libpcap 1.10.7 fixes 7 vulnerabilities

[Denis Ovsienko <denis () ovsienko info>]

Hello all.

libpcap 1.10.7 has been published yesterday, its main focus is fixing of
the following vulnerabilities:

* CVE-2026-0799 (reported by Include Security in 2018, sponsored by
  Mozilla under the Secure Open Source program, but reproduced only in
  2026)
* CVE-2026-31912
* CVE-2026-31911 (reported by FuzzAnything Organization)
* CVE-2026-6244
* CVE-2026-6554 (reported by Kaixuan LI)
* CVE-2026-18313
* CVE-2026-18238

All users are advised to update.  For the CVE-2026-31912 fix to have
effect, application that use the now deprecated bpf_filter() must be
migrated to pcap_offline_filter().

Also this release makes it clear that the remote packet capture code is
still an experimental work in progress and is not yet safe enough for
production or non-trusted environments.

-- 
    Denis Ovsienko
_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s