From 446c0f85b8cb39c360fe684762132dd26a634dd7 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Mon, 7 Sep 2026 13:04:54 +0200 Subject: [PATCH] package/libpcap: security bump version to 1.10.7 https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.10.7/CHANGES Fixes the following CVEs: CVE-2026-0799: Access M[] safely in the BPF interpreter. CVE-2026-31912: Mind the program bounds in pcap_offline_filter(). CVE-2026-31911: Fail opcodes safely in the BPF interpreter. CVE-2026-6244: Avoid division by zero via pcap_offline_filter(). CVE-2026-6554: Limit "ja L" looping in pcap_offline_filter(). CVE-2026-18313: Fix a memory leak in rpcapd. CVE-2026-18238: Fix RPCAP_MSG_PACKET validation. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/libpcap/libpcap.hash | 4 ++-- package/libpcap/libpcap.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libpcap/libpcap.hash b/package/libpcap/libpcap.hash index 098b059fdb..87cc77338b 100644 --- a/package/libpcap/libpcap.hash +++ b/package/libpcap/libpcap.hash @@ -1,6 +1,6 @@ # Locally calculated after checking pgp signature -# https://www.tcpdump.org/release/libpcap-1.10.6.tar.gz.sig -sha256 872dd11337fe1ab02ad9d4fee047c9da244d695c6ddf34e2ebb733efd4ed8aa9 libpcap-1.10.6.tar.gz +# https://www.tcpdump.org/release/libpcap-1.10.7.tar.gz.sig +sha256 0b394ac90dbc0a9838ff97468e05c9c9a3e873dec2514cd58db65d859d296e31 libpcap-1.10.7.tar.gz # Hash for license file: sha256 8a54594d257e14a5260ac770f1633516cb51e3fc28c40136ce2697014eda7afd LICENSE diff --git a/package/libpcap/libpcap.mk b/package/libpcap/libpcap.mk index c4feee5766..a501ce2962 100644 --- a/package/libpcap/libpcap.mk +++ b/package/libpcap/libpcap.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBPCAP_VERSION = 1.10.6 +LIBPCAP_VERSION = 1.10.7 LIBPCAP_SITE = https://www.tcpdump.org/release LIBPCAP_LICENSE = BSD-3-Clause LIBPCAP_LICENSE_FILES = LICENSE