>ping: in usage print the 'ping -6' options as well</li>
<li>ping: allow option -4 which forces IPv4</li>
<li>combine sock and errno into a single structure</li>
<li>This patch allows running ping and ping6 without root privileges on</li>
<li>use better names for socket variables</li>
<li>tracepath,doc: fix corrupted tag</li>
<li>doc: ping: add missing options and remove ping6</li>
<li>ninfod: remove unused variables</li>
<li>ninfod: Regenerate configure by autoconf-2.69.</li>
<li>ninfod: libgcrypt support.</li>
<li>Fix building with musl</li>
<li>travis.yml: install nettle-dev</li>
<li>Allow using nettle instead of libgcrypt for MD5</li>
<li>avoid compiler warning caused by snapshot.h</li>
<li>make <code>getaddrinfo()</code> and <code>getnameinfo()</code> usage consistent</li>
<li>enable IDN by default</li>
<li>remove IPV4_TARGETS and IPV6_TARGETS</li>
<li>Use svg instead of png to get better image quality</li>
<li>spec: Configure before building ninfod.</li>
<li>
<p>spec: Fix date in %changelog.</p>
</li>
<li>
<p>Use Provides: for old /{,s}bin utils to satisfy reverse dependencies.</p>
</li>
<li>Install utilities to /bin and /sbin until reverse dependencies are
properly fixed.</li>
<li>Do not install tftp and traceroute to avoid conflicts with the tftp and
traceroute packages. Stick to what iputils used to provide in the past.</li>
<li>Install tracepath to /usr/bin. (bsc#795788)</li>
</ul>
<p>Update to version s20150815</p>
<ul>
<li>use syntax compatible with busybox date in Makefile</li>
<li>Makefile: use #define as in previous code changes</li>
<li>ping: status() now returns received/transmitted instead of trans/recv</li>
<li>ping: don't mess with internals of struct msghdr</li>
<li>tracepath,doc: fix corrupted tag</li>
<li>made ping functions protocol independent</li>
<li>Allow ping to use IPv6 addresses</li>
<li>if IPv4 resolving fails fallback to ping6</li>
<li>ping: in usage print the 'ping -6' options as well</li>
<li>ping: allow option -4 which forces IPv4</li>
<li>combine sock and errno into a single structure</li>
<li>This patch allows running ping and ping6 without root privileges on</li>
<li>use better names for socket variables</li>
<li>travis.yml: install nettle-dev</li>
<li>Allow using nettle instead of libgcrypt for MD5</li>
<li>avoid compiler warning caused by snapshot.h</li>
<li>make <code>getaddrinfo()</code> and <code>getnameinfo()</code> usage consistent</li>
<li>enable IDN by default</li>
<li>ping: perform dual-stack ping by default</li>
<li>remove IPV4_TARGETS and IPV6_TARGETS</li>
<li>ping: remove obsolete preprocessor directives</li>
<li>ping: avoid name clashes between IPv4 and IPv6 code</li>
<li>ping: merge all ping header files into a single one</li>
<li>ping: merge <code>ping6</code> command into <code>ping</code></li>
<li>ping: refactor ping options</li>
<li>ping: refactor ping socket code</li>
<li>ping: merge IPv4 and IPv6 <code>pr_addr()</code></li>
<li>Use svg instead of png to get better image quality</li>
<li>iputils ping/ping6: Add a function to check if a packet is ours</li>
<li>ping: Add <linux/types.h> to fix compilation error.</li>
<li>ping6: Use GNUTLS API directly for MD5. (v2)</li>
<li>ping6: Use libgcrypt instead of gnutls for MD5.</li>
<li>ninfod: Regenerate configure by autoconf-2.69.</li>
<li>ninfod: libgcrypt support.</li>
<li>spec: Configure before building ninfod.</li>
<li>spec: Fix date in %changelog.</li>
<li>make,spec: Add rpm target.</li>
<li>
<p>ping,ping6 doc: More description on CAP_NET_RAW usage.</p>
</li>
<li>
<p>Fixed ping segfaults (bsc#860616,bsc#860655)</p>
</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Enterprise High Performance Computing 12 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3724=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 12 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3724=1</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 12 SP5
<br/>
<code>zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-3724=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
<ul>
<li>iputils-s20161105-11.3.1</li>
<li>iputils-debugsource-s20161105-11.3.1</li>
<li>iputils-debuginfo-s20161105-11.3.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
<ul>
<li>iputils-s20161105-11.3.1</li>
<li>iputils-debugsource-s20161105-11.3.1</li>
<li>iputils-debuginfo-s20161105-11.3.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
<ul>
<li>iputils-s20161105-11.3.1</li>
<li>iputils-debugsource-s20161105-11.3.1</li>
<li>iputils-debuginfo-s20161105-11.3.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1017616">https://bugzilla.suse.com/show_bug.cgi?id=1017616</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1057664">https://bugzilla.suse.com/show_bug.cgi?id=1057664</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1065835">https://bugzilla.suse.com/show_bug.cgi?id=1065835</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1072460">https://bugzilla.suse.com/show_bug.cgi?id=1072460</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1082788">https://bugzilla.suse.com/show_bug.cgi?id=1082788</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1196840">https://bugzilla.suse.com/show_bug.cgi?id=1196840</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1199918">https://bugzilla.suse.com/show_bug.cgi?id=1199918</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1199926">https://bugzilla.suse.com/show_bug.cgi?id=1199926</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1199927">https://bugzilla.suse.com/show_bug.cgi?id=1199927</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221439">https://bugzilla.suse.com/show_bug.cgi?id=1221439</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=674304">https://bugzilla.suse.com/show_bug.cgi?id=674304</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=795788">https://bugzilla.suse.com/show_bug.cgi?id=795788</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=860616">https://bugzilla.suse.com/show_bug.cgi?id=860616</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=860655">https://bugzilla.suse.com/show_bug.cgi?id=860655</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=927831">https://bugzilla.suse.com/show_bug.cgi?id=927831</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-9524">https://jira.suse.com/browse/PED-9524</a>
</li>
</ul>
</div>