MNBSD-2022-1: multiple issues with memory handling in libmport

Description

Fix multiple use after free and buffer overflows in libmport, a part of mport package manager.

Affected Versions

mport

Specific versions:

• 0.4.0
• 0.5.0
• 0.6.0
• 0.7.0
• 0.8.0
• 0.9.0
• 1.0.0
• 1.1.0
• 1.2.0
• 2.0.0
• 2.0.1
• 2.0.2
• 2.1.0
• 2.1.1
• 2.1.2
• 2.1.3
• 2.1.4

Recommendations

No specific recommendations provided.

References

• https://github.com/MidnightBSD/src/commit/3deeda3406d66bd4db3a9f464ae7f626910afccb

Additional Information

Aliases: None

Published: February 10, 2022
Last Modified: February 10, 2022