Skip to content

[Deepin Integration]~[v25-Release] Fix CVE-2023-7256: use-after-free/double-free in sock_initaddress() by deepin-ci-robot@deepin-community/libpcap by deepin-community-ci-bot[bot] #13392

@deepin-bot

Description

@deepin-bot

Package information | 软件包信息

包名 版本
libpcap 1.10.1-4deepin1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4122/testing/ ./

Changelog | 更新信息

libpcap (1.10.1-4deepin1) unstable; urgency=medium

  • Fix CVE-2023-7256: Use-after-free/double-free in sock_initaddress()
    by having the function return a pointer to the addrinfo list on
    success (or NULL on failure) instead of using an output parameter,
    avoiding ambiguity about whether freeaddrinfo() has already been
    called.

Metadata

Metadata

Type

No type
No fields configured for issues without a type.

Projects

Status
In progress

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions