Public bug reported: A new release of libslirp is available for merging from Debian.
Ubuntu: 4.9.3-1ubuntu1 Debian Unstable: 4.9.5-1 ### New Debian Changes ### libslirp (4.9.5-1) unstable; urgency=medium * new upstream release (Closes: #1148836, CVE-2026-95508): - Fix bounds-check in processing OEM commands - Fix bounds-check in dhcpv6 against MTU - Fix blocking sendto on UDP sockets -- Michael Tokarev <[email protected]> Thu, 24 Sep 2026 12:38:57 +0300 libslirp (4.9.4-1) unstable; urgency=medium * new upstream release: - Fix information leak on fragmented packets with different header lengths - Fix reporting oob output - Fix buffer trimming to ip6-announced length - slirp: permit guestfwd to vhost_addr/vnameserver_addr -- Michael Tokarev <[email protected]> Wed, 26 Aug 2026 10:41:12 +0300 ### Old Ubuntu Delta ### libslirp (4.9.3-1ubuntu1) stonking; urgency=medium * Merge with Debian unstable. (LP: #2155169) * Remaining changes: - d/rules, d/libslirp-dev.install: ship static library in the libslirp-dev binary package. (LP #2029431) -- Grayson Wolf <[email protected]> Fri, 05 Jun 2026 15:24:51 -0400 ** Affects: libslirp (Ubuntu) Importance: Wishlist Status: New ** Tags: needs-merge upgrade-software-version ** Changed in: libslirp (Ubuntu) Importance: Undecided => Wishlist ** Changed in: libslirp (Ubuntu) Milestone: None => ubuntu-26.11 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2171135 Title: Merge libslirp 4.9.5-1 from Debian for tenacious cycle To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libslirp/+bug/2171135/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
