Debian Patches

Status for libmodbus/3.1.6-2.1+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
Fix-typo.patch Fix typo "SZ Lin (林上智)" <szlin@debian.org> no 2018-09-27
Fix-float-endianness-issue-on-big-endian-arch.patch Fix float endianness issue on big endian arch
It converts float values depending on what order they come in.

This patch was modified from rm5248 [1]

[1] https://github.com/synexxus/libmodbus/commit/a511768e7fe7ec52d7bae1d9ae04e33f87a59627
"SZ Lin (林上智)" <szlin@debian.org> no 2018-12-19
0001-modbus_reply-fix-copy-paste-error-in-sanity-check-fi.patch modbus_reply: fix copy & paste error in sanity check (fixes #614)
While handling MODBUS_FC_WRITE_AND_READ_REGISTERS, both address offsets
must be checked, i.e. the read and the write address must be within the
mapping range.

At the moment, only the read address was considered, it looks like a
simple copy and paste error, so let's fix it.
Michael Heimpold <mhei@heimpold.de> no 2022-01-08
CVE-2024-10918-part1.patch Check length passed to modbus_reply (write_bit)
The modbus_reply function is designed to receive arguments
from modbus_receive. This patch avoid a wrong use of memcpy if
the user chooses to inject a bad length argument.

Thank you Nozomi Networks Labs Advisory for the report.

(cherry picked from commit df79a02feb253c0a9a009bcdbb21e47581315111)
Stéphane Raimbault <stephane.raimbault@gmail.com> no 2024-10-18
CVE-2024-10918-part2.patch Check length passed to modbus_reply (write_register)
Related to df79a02feb253c.

(cherry picked from commit d8a971e04d52be16bf405b51d934a30b8aa3f2c3)
Stéphane Raimbault <stephane.raimbault@gmail.com> no 2024-10-20
CVE-2024-10918-part3.patch Fix request length check in modbus_reply in RTU
- rename internal *_prepare_response_tid to *_get_response_tid
- change signature, don't need req length anymore
- remove misleading modification of req_length
- check of req length before use in memcpy for mask write register

Related to df79a02feb253c0a9a009bcdbb21e47581315111

(cherry picked from commit 81bf713cf029bfa5b5da87b945c1e8817b4398f9)
Stéphane Raimbault <stephane.raimbault@gmail.com> no 2024-10-21

All known versions for source package 'libmodbus'

Links