Debian Patches
Status for libsocket-perl/2.038-1+deb13u1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| disable-network-tests.patch | skip network tests | gregor herrmann <gregoa@debian.org> | not-needed | vendor | 2020-07-10 | |
| CVE-2026-12087.patch | Backport CVE-2026-12087 patch From de19a0b0ad1900fef976c5c1400bd8f11ec6c6cb Mon Sep 17 00:00:00 2001 Date: Mon, 4 May 2026 16:12:49 +0100 Subject: [PATCH] cpan/Socket - Update to version 2.041 2.041 2026-03-26 [CHANGES] * Modernise Pod documentation formatting [BUGFIXES] * Fix reuse of `STRLEN len` variable in pack_ip_mreq_source() |
"Paul \"LeoNerd\" Evans" <leonerd@leonerd.org.uk> | not-needed | debian | https://github.com/Perl/perl5/commit/de19a0b0ad1900fef976c5c1400bd8f11ec6c6cb | 2026-08-17 |
| CVE-2026-12087-test.patch | Add a regression test for the pack_ip_mreq_source() fix pack_ip_mreq_source() validated the length of $source against a stale STRLEN len left over from $multiaddr, so a $source shorter than an in_addr passed validation and the unconditional 4 byte Copy() into imr_sourceaddr read past the end of its buffer, leaking adjacent heap memory into the returned string. . t/cve-2026-12087.t calls pack_ip_mreq_source() with a 1 byte $source and asserts that it croaks. The test fails without CVE-2026-12087.patch and passes with it; the rest of the test suite passes either way, so this is the only coverage of the issue. . Kept separate from CVE-2026-12087.patch so that patch stays identical to the referenced upstream commit. |
Kentaro Hayashi <kenhys@xdump.org> | no | debian | 2026-08-17 |
All known versions for source package 'libsocket-perl'
- 2.041-1 (forky, sid)
- 2.038-1+deb13u1 (trixie)
- 2.036-1 (bookworm)