[ubuntu/jammy-updates] libbpf 0.5.0-1ubuntu22.04.1 (Accepted)

Mon Dec 5 10:28:10 UTC 2022

libbpf (0.5.0-1ubuntu22.04.1) jammy-security; urgency=medium

  * SECURITY UPDATE: use-after-free vulnerability
    - debian/patches/CVE-2022-3534.patch: Fix use-after-free in
      btf_dump_name_dups
    - CVE-2022-3534
  * SECURITY UPDATE: null pointer dereference vulnerability
    - debian/patches/CVE-2022-3606.patch: Fix null-pointer dereference in
      find_prog_by_sec_insn()
    - CVE-2022-3606

Date: 2022-12-01 10:19:09.075973+00:00
Changed-By: Nishit Majithia <nishit.majithia at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/libbpf/0.5.0-1ubuntu22.04.1
-------------- next part --------------
Sorry, changesfile not available.