diff mbox series

[AUH] libpcap: upgrading to 1.10.7 SUCCEEDED

Message ID 010101a075301693-a46a56f0-4d22-486d-b3be-bfb4eaffe31a-000000@us-west-2.amazonses.com
State New
Headers show
Series [AUH] libpcap: upgrading to 1.10.7 SUCCEEDED | expand

Commit Message

auh@yoctoproject.org Sept. 6, 2026, 5:28 a.m. UTC
Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *libpcap* to *1.10.7* has Succeeded.

Next steps:
    - apply the patch: git am 0001-libpcap-upgrade-1.10.6-1.10.7.patch
    - check the changes to upstream patches and summarize them in the commit message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update failures.
Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
From b7d9c7a17272477e082260e2d29859768fdba973 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <auh@yoctoproject.org>
Date: Sun, 6 Sep 2026 05:26:05 +0000
Subject: [PATCH] libpcap: upgrade 1.10.6 -> 1.10.7

Source: CHANGES

Saturday, September 5, 2026 / The Tcpdump Group
  Summary for 1.10.7 libpcap release
    General:
      Free p->opt.device on close, not on cleanup (issue #1615). Issue
        reported by Harrison Green.
    Source code:
      Deprecate bpf_filter().
    Packet filtering:
      Initialize the scratch memory store to 0.
      In "net <n> mask <m>" catch ENOMEM for the "m" too.
      CVE-2026-0799: Access M[] safely in the BPF interpreter.
      CVE-2026-31912: Mind the program bounds in pcap_offline_filter().
      CVE-2026-31911: Fail opcodes safely in the BPF interpreter.
      CVE-2026-6244: Avoid division by zero via pcap_offline_filter().
      CVE-2026-6554: Limit "ja L" looping in pcap_offline_filter().
      Validate BPF opcodes stricter.
      For "lsh" and "rsh" guard "#k" as well.
    Windows:
      Fix error return from memory allocation error.
    rpcap:
      CVE-2026-18313: Fix a memory leak in rpcapd.
      CVE-2026-18238: Fix RPCAP_MSG_PACKET validation.
    Documentation:
      Remove list of OSes that support "ipv6-icmp"; all the ones we
        support appear to do so.
      Fix pcap_next_ex(3PCAP) man page to clarify the PCAP_ERROR_BREAK
        return value.
    Building and testing:
      CMake: Disable remote capture support on Windows by default.
      RDMA: Avoid valgrind errors when calling rdmasniff_findalldevs().
      Autoconf: Add QNX support to AC_LBL_LIBRARY_NET().
      capturetest: Treat SA_RESTART as optional.
    QNX:
      Disable zero-copy BPF to work around portability issues.
    DAG:
      Fix packet filtering with low snaplen.
    SNF:
      Fix packet filtering with low snaplen.
    Netmap:
      Set packet captured length based on the snapshot length and return
        value of the capture filter.
---
 ...error-messages-about-32-bit-integer-overflow.patch | 11 ++++-------
 .../libpcap/{libpcap_1.10.6.bb => libpcap_1.10.7.bb}  |  2 +-
 2 files changed, 5 insertions(+), 8 deletions(-)
 rename meta/recipes-connectivity/libpcap/{libpcap_1.10.6.bb => libpcap_1.10.7.bb} (95%)
diff mbox series

Patch

diff --git a/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch b/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch
index 4f2af53762..5c14e189f0 100644
--- a/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch
+++ b/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch
@@ -1,4 +1,4 @@ 
-From 217c3a07c7db694324b5c61eaaa07774735e2d7d Mon Sep 17 00:00:00 2001
+From 936de20fdc8475d3627986ff5525198332cf2b0a Mon Sep 17 00:00:00 2001
 From: Denis Ovsienko <denis@ovsienko.info>
 Date: Thu, 9 Oct 2025 20:51:45 +0100
 Subject: [PATCH] Fix error messages about 32-bit integer overflow.
@@ -40,7 +40,7 @@  Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>
  2 files changed, 32 insertions(+), 10 deletions(-)
 
 diff --git a/pcap-filter.manmisc.in b/pcap-filter.manmisc.in
-index bfb692ff..929d668d 100644
+index 2444ff7..3c8a190 100644
 --- a/pcap-filter.manmisc.in
 +++ b/pcap-filter.manmisc.in
 @@ -18,7 +18,7 @@
@@ -52,7 +52,7 @@  index bfb692ff..929d668d 100644
  .SH NAME
  pcap-filter \- packet filter syntax
  .br
-@@ -886,6 +886,13 @@ integer constants (expressed in standard C syntax), the normal binary operators
+@@ -885,6 +885,13 @@ integer constants (expressed in standard C syntax), the normal binary operators
  a length operator, and special packet data
  accessors.  Note that all comparisons are unsigned, so that, for example,
  0x80000000 and 0xffffffff are > 0.
@@ -67,7 +67,7 @@  index bfb692ff..929d668d 100644
  The
  .B %
 diff --git a/scanner.l b/scanner.l
-index 57779497..49aaeab2 100644
+index 405d331..bd708c9 100644
 --- a/scanner.l
 +++ b/scanner.l
 @@ -48,8 +48,8 @@ typedef enum {
@@ -153,6 +153,3 @@  index 57779497..49aaeab2 100644
  				return STOULEN_ERROR;
  			}
  			n = (n * 10) + digit;
--- 
-2.34.1
-
diff --git a/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb b/meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb
similarity index 95%
rename from meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb
rename to meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb
index d381a4eb2f..fcbac2dc26 100644
--- a/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb
+++ b/meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb
@@ -13,7 +13,7 @@  DEPENDS = "flex-native bison-native"
 SRC_URI = "https://www.tcpdump.org/release/${BP}.tar.xz \
 	   file://0001-Fix-error-messages-about-32-bit-integer-overflow.patch \
           "
-SRC_URI[sha256sum] = "ec97d1206bdd19cb6bdd043eaa9f0037aa732262ec68e070fd7c7b5f834d5dfc"
+SRC_URI[sha256sum] = "68fa62cffb974f4275641ce14c2e2d75739251f30e00e6a0900903b247d76a03"
 
 inherit autotools binconfig-disabled pkgconfig