From patchwork Sun Sep 13 17:12:20 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10212 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4hjZcB3CRJz3xTT for ; Sun, 13 Sep 2026 17:13:14 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4hjZc95f9wz5lH for ; Sun, 13 Sep 2026 17:13:13 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4hjZbk5MXhz37YT for ; Sun, 13 Sep 2026 17:12:50 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4hjZbZ2c5hz377T for ; Sun, 13 Sep 2026 17:12:42 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4hjZbW5qBGz5gR; Sun, 13 Sep 2026 17:12:39 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1789319560; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=K5TfzYip8vN4mvkYqkX39xliU7xr63ON/DQ2eOaQe9Q=; b=idhkhFTsrXIAVfeAYyDaK22NcXpE2giu4d88U22ZZGSzip1Fp8lpq5De1atQipS1zVADhI VjgURBKoIMAJ26vF7FY0qpfKxzoBZ/REED11xehKH/2YeDWOwmZhfjOMqoh3uyNtFFSlkl LoP+5z/SHWYd2fT+Svyr4XgLA0F5JhppZ3dkgE92eb/HlVht7tCPDRDBN2J2XDTMlJpkMw +2jBPi+FmBoeAoF2W5zc1MOxDGzD0/Si0NUo+g61Y75LVjGAHxSjbs8qCUXomPDkWaVlng pD2hivP7kGgT0Nq1l1Fdzp8pwd92yCHUTesjVNxoJ3O89yQRymXJoEffOzXM7Q== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1789319560; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=K5TfzYip8vN4mvkYqkX39xliU7xr63ON/DQ2eOaQe9Q=; b=3auuK0R7qtlPNlvTLOZyz3IE1sYXm8jgQRmYaAdt3IS5xH5pIJVsdF5UZ+TWP5cKwOvYV4 Uo6enNpT/71RSsCw== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] libpcap: Update to version 1.10.7 Date: Sun, 13 Sep 2026 19:12:20 +0200 Message-ID: <20260913171230.3920551-21-adolf.belka@ipfire.org> In-Reply-To: <20260913171230.3920551-1-adolf.belka@ipfire.org> References: <20260913171230.3920551-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 1.10.6 to 1.10.7 - Update of rootfile - 7 CVE fixes - Changelog 1.10.7 General: Free p->opt.device on close, not on cleanup (issue #1615). Issue reported by Harrison Green. Source code: Deprecate bpf_filter(). Packet filtering: Initialize the scratch memory store to 0. In "net mask " catch ENOMEM for the "m" too. CVE-2026-0799: Access M[] safely in the BPF interpreter. CVE-2026-31912: Mind the program bounds in pcap_offline_filter(). CVE-2026-31911: Fail opcodes safely in the BPF interpreter. CVE-2026-6244: Avoid division by zero via pcap_offline_filter(). CVE-2026-6554: Limit "ja L" looping in pcap_offline_filter(). Validate BPF opcodes stricter. For "lsh" and "rsh" guard "#k" as well. Windows: Fix error return from memory allocation error. rpcap: CVE-2026-18313: Fix a memory leak in rpcapd. CVE-2026-18238: Fix RPCAP_MSG_PACKET validation. Documentation: Remove list of OSes that support "ipv6-icmp"; all the ones we support appear to do so. Fix pcap_next_ex(3PCAP) man page to clarify the PCAP_ERROR_BREAK return value. Building and testing: CMake: Disable remote capture support on Windows by default. RDMA: Avoid valgrind errors when calling rdmasniff_findalldevs(). Autoconf: Add QNX support to AC_LBL_LIBRARY_NET(). capturetest: Treat SA_RESTART as optional. QNX: Disable zero-copy BPF to work around portability issues. DAG: Fix packet filtering with low snaplen. SNF: Fix packet filtering with low snaplen. Netmap: Set packet captured length based on the snapshot length and return value of the capture filter. Signed-off-by: Adolf Belka --- config/rootfiles/common/libpcap | 2 +- lfs/libpcap | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libpcap b/config/rootfiles/common/libpcap index 4b74eda39..e76e8bc3a 100644 --- a/config/rootfiles/common/libpcap +++ b/config/rootfiles/common/libpcap @@ -21,7 +21,7 @@ #usr/lib/libpcap.a usr/lib/libpcap.so usr/lib/libpcap.so.1 -usr/lib/libpcap.so.1.10.6 +usr/lib/libpcap.so.1.10.7 #usr/lib/pkgconfig/libpcap.pc #usr/share/man/man1/pcap-config.1 #usr/share/man/man3/pcap.3pcap diff --git a/lfs/libpcap b/lfs/libpcap index 08e10aa0b..259c66eb2 100644 --- a/lfs/libpcap +++ b/lfs/libpcap @@ -24,7 +24,7 @@ include Config -VER = 1.10.6 +VER = 1.10.7 THISAPP = libpcap-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 392bee5b22cd4664ee4f2f110c27ee677c2e3ab25d4427e8d72c7f3347ba1b45acf987d661fc024f8a71e0e2d2b90d53352ad63796ae3836a41561816adf341d +$(DL_FILE)_BLAKE2 = 5cec38e048446c7837e95a4c51fb3b5cc3a7d8e459f7599d918e9304d6c39725c3e22a9563fdbb0e2bd318f484872b2516856a43928884834403411391859e20 install : $(TARGET)