[<prev] [next>] [day] [month] [year] [list]
Message-ID: <7e311969-c78b-4377-a37e-54ff96f06546@oracle.com>
Date: Fri, 6 Sep 2024 17:39:48 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: libpcap 1.10.5 released with two security fixes
https://seclists.org/tcpdump/2024/q3/3 announced:
> I hope this finds you well. tcpdump 4.99.5 and libpcap 1.10.5 are now
> available in the usual places [1]. It has been almost 1.5 years since
> the previous .4 releases, so this time it is many more bug fixes and
> improvements than usual. Among other things libpcap 1.10.5 addresses
> two CVEs that only apply if libpcap was built with the remote packet
> capture support (which is not the default).
> [...]
> 1: https://www.tcpdump.org/release/
https://www.tcpdump.org/index.html#latest-releases further says:
> This libpcap release makes various improvements and bug fixes
> available whilst the work on libpcap 1.11 is still in progress.
> Among other things this includes the fixes to two vulnerabilities
> (CVE-2023-7256 discovered by Dora Sweet and CVE-2024-8006 discovered
> by Flavio Toffalini and reported by Nicolas Badoux) in the remote
> packet capture code, which is disabled by default.
--
-Alan Coopersmith- alan.coopersmith@...cle.com
Oracle Solaris Engineering - https://blogs.oracle.com/solaris
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
