Ubuntu
libbpf package

libbpf 0.8.0-1ubuntu22.10.1 source package in Ubuntu

Changelog

libbpf (0.8.0-1ubuntu22.10.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: heap overflow vulnerability
    - debian/patches/CVE-2021-45940_45941.patch: Use elf_getshdrnum()
      instead of e_shnum
    - CVE-2021-45940
    - CVE-2021-45941
  * SECURITY UPDATE: memory leak due to argument reg_name
    - debian/patches/CVE-2022-3533.patch: Fix memory leak in
      parse_usdt_arg()
    - CVE-2022-3533
  * SECURITY UPDATE: use-after-free vulnerability
    - debian/patches/CVE-2022-3534.patch: Fix use-after-free in
      btf_dump_name_dups
    - CVE-2022-3534
  * SECURITY UPDATE: null pointer dereference vulnerability
    - debian/patches/CVE-2022-3606.patch: Fix null-pointer dereference in
      find_prog_by_sec_insn()
    - CVE-2022-3606

 -- Nishit Majithia <email address hidden>  Thu, 01 Dec 2022 15:24:36 +0530

Upload details

Uploaded by:
Nishit Majithia
Uploaded to:
Kinetic
Original maintainer:
Ubuntu Developers
Architectures:
linux-any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libbpf_0.8.0.orig.tar.gz 920.5 KiB f4480242651a93c101ece320030f6b2b9b437f622f807719c13cb32569a6d65a
libbpf_0.8.0-1ubuntu22.10.1.debian.tar.xz 10.3 KiB e7479129aa877f094cfe19afac9d9603650496098cdb196c0ab82ffe24330508
libbpf_0.8.0-1ubuntu22.10.1.dsc 1.8 KiB a5a0fe4575b7f04aab39384427d29c05b80aeabfb9c12616fa4d3966bdc13a7d

View changes file

Binary packages built by this source

libbpf-dev: No summary available for libbpf-dev in ubuntu kinetic.

No description available for libbpf-dev in ubuntu kinetic.

libbpf0: No summary available for libbpf0 in ubuntu kinetic.

No description available for libbpf0 in ubuntu kinetic.

libbpf0-dbgsym: No summary available for libbpf0-dbgsym in ubuntu kinetic.

No description available for libbpf0-dbgsym in ubuntu kinetic.