Upgrade libpcap version to 1.10.5 to fix CVE-2024-8006 (#10797)

Author: realsdx

SPECS/libpcap/libpcap.signatures.json

@@ -1,5 +1,5 @@
 {
-  "Signatures": {
-    "libpcap-libpcap-1.10.4.tar.gz": "1783ff39f2a6eb99a7625c7ea471782614c94965ea934b6b22ac6eb38db266bc"
-  }
-}
+ "Signatures": {
+  "libpcap-libpcap-1.10.5.tar.gz": "6cd9835338ca334b699b1217e2aee2b873463c76aafd19b8b9d4710554f025ac"
+ }
+}

SPECS/libpcap/libpcap.spec

@@ -1,6 +1,6 @@
 Summary:        C/C++ library for network traffic capture
 Name:           libpcap
-Version:        1.10.4
+Version:        1.10.5
 Release:        1%{?dist}
 License:        BSD
 Vendor:         Microsoft Corporation
@@ -31,9 +31,10 @@ This package contains libraries and header files for
 developing applications that use %{name}.
 
 %prep
-%setup -q -n %{name}-%{name}-%{version}
+%autosetup -n %{name}-%{name}-%{version}
 
 %build
+./autogen.sh
 %configure
 make %{?_smp_mflags}
 
@@ -68,6 +69,9 @@ make DESTDIR=%{buildroot} install
 %{_mandir}/man7/*
 
 %changelog
+* Mon Oct 21 2024 Sudipta Pandit <sudpandit@microsoft.com> - 1.10.5-1
+- Upgrade to version 1.10.5 (fixes CVE-2024-8006)
+
 * Fri Oct 27 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.10.4-1
 - Auto-upgrade to 1.10.4 - Azure Linux 3.0 - package upgrades
 

cgmanifest.json

@@ -10481,8 +10481,8 @@
         "type": "other",
         "other": {
           "name": "libpcap",
-          "version": "1.10.4",
-          "downloadUrl": "https://github.com/the-tcpdump-group/libpcap/archive/libpcap-1.10.4.tar.gz"
+          "version": "1.10.5",
+          "downloadUrl": "https://github.com/the-tcpdump-group/libpcap/archive/libpcap-1.10.5.tar.gz"
         }
       }
     },