[Deepin Integration]~[v25-Release] fix(cve): CVE-2026-31911 - CVE-2026-31911: Fail opcodes safely in the BPF interpreter. by deepin-ci-robot@deepin-community/libpcap by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
libpcap	1.10.1-4deepin4

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4576/testing/ ./

Changelog | 更新信息

libpcap (1.10.1-4deepin4) unstable; urgency=medium

[ deepin-ci-robot ]

• fix(cve): CVE-2026-31911 (medium) - CVE-2026-31911: Fail opcodes
  safely in the BPF interpreter. Upstream: https://github.com/the-
  tcpdump-
  group/libpcap/commit/a715bcdde830299cba4171514385cb17ec19b6e9.patch
• fix(cve): CVE-2026-18238 (medium) - CVE-2026-18238: Fix
  RPCAP_MSG_PACKET validation. Upstream: https://github.com/the-
  tcpdump-
  group/libpcap/commit/b9590d482986d64673712460aae1d48d11fa0473
• fix(cve): CVE-2026-6244 (medium) - CVE-2026-6244: Avoid division by
  zero via pcap_offline_filter() Upstream: https://github.com/the-
  tcpdump-
  group/libpcap/commit/0b2b1ad4a1796513613ff68e9dc09049cc8e0af4
• fix(cve): CVE-2026-6554 (medium) - CVE-2026-6554: Limit "ja L"
  looping in pcap_offline_filter() Upstream: https://github.com/the-
  tcpdump-
  group/libpcap/commit/ff3c83475ac303c6b681c52ad0b6e14795a8e0ce
• fix(cve): CVE-2026-0799 (high) - CVE-2026-0799: Access M[] safely in
  the BPF interpreter. Upstream: https://github.com/the-tcpdump-
  group/libpcap/commit/48e8960a7108e9e828f9d7bdc7e97bdab841aec7.patch
• fix(cve): CVE-2026-31912 (medium) - CVE-2026-31912: Mind the program
  bounds in pcap_offline_filter() Upstream: https://github.com/the-
  tcpdump-
  group/libpcap/commit/d3f358d3cffbe1ecb94d5284b3e81f052a0adcb9

[ lichenggang ]

• fix(cve): CVE-2026-31912 - Backport the upstream BPF_JA bounds
  check, a jump could still move the program counter out of the filter
  program.
• Guard constant BPF shifts by more than 31 bits in the interpreter
  and the validator (upstream commit 1d1ea168).

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#4576