Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libpcap* to *1.10.7* has Succeeded.
Next steps:
- apply the patch: git am 0001-libpcap-upgrade-1.10.6-1.10.7.patch
- check the changes to upstream patches and summarize them in the commit
message,
- compile an image that contains the package
- perform some basic sanity tests
- amend the patch and sign it off: git commit -s --reset-author --amend
- send it to the appropriate mailing list
Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.
Please review the attached files for further information and build/update
failures.
Any problem please file a bug at
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler
Regards,
The Upgrade Helper
-- >8 --
>From b7d9c7a17272477e082260e2d29859768fdba973 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Sun, 6 Sep 2026 05:26:05 +0000
Subject: [PATCH] libpcap: upgrade 1.10.6 -> 1.10.7
Source: CHANGES
Saturday, September 5, 2026 / The Tcpdump Group
Summary for 1.10.7 libpcap release
General:
Free p->opt.device on close, not on cleanup (issue #1615). Issue
reported by Harrison Green.
Source code:
Deprecate bpf_filter().
Packet filtering:
Initialize the scratch memory store to 0.
In "net <n> mask <m>" catch ENOMEM for the "m" too.
CVE-2026-0799: Access M[] safely in the BPF interpreter.
CVE-2026-31912: Mind the program bounds in pcap_offline_filter().
CVE-2026-31911: Fail opcodes safely in the BPF interpreter.
CVE-2026-6244: Avoid division by zero via pcap_offline_filter().
CVE-2026-6554: Limit "ja L" looping in pcap_offline_filter().
Validate BPF opcodes stricter.
For "lsh" and "rsh" guard "#k" as well.
Windows:
Fix error return from memory allocation error.
rpcap:
CVE-2026-18313: Fix a memory leak in rpcapd.
CVE-2026-18238: Fix RPCAP_MSG_PACKET validation.
Documentation:
Remove list of OSes that support "ipv6-icmp"; all the ones we
support appear to do so.
Fix pcap_next_ex(3PCAP) man page to clarify the PCAP_ERROR_BREAK
return value.
Building and testing:
CMake: Disable remote capture support on Windows by default.
RDMA: Avoid valgrind errors when calling rdmasniff_findalldevs().
Autoconf: Add QNX support to AC_LBL_LIBRARY_NET().
capturetest: Treat SA_RESTART as optional.
QNX:
Disable zero-copy BPF to work around portability issues.
DAG:
Fix packet filtering with low snaplen.
SNF:
Fix packet filtering with low snaplen.
Netmap:
Set packet captured length based on the snapshot length and return
value of the capture filter.
---
...error-messages-about-32-bit-integer-overflow.patch | 11 ++++-------
.../libpcap/{libpcap_1.10.6.bb => libpcap_1.10.7.bb} | 2 +-
2 files changed, 5 insertions(+), 8 deletions(-)
rename meta/recipes-connectivity/libpcap/{libpcap_1.10.6.bb =>
libpcap_1.10.7.bb} (95%)
diff --git
a/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch
b/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch
index 4f2af53762..5c14e189f0 100644
---
a/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch
+++
b/meta/recipes-connectivity/libpcap/libpcap/0001-Fix-error-messages-about-32-bit-integer-overflow.patch
@@ -1,4 +1,4 @@
-From 217c3a07c7db694324b5c61eaaa07774735e2d7d Mon Sep 17 00:00:00 2001
+From 936de20fdc8475d3627986ff5525198332cf2b0a Mon Sep 17 00:00:00 2001
From: Denis Ovsienko <[email protected]>
Date: Thu, 9 Oct 2025 20:51:45 +0100
Subject: [PATCH] Fix error messages about 32-bit integer overflow.
@@ -40,7 +40,7 @@ Signed-off-by: Adarsh Jagadish Kamini
<[email protected]>
2 files changed, 32 insertions(+), 10 deletions(-)
diff --git a/pcap-filter.manmisc.in b/pcap-filter.manmisc.in
-index bfb692ff..929d668d 100644
+index 2444ff7..3c8a190 100644
--- a/pcap-filter.manmisc.in
+++ b/pcap-filter.manmisc.in
@@ -18,7 +18,7 @@
@@ -52,7 +52,7 @@ index bfb692ff..929d668d 100644
.SH NAME
pcap-filter \- packet filter syntax
.br
-@@ -886,6 +886,13 @@ integer constants (expressed in standard C syntax), the
normal binary operators
+@@ -885,6 +885,13 @@ integer constants (expressed in standard C syntax), the
normal binary operators
a length operator, and special packet data
accessors. Note that all comparisons are unsigned, so that, for example,
0x80000000 and 0xffffffff are > 0.
@@ -67,7 +67,7 @@ index bfb692ff..929d668d 100644
The
.B %
diff --git a/scanner.l b/scanner.l
-index 57779497..49aaeab2 100644
+index 405d331..bd708c9 100644
--- a/scanner.l
+++ b/scanner.l
@@ -48,8 +48,8 @@ typedef enum {
@@ -153,6 +153,3 @@ index 57779497..49aaeab2 100644
return STOULEN_ERROR;
}
n = (n * 10) + digit;
---
-2.34.1
-
diff --git a/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb
b/meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb
similarity index 95%
rename from meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb
rename to meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb
index d381a4eb2f..fcbac2dc26 100644
--- a/meta/recipes-connectivity/libpcap/libpcap_1.10.6.bb
+++ b/meta/recipes-connectivity/libpcap/libpcap_1.10.7.bb
@@ -13,7 +13,7 @@ DEPENDS = "flex-native bison-native"
SRC_URI = "https://www.tcpdump.org/release/${BP}.tar.xz \
file://0001-Fix-error-messages-about-32-bit-integer-overflow.patch \
"
-SRC_URI[sha256sum] =
"ec97d1206bdd19cb6bdd043eaa9f0037aa732262ec68e070fd7c7b5f834d5dfc"
+SRC_URI[sha256sum] =
"68fa62cffb974f4275641ce14c2e2d75739251f30e00e6a0900903b247d76a03"
inherit autotools binconfig-disabled pkgconfig
--
2.47.1
Changelog for libpcap: 1.10.6 -> 1.10.7
Source: CHANGES
Saturday, September 5, 2026 / The Tcpdump Group
Summary for 1.10.7 libpcap release
General:
Free p->opt.device on close, not on cleanup (issue #1615). Issue
reported by Harrison Green.
Source code:
Deprecate bpf_filter().
Packet filtering:
Initialize the scratch memory store to 0.
In "net <n> mask <m>" catch ENOMEM for the "m" too.
CVE-2026-0799: Access M[] safely in the BPF interpreter.
CVE-2026-31912: Mind the program bounds in pcap_offline_filter().
CVE-2026-31911: Fail opcodes safely in the BPF interpreter.
CVE-2026-6244: Avoid division by zero via pcap_offline_filter().
CVE-2026-6554: Limit "ja L" looping in pcap_offline_filter().
Validate BPF opcodes stricter.
For "lsh" and "rsh" guard "#k" as well.
Windows:
Fix error return from memory allocation error.
rpcap:
CVE-2026-18313: Fix a memory leak in rpcapd.
CVE-2026-18238: Fix RPCAP_MSG_PACKET validation.
Documentation:
Remove list of OSes that support "ipv6-icmp"; all the ones we
support appear to do so.
Fix pcap_next_ex(3PCAP) man page to clarify the PCAP_ERROR_BREAK
return value.
Building and testing:
CMake: Disable remote capture support on Windows by default.
RDMA: Avoid valgrind errors when calling rdmasniff_findalldevs().
Autoconf: Add QNX support to AC_LBL_LIBRARY_NET().
capturetest: Treat SA_RESTART as optional.
QNX:
Disable zero-copy BPF to work around portability issues.
DAG:
Fix packet filtering with low snaplen.
SNF:
Fix packet filtering with low snaplen.
Netmap:
Set packet captured length based on the snapshot length and return
value of the capture filter.
packages/x86-64-v3-poky-linux/libpcap/libpcap: FILELIST: removed "/usr/lib/libpcap.so.1.10.6", added "/usr/lib/libpcap.so.1.10.7" Changes to packages/x86-64-v3-poky-linux/libpcap (sysroot): /usr/lib/libpcap.so.1 changed symlink target from libpcap.so.1.10.6 to libpcap.so.1.10.7 /usr/lib/libpcap.so.1.10.6 moved to /usr/lib/libpcap.so.1.10.7
packages/x86-64-v3-poky-linux/libpcap: PKGV changed from 1.10.6 [default] to 1.10.7 [default] packages/x86-64-v3-poky-linux/libpcap: PV changed from "1.10.6" to "1.10.7" packages/x86-64-v3-poky-linux/libpcap: SRC_URI changed from "https://www.tcpdump.org/release/libpcap-1.10.6.tar.xz file://0001-Fix-error-messages-about-32-bit-integer-overflow.patch" to "https://www.tcpdump.org/release/libpcap-1.10.7.tar.xz file://0001-Fix-error-messages-about-32-bit-integer-overflow.patch" packages/x86-64-v3-poky-linux/libpcap/libpcap-dbg: FILELIST: removed "/usr/lib/.debug/libpcap.so.1.10.6", added "/usr/lib/.debug/libpcap.so.1.10.7" packages/x86-64-v3-poky-linux/libpcap/libpcap-dbg: PKGV changed from 1.10.6 [default] to 1.10.7 [default] packages/x86-64-v3-poky-linux/libpcap/libpcap-dbg: PV changed from "1.10.6" to "1.10.7" packages/x86-64-v3-poky-linux/libpcap/libpcap-dbg: PKGSIZE changed from 1083760 to 1082264 (-0%) packages/x86-64-v3-poky-linux/libpcap/libpcap-dev: PKGV changed from 1.10.6 [default] to 1.10.7 [default] packages/x86-64-v3-poky-linux/libpcap/libpcap-dev: PV changed from "1.10.6" to "1.10.7" packages/x86-64-v3-poky-linux/libpcap/libpcap-dev: PKGSIZE changed from 175091 to 175136 (+0%) packages/x86-64-v3-poky-linux/libpcap/libpcap-doc: PKGV changed from 1.10.6 [default] to 1.10.7 [default] packages/x86-64-v3-poky-linux/libpcap/libpcap-doc: PV changed from "1.10.6" to "1.10.7" packages/x86-64-v3-poky-linux/libpcap/libpcap-doc: PKGSIZE changed from 251637 to 252247 (+0%) packages/x86-64-v3-poky-linux/libpcap/libpcap-locale: PKGV changed from 1.10.6 [default] to 1.10.7 [default] packages/x86-64-v3-poky-linux/libpcap/libpcap-locale: PV changed from "1.10.6" to "1.10.7" packages/x86-64-v3-poky-linux/libpcap/libpcap-src: FILELIST: directory renamed /usr/src/debug/libpcap/1.10.6 -> /usr/src/debug/libpcap/1.10.7, directory renamed /usr/src/debug/libpcap/1.10.6/pcap -> /usr/src/debug/libpcap/1.10.7/pcap packages/x86-64-v3-poky-linux/libpcap/libpcap-src: PKGV changed from 1.10.6 [default] to 1.10.7 [default] packages/x86-64-v3-poky-linux/libpcap/libpcap-src: PV changed from "1.10.6" to "1.10.7" packages/x86-64-v3-poky-linux/libpcap/libpcap-src: PKGSIZE changed from 1559412 to 1566392 (+0%) packages/x86-64-v3-poky-linux/libpcap/libpcap-staticdev: PKGV changed from 1.10.6 [default] to 1.10.7 [default] packages/x86-64-v3-poky-linux/libpcap/libpcap-staticdev: PV changed from "1.10.6" to "1.10.7" packages/x86-64-v3-poky-linux/libpcap/libpcap-staticdev: PKGSIZE changed from 1928036 to 1924826 (-0%) packages/x86-64-v3-poky-linux/libpcap/libpcap: FILELIST: removed "/usr/lib/libpcap.so.1.10.6", added "/usr/lib/libpcap.so.1.10.7" packages/x86-64-v3-poky-linux/libpcap/libpcap: PKGV changed from 1.10.6 [default] to 1.10.7 [default] packages/x86-64-v3-poky-linux/libpcap/libpcap: PV changed from "1.10.6" to "1.10.7" Changes to packages/x86-64-v3-poky-linux/libpcap (sysroot): /usr/lib/libpcap.so.1 changed symlink target from libpcap.so.1.10.6 to libpcap.so.1.10.7 /usr/lib/libpcap.so.1.10.6 moved to /usr/lib/libpcap.so.1.10.7
0001-libpcap-upgrade-1.10.6-1.10.7.patch
Description: Binary data
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#245199): https://lists.openembedded.org/g/openembedded-core/message/245199 Mute This Topic: https://lists.openembedded.org/mt/121111370/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
