From patchwork Wed Jan 21 13:38:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 9426 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4dx5000tp6z3wjW for ; Wed, 21 Jan 2026 13:39:28 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "E8" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4dx4zx45rbz3Mb for ; Wed, 21 Jan 2026 13:39:25 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4dx4zr6c6nz36VR for ; Wed, 21 Jan 2026 13:39:20 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4dx4zk3nPwz334N for ; Wed, 21 Jan 2026 13:39:14 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4dx4zj0ZVnz42p; Wed, 21 Jan 2026 13:39:13 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1769002753; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WoOJz9J+7SODoOxYHr7o0ttMtciYeE+LjjXv/3hm9U8=; b=SlJk60DXH4eIxKn7qBatd9Sx7ovF/+9r93jxEBZxq1o+35zahDQutVAE5elrT8OpeiEd2P ZFSEy+MUyu641fAw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1769002753; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=WoOJz9J+7SODoOxYHr7o0ttMtciYeE+LjjXv/3hm9U8=; b=wA/EXdZCRdtu9al+Mn65bgQEATqzpwMDJ1k+INLNwZ1+ED7qvBrJfBjFrgvuKw2CM5ciQ9 d905pPlxFZH6P2AK19Uwy5fj5bX5hFwwTXK43JhorO03HdjrsZyMc3+sBY2nLMPeLF4z0a TV5aAcTZuhyz3Jak3ubzQn1uy5ocY7zVByZ7AN84OitEWctVKwmf3VzytKbnML5oikzDD4 vfJPa9B2HMvqZpMGe4F3ALZSxLUyRVgyvEZCBcgzdqhcWRPaLEENUTFU/fQ3JLcye7sFMm kbQ1L+zTlfrLB9oS8pqq9qrHdvmydNbFgfCgum/Fo7whEkRdwkCLDNA9Bgo87A== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] libpcap: Update to version 1.10.6 Date: Wed, 21 Jan 2026 14:38:58 +0100 Message-ID: <20260121133907.3552584-8-adolf.belka@ipfire.org> In-Reply-To: <20260121133907.3552584-1-adolf.belka@ipfire.org> References: <20260121133907.3552584-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 1.10.5 to 1.10.6 - Update of rootfile - Two CVE fixes - Changelog 1.10.6 General: Fix "tcpdump -i " for something-only libpcap builds. gencode: Fix an undefined behavior in gen_mcode(). gencode: Add a missing free() in gen_scode(). Remove "DLT_" from the descriptions of two dlt_choices[] entries. Report the size of time_t in the version string. Validate remote capture source strings better. CVE-2025-11961: Fix OOBR and OOBW in pcap_ether_aton(). Source code: Remove some unneeded includes. pcapint_find_function() changed to return "void *" to avoid warnings. Clean up code that computes the length of a netmask. Mind netmap support in pcap_lib_version(). Link-layer types: Add LINKTYPE_ETW/DLT_ETW. Add LINKTYPE_NETANALYZER_NG/DLT_NETANALYZER_NG (pull request #1008). Add LINKTYPE_ZBOSS_NCP/DLT_ZBOSS_NCP. Add LINKTYPE_USB_2_0_LOW_SPEED/DLT_USB_2_0_LOW_SPEED, LINKTYPE_USB_2_0_FULL_SPEED/DLT_USB_2_0_FULL_SPEED, LINKTYPE_USB_2_0_HIGH_SPEED/DLT_USB_2_0_HIGH_SPEED Add LINKTYPE_AUERSWALD_LOG/DLT_AUERSWALD_LOG. Add LINKTYPE_ZWAVE_TAP/DLT_ZWAVE_TAP. Add LINKTYPE_SILABS_DEBUG_CHANNEL/DLT_SILABS_DEBUG_CHANNEL. Add LINKTYPE_FIRA_UCI/DLT_FIRA_UCI. Rename LINKTYPE_IPMB_LINUX/DLT_IPMB_LINUX to LINKTYPE_I2C_LINUX/DLT_I2C_LINUX, as it's really just an encapsulation of I2C, and is also being used for HDMI DDC. Keep DLT_IPMB_LINUX around as a #define for backwards compatibility. Add LINKTYPE_MDB/DLT_MDB. Add LINKTYPE_DECT_NR/DLT_DECT_NR. Add LINKTYPE_EDK2_MM/DLT_EDK2_MM. Add LINKTYPE_DEBUG_ONLY/DLT_DEBUG_ONLY. Packet filtering: Make the chunk allocator's alignment more general and platform-independent. IEEE 802.11: Fix three undefined behaviors in grammar.y. Fix IPv4 multicast filtering to only include 224.0.0.0/4. Fix "(arp|rarp) host NAME" to ignore IPv6 quietly. Fix ARCnet address parsing. Linux: Fix check for mac80211 phydev. Don't create monitor-mode interface if we're capturing on one. Expand the table of DSA tag types to include all current types. Fix an error message when deleting a monN interface. Fix returning PCAP_ERROR_RFMON_NOTSUP with libnl. Fix the error message when capure permission is denied. Fix the error message if PF_PACKET sockets aren't supported. Fix a file descriptor leak in an error case (pull request #1537). Handle errors better when checking for a DSA-tagged interface. Use DLT_DEBUG_ONLY for DSA tags that do not [yet] have a better support. FreeBSD: Fix detection and enabling of zero-copy support. Fix errors in the zero-copy code. Solaris: Fix not to ignore logical interfaces in fad-gifc.c and fad-glifc.c. Fix attempts to open all-numeric device names with DLPI to return "no such device". Fix error returns and messages when an interface has no DLPI device. Return all interfaces in pcap_findalldevs() even if they can't be opened. HP-UX: Fix attempts to open all-numeric device names to return "no such device". Fix error message if there's no /dev/dlpi device. Return all interfaces in pcap_findalldevs() even if they can't be opened. Windows: Fix filtering for VLAN-tagged frames. Add support for Npcap's nanosecond-resolution time stamps in captures. CVE-2025-11964: Fix a bug in error message character encoding mapping from UTF-16 to UTF-8. Check at create time whether the NPF driver supports nanosecond precision. D-Bus: Fix message leak. Capture file writing: Don't close the output stream if it's stdout, just flush it. Documentation: Explicitly document that closing a pcap_t for a savefile opened with pcap_fopen_offline() will close the standard I/O stream. Building and testing: Makefile.in: Include instrument-functions.c in the release tarball. CMake: Fix libnl usage with pkg-config. CMake: Fix build with CMake 3.31. CI: Report CMake version in builds. CI: Visual Studio 2022 builds added, including ARM64 builds; Visual Studio 2015 builds dropped. Don't build with sslutils.c if we don't have a TLS library. Build on Windows with a newer version of OpenSSL. CMake: generalize handling of non-x86 Windows architectures. CI: use the -A flag for all Visual Studio generators. Remove the fuzzing props from the release tarball. Autoconf: Use AC_SYS_YEAR2038_RECOMMENDED when possible if the environment variable BUILD_YEAR2038 = yes (via autogen.sh) DPDK: don't enable it by default. Update Npcap SDK to 1.15. autogen.sh: Allow to configure Autoconf warnings. autogen.sh: Delete all trailing blank lines at end of configure. Signed-off-by: Adolf Belka --- config/rootfiles/common/libpcap | 2 +- lfs/libpcap | 13 ++++++------- 2 files changed, 7 insertions(+), 8 deletions(-) diff --git a/config/rootfiles/common/libpcap b/config/rootfiles/common/libpcap index 7497e2cb1..4b74eda39 100644 --- a/config/rootfiles/common/libpcap +++ b/config/rootfiles/common/libpcap @@ -21,7 +21,7 @@ #usr/lib/libpcap.a usr/lib/libpcap.so usr/lib/libpcap.so.1 -usr/lib/libpcap.so.1.10.5 +usr/lib/libpcap.so.1.10.6 #usr/lib/pkgconfig/libpcap.pc #usr/share/man/man1/pcap-config.1 #usr/share/man/man3/pcap.3pcap diff --git a/lfs/libpcap b/lfs/libpcap index abdba19da..08e10aa0b 100644 --- a/lfs/libpcap +++ b/lfs/libpcap @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.10.5 +VER = 1.10.6 THISAPP = libpcap-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = eafc01c0b865f7e7917dcf353ce8e79cea8981eb68068a20b50d9650e1aa89874d3fd6bbfa93ff61ec9edbb610d22cd5f09c0723c12e95005725c66436658d2b +$(DL_FILE)_BLAKE2 = 392bee5b22cd4664ee4f2f110c27ee677c2e3ab25d4427e8d72c7f3347ba1b45acf987d661fc024f8a71e0e2d2b90d53352ad63796ae3836a41561816adf341d install : $(TARGET) @@ -73,10 +73,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --enable-bluetooth=no \ - --disable-dbus - + --prefix=/usr \ + --enable-bluetooth=no \ + --disable-dbus cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP)