## secdev/scapy — v2.7.1rc1…v2.8.0

_272+ commits._

### Features
- **tls: ML-DSA certificates, x509 cleanup, add server certificate verification (#5144)** (ac0ab2e)
- **bpf: support FreeBSD 32bits (#5193)** (64c11a6)
- **bluetooth_vsc_csr: Add MAC change support (#5179)** (464ed0a)
- **bluetooth_vsc_csr: Add basic command support (#5163)** (251daec)
- **bluetooth_vsc_zephyr: Add Zephyr vendor commands (#5169)** (4f35d82)
- **Add out of scope module** (873ce04)
- **crc: add CRC-16/X.25 and CRC-32C presets used by BPv7 (#5124)** (b3bbcc8)
- **layers/bluetooth: Add an HCI_Event_Vendor handler registration mechanism (#5080)** (950e420)

### Fixes
- **libpcap: fix timeval on multiple platforms leading to a crash (#5209)** (9ef9871)
- **Revert "inet6: fix IndexError when dissecting IPv6 with truncated nh=43 paylo…" (#5210)** (90623e7)
- **inet6: fix IndexError when dissecting IPv6 with truncated nh=43 payload (#5207)** (59f9a0e)
- **copilot: Fix NTP authenticator parsing for non-MD5 digest types** (48d5fac)
- **Fix formatting of docstring for min_auth_level** (6e2be79)
- **Update regression test for OSS-Fuzz findings** (6f1640c)
- **Fix TCP MD5 option calculation (#5175)** (5166573)
- **kerberos: fix S4U when using FAST (#5165)** (190b4ba)
- **util: fix tests about invalid pcaps on Python 3.7 (#5159)** (0d61ef7)
- **Fix regression on Python 3.7** (2c6d24e)
- **Fix SMB tests (#5158)** (7be7a7d)
- **Fix SMB tests (#5157)** (dac0505)
- **Fix tests (#5156)** (f4f87d9)
- **Update security bug reporting instructions in AGENTS.md** (03f455c)
- **fix(bgp): don't crash on a truncated IPv6/IPv4 NLRI prefix (#5150)** (a738f50)
- **fix(inet6): stop IP6ListField parsing on a truncated trailing address (#5149)** (94a6ac4)
- **hsrp, bluetooth, kerberos: fix three dissection crashes found by fuzzing (#5147)** (9754c6d)
- **tests: fix a bug in autorun.py that hung tests (#5146)** (4b938fb)
- **xcp: proper fix (#5120)** (3f824e1)

### Backend
- **util: Handle corrupted gzip streams in pcap/pcapng readers (#5215)** (e2e35c0)
- **libpcap: pass positive BIOCIMMEDIATE to ioctl (#5213)** (580c62e)
- **tests: Restore test for GHSA-c547 (#5212)** (b0a6933)
- **arch: minor cleanups to winpcapy and libpcap (#5211)** (b9c6129)
- **Improve performance of packet dissection and build (#5085)** (7daa15d)
- **Update CONTRIBUTING.md with AI documentation policy** (23b8047)
- **sendpfast: report a missing tcpreplay instead of UnboundLocalError** (15ce846)
- **tls: send the second request once in the post-handshake auth test** (c5e9a5b)
- **sslv2: implement stricter 'security' (yeah, we know) (#5197)** (e4742a5)
- **dcerpc: only commit accepted contexts on server side (#5196)** (49617d5)
- **main: create .cache/.config differently on Windows (#5195)** (22d3930)
- **dcerpc: properly deny client access on auth failure (#5194)** (f677dae)
- **sessions: drop the reassembly minimum when the buffer start moves (#5182)** (dc86f2f)
- **Merge commit from fork** (8db9853)
- **Delete RMBA_dump.hex** (1f826c4)
- **Update MACsecSA docstring for production warning** (594181b)
- **Merge commit from fork** (619b0f1)
- **NTLM: check MIC server-side (#5192)** (5488147)
- **Remove unnecessary whitespace in session.py** (f47d89e)
- **Merge commit from fork** (839d56c)
- **Merge commit from fork** (7237cfb)
- **Merge commit from fork** (eafa300)
- **Merge commit from fork** (dfb31eb)
- **Update SecurityAssociation class documentation** (d75891f)
- **sessions: compare the missing range when data arrives before the buffer (#5181)** (8eb959a)
- **Merge commit from fork** (56062c6)
- **Merge commit from fork** (66d0f46)
- **Merge commit from fork** (5e84d0a)
- **Merge commit from fork** (23838b6)
- **Merge commit from fork** (2e60721)
- **Merge commit from fork** (e176253)
- **Merge commit from fork** (5cf00db)
- **Merge commit from fork** (1d41f80)
- **contrib/hicp: match the Configure target with or without the command prefix (#5183)** (8e9956d)
- **automotive: keep the learned-response lookup in step with what is stored (#5184)** (c52df29)
- **doc: update AGENTS.md guidelines against silent exception suppression (#5180)** (94a853b)
- **bluetooth_vsc_espressif: Initial VSC batch (#5172)** (7d69454)
- **Bound pcap record lengths before reading** (b38b2e3)
- **bluetooth: Normalize bd_addr fields to Core spec (#5177)** (8a988e4)
- **bluetooth: Normalize HCI connection_handle field names to be according spec. (#5176)** (bc6a366)
- **Handle malformed gzip pcaps (#5162)** (1c477c4)
- **pfroute: filter out routing messages with RTF_LLDATA (#5168)** (a49a012)
- **dcerpc: fragment vt_trailer and frag_len properly (#5161)** (77d9498)
- **Implement J1939 Soft Socket for SAE J1939 Transport Protocol in Python (#5011)** (1d29984)
- **Revise agent guidelines and reporting instructions** (c405070)
- **Remove broken TGTP test** (7aeb330)
- **Remove broken MQTT tests** (94811a7)
- **Merge commit from fork** (4122c5d)
- **Merge commit from fork** (b36c957)
- **Merge commit from fork** (1e3ed8f)
- **Merge commit from fork** (00306ff)
- **Merge commit from fork** (196ea8a)
- **Merge commit from fork** (04b7470)
- **Merge commit from fork** (066bcd6)
- **Merge commit from fork** (951adbe)
- **Merge commit from fork** (e3db292)
- **Merge commit from fork** (11ac110)
- **Merge commit from fork** (9d15dc5)
- **Merge commit from fork** (a20565f)
- **Merge commit from fork** (57c78da)
- **Merge commit from fork** (716a13b)
- **Merge commit from fork** (492b33b)
- **Merge commit from fork** (61c82f3)
- **Merge commit from fork** (938274a)
- **Merge commit from fork** (6d257b3)
- **Merge commit from fork** (b77b830)
- **Merge commit from fork** (464b527)
- **Merge commit from fork** (e2e41be)
- **Merge commit from fork** (c981acd)
- **Merge commit from fork** (a0ebe38)
- **Merge commit from fork** (c306188)
- **Merge commit from fork** (fd28cd3)
- **Merge commit from fork** (38c0c9c)
- **Merge commit from fork** (88e251c)
- **Merge commit from fork** (99725d3)
- **Merge commit from fork** (c19a1b2)
- **Merge commit from fork** (9962905)
- **Merge commit from fork** (bfef762)
- **Merge commit from fork** (2a555e1)
- **Merge commit from fork** (d7909ec)
- **Merge commit from fork** (f08c14d)
- **Merge commit from fork** (8abc12b)
- **Merge commit from fork** (c77b836)
- **Merge commit from fork** (73165c7)
- **Merge commit from fork** (d630f69)
- **Merge commit from fork** (fd49f2d)
- **Merge commit from fork** (0387f8d)
- **Merge commit from fork** (8f41d15)
- **Merge commit from fork** (d9e1a65)
- **Merge commit from fork** (bfca2e6)
- **fwdmachine: build server TLS contexts with PROTOCOL_TLS_SERVER (#5154)** (988dca3)
- **Merge commit from fork** (c7b3449)
- **Merge commit from fork** (bc3a2fe)
- **automotive: scope UDS_WDBIEnumerator writes to the state that read them (#5155)** (5670c2f)
- **Do not create bash completion folders on non supported shells (#5153)** (2d85c35)
- **Merge commit from fork** (c935a75)
- **Merge commit from fork** (e08dd98)
- **utils: delete the TLS key-log scratch file after loading it (#5131)** (cf41094)
- **http: return one Content-Length message per packet (#5134)** (64bb17d)
- **utils: fall back to the writer linktype for unbound layers (#5151)** (fed3103)
- **radius: verify the request Message-Authenticator (#5138)** (b6e75d0)
- **fwdmachine: verify upstream TLS certificates (#5141)** (21c4d76)
- **contributing: please avoid answering maintainers with AI** (6f158c0)
- **utils: create the extcap FIFO with owner-only permissions (#5127)** (e5fbf88)
- **Update contributing guidelines for commit conventions** (924c90f)
- **automaton: drop stopped children from the spawn listener (#5129)** (8b62f03)
- **contrib/bgp: clear the temporary NLRI bound after a failed parse (#5130)** (6ef039f)
- **http: close a connection after its response times out (#5133)** (bcf2480)
- **Update SECURITY.md with clearer vulnerability definitions** (5ef829c)
- **dns: stop recording unknown names in the answering machine (#5136)** (f4f65c3)
- **utils: restore TLS settings when a pcapng reader closes (#5137)** (7dd44e8)
- **http: parse request URLs with urlsplit (#5140)** (c0686b3)
- **asn1: decode BER integers with int.from_bytes (#5107)** (329ecab)
- **Merge commit from fork** (09c6bd5)
- **Merge commit from fork** (b5708ee)
- **Merge commit from fork** (13f6348)
- **Merge commit from fork** (a1a2024)
- **Update AGENTS.md with coding and testing guidelines** (32852c0)
- **kerberos: update IAKERB flags (#5119)** (ca465f1)
- **Remove unused `struct` import in xcp/cto_commands_slave.py (#5118)** (120a9da)
- **Merge commit from fork** (6a28cf1)

### Docs
- **docs: update AGENTS.md coding guidelines (#5188)** (f5efe23)
- **docs: add agent contributor guidance and an audit skill (#5121)** (5f60db0)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/secdev/scapy?utm_source=github-action)._