This series backports the seven security fixes that were released in libpcap 1.10.7 to the 1.10.4 recipe.
The same set of fixes has already been addressed on master by upgrading libpcap to 1.10.7. CVEs addressed (see the upstream 1.10.7 CHANGES): CVE-2026-0799 - Access M[] safely in the BPF interpreter. CVE-2026-31912 - Mind the program bounds in pcap_offline_filter(). CVE-2026-31911 - Fail opcodes safely in the BPF interpreter. CVE-2026-6244 - Avoid division by zero via pcap_offline_filter(). CVE-2026-6554 - Limit "ja L" looping in pcap_offline_filter(). CVE-2026-18313 - Fix a memory leak in rpcapd. CVE-2026-18238 - Fix RPCAP_MSG_PACKET validation. Each CVE is a separate file:// patch, ordered so they apply on top of each other. Where a fix touches the BPF filter interpreter it is translated to the 1.10.4 pcap_filter naming (the pcapint_* rename is newer), and prerequisites that are not part of these CVEs (the pcap_filter refactor's neighbouring changes, the "bogus" -> "invalid" rewording, the low-snaplen fixes) were dropped. The pcap-haiku.c hunk does not apply since 1.10.4's Haiku module does not yet call the filter. The upstream CHANGES/changelog hunk is not backported. Patches note the relevant adjustments. Verified by applying all seven patches in order onto a pristine libpcap 1.10.4 tree and building successfully, including with --enable-remote (rpcapd). Jaipaul Cheernam (7): libpcap: Fix CVE-2026-0799 libpcap: Fix CVE-2026-31912 libpcap: Fix CVE-2026-31911 libpcap: Fix CVE-2026-6244 libpcap: Fix CVE-2026-6554 libpcap: Fix CVE-2026-18313 libpcap: Fix CVE-2026-18238 .../libpcap/libpcap/01-CVE-2026-0799.patch | 64 +++ .../libpcap/libpcap/02-CVE-2026-31912.patch | 520 ++++++++++++++++++ .../libpcap/libpcap/03-CVE-2026-31911.patch | 42 ++ .../libpcap/libpcap/04-CVE-2026-6244.patch | 46 ++ .../libpcap/libpcap/05-CVE-2026-6554.patch | 87 +++ .../libpcap/libpcap/06-CVE-2026-18313.patch | 81 +++ .../libpcap/libpcap/07-CVE-2026-18238.patch | 219 ++++++++ .../libpcap/libpcap_1.10.4.bb | 7 + 8 files changed, 1066 insertions(+) create mode 100644 meta/recipes-connectivity/libpcap/libpcap/01-CVE-2026-0799.patch create mode 100644 meta/recipes-connectivity/libpcap/libpcap/02-CVE-2026-31912.patch create mode 100644 meta/recipes-connectivity/libpcap/libpcap/03-CVE-2026-31911.patch create mode 100644 meta/recipes-connectivity/libpcap/libpcap/04-CVE-2026-6244.patch create mode 100644 meta/recipes-connectivity/libpcap/libpcap/05-CVE-2026-6554.patch create mode 100644 meta/recipes-connectivity/libpcap/libpcap/06-CVE-2026-18313.patch create mode 100644 meta/recipes-connectivity/libpcap/libpcap/07-CVE-2026-18238.patch
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#245891): https://lists.openembedded.org/g/openembedded-core/message/245891 Mute This Topic: https://lists.openembedded.org/mt/121267540/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
