From patchwork Sun Sep 6 05:28:00 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 97393 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9F837C79F9F for ; Sun, 6 Sep 2026 05:28:10 +0000 (UTC) Received: from a27-45.smtp-out.us-west-2.amazonses.com (a27-45.smtp-out.us-west-2.amazonses.com [54.240.27.45]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.8534.1788672481973235514 for ; Sat, 05 Sep 2026 22:28:02 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=HNItqMNu; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=Gn9kAy/2; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.45, mailfrom: 010101a075301693-a46a56f0-4d22-486d-b3be-bfb4eaffe31a-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1788672481; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date; bh=yx4obTmF4ukLFhw6XDTui9gdptE4QfzeSKUbyJ5z/fA=; b=HNItqMNuWKz6T+Tq9mMP3yMTusgkkIyOj5zfIvZp8o/no3piEPNIL/gJAWdabwmf Uswj/ttL3ojfjnGLFyXPVPWpi/ROCeBgt7Gba62ZicHWjZEGCdkmLkqe6CiX42bqiqW wHInn608RakatzQF/RGp2KsAfPnMP/V+se3nT0Is= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1788672481; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date:Feedback-ID; bh=yx4obTmF4ukLFhw6XDTui9gdptE4QfzeSKUbyJ5z/fA=; b=Gn9kAy/2wfQHeZpNdW3ANYNmmpEos4mEh1x489bW8cVwiNseUxsz5cGP6TtFmCT3 Ag1biJqAG8bwLySkUI7lsSZAEAqELglmPg1KCnvgIxKwYxFUV/E4w6ZcDd95lviBO+O 8BG0Ahs4zTcMIjyYWNgV6qcCWItJQR3o2jX5Vq3Q= MIME-Version: 1.0 From: auh@yoctoproject.org To: openembedded-core@lists.openembedded.org Subject: [AUH] libpcap: upgrading to 1.10.7 SUCCEEDED Message-ID: <010101a075301693-a46a56f0-4d22-486d-b3be-bfb4eaffe31a-000000@us-west-2.amazonses.com> Date: Sun, 6 Sep 2026 05:28:00 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.09.06-54.240.27.45 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sun, 06 Sep 2026 05:28:10 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/245199 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libpcap* to *1.10.7* has Succeeded. Next steps: - apply the patch: git am 0001-libpcap-upgrade-1.10.6-1.10.7.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From b7d9c7a17272477e082260e2d29859768fdba973 Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Sun, 6 Sep 2026 05:26:05 +0000 Subject: [PATCH] libpcap: upgrade 1.10.6 -> 1.10.7 Source: CHANGES Saturday, September 5, 2026 / The Tcpdump Group Summary for 1.10.7 libpcap release General: Free p->opt.device on close, not on cleanup (issue #1615). Issue reported by Harrison Green. Source code: Deprecate bpf_filter(). Packet filtering: Initialize the scratch memory store to 0. In "net mask " catch ENOMEM for the "m" too. CVE-2026-0799: Access M[] safely in the BPF interpreter. CVE-2026-31912: Mind the program bounds in pcap_offline_filter(). CVE-2026-31911: Fail opcodes safely in the BPF interpreter. CVE-2026-6244: Avoid division by zero via pcap_offline_filter(). CVE-2026-6554: Limit "ja L" looping in pcap_offline_filter(). Validate BPF opcodes stricter. For "lsh" and "rsh" guard "#k" as well. Windows: Fix error return from memory allocation error. rpcap: CVE-2026-18313: Fix a memory leak in rpcapd. CVE-2026-18238: Fix RPCAP_MSG_PACKET validation. Documentation: Remove list of OSes that support "ipv6-icmp"; all the ones we support appear to do so. Fix pcap_next_ex(3PCAP) man page to clarify the PCAP_ERROR_BREAK return value. Building and testing: CMake: Disable remote capture support on Windows by default. RDMA: Avoid valgrind errors when calling rdmasniff_findalldevs(). Autoconf: Add QNX support to AC_LBL_LIBRARY_NET(). capturetest: Treat SA_RESTART as optional. QNX: Disable zero-copy BPF to work around portability issues. DAG: Fix packet filtering with low snaplen. SNF: Fix packet filtering with low snaplen. Netmap: Set packet captured length based on the snapshot length and return value of the capture filter. --- ...error-messages-about-32-bit-integer-overflow.patch | 11 ++++------- .../libpcap/{libpcap_1.10.6.bb => libpcap_1.10.7.bb} | 2 +- 2 files changed, 5 insertions(+), 8 deletions(-) rename meta/recipes-connectivity/libpcap/{libpcap_1.10.6.bb => libpcap_1.10.7.bb} (95%) diff --git a/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch b/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch index 4f2af53762..5c14e189f0 100644 --- a/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch +++ b/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch @@ -1,4 +1,4 @@ -From 217c3a07c7db694324b5c61eaaa07774735e2d7d Mon Sep 17 00:00:00 2001 +From 936de20fdc8475d3627986ff5525198332cf2b0a Mon Sep 17 00:00:00 2001 From: Denis Ovsienko Date: Thu, 9 Oct 2025 20:51:45 +0100 Subject: [PATCH] Fix error messages about 32-bit integer overflow. @@ -40,7 +40,7 @@ Signed-off-by: Adarsh Jagadish Kamini 2 files changed, 32 insertions(+), 10 deletions(-) diff --git a/pcap-filter.manmisc.in b/pcap-filter.manmisc.in -index bfb692ff..929d668d 100644 +index 2444ff7..3c8a190 100644 --- a/pcap-filter.manmisc.in +++ b/pcap-filter.manmisc.in @@ -18,7 +18,7 @@ @@ -52,7 +52,7 @@ index bfb692ff..929d668d 100644 .SH NAME pcap-filter \- packet filter syntax .br -@@ -886,6 +886,13 @@ integer constants (expressed in standard C syntax), the normal binary operators +@@ -885,6 +885,13 @@ integer constants (expressed in standard C syntax), the normal binary operators a length operator, and special packet data accessors. Note that all comparisons are unsigned, so that, for example, 0x80000000 and 0xffffffff are > 0. @@ -67,7 +67,7 @@ index bfb692ff..929d668d 100644 The .B % diff --git a/scanner.l b/scanner.l -index 57779497..49aaeab2 100644 +index 405d331..bd708c9 100644 --- a/scanner.l +++ b/scanner.l @@ -48,8 +48,8 @@ typedef enum { @@ -153,6 +153,3 @@ index 57779497..49aaeab2 100644 return STOULEN_ERROR; } n = (n * 10) + digit; --- -2.34.1 - diff --git a/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb b/meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb similarity index 95% rename from meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb rename to meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb index d381a4eb2f..fcbac2dc26 100644 --- a/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb +++ b/meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb @@ -13,7 +13,7 @@ DEPENDS = "flex-native bison-native" SRC_URI = "https://www.tcpdump.org/release/${BP}.tar.xz \ file://0001-Fix-error-messages-about-32-bit-integer-overflow.patch \ " -SRC_URI[sha256sum] = "ec97d1206bdd19cb6bdd043eaa9f0037aa732262ec68e070fd7c7b5f834d5dfc" +SRC_URI[sha256sum] = "68fa62cffb974f4275641ce14c2e2d75739251f30e00e6a0900903b247d76a03" inherit autotools binconfig-disabled pkgconfig