sngrep-1.9.0-4.fc45
- sngrep-1.9.0-4.fc45
Backport fixes for two memory-safety issues reported upstream (irontec/sngrep#589):
- CVE-2026-121943: off-by-one length guard in the SIP parser accepts a 10240-byte payload that fills the stack buffer with no NUL terminator, so regexec()/strdup() read past its end (OOB read).
- CVE-2026-121944: an NFLOG TLV with length < 4 never advances the parse offset, making the capture thread spin forever (DoS).
Submitted upstream as irontec/sngrep#591 and #592.