1795697 - (CVE-2022-46871) Update to latest libusrsctp

Status: RESOLVED FIXED

(Core :: WebRTC: Networking, task, P2)

Comment 1

[Byron Campen [:bwc]]

Attachment: Bug 1795697: Update libusrsctp. r?ng

Comment 2

[Byron Campen [:bwc]]

Attachment: Bug 1795697: Update Tsan suppressions for libusrsctp, and add a stack unwind to help avoid reentrancy problems. r?decoder,ng

Depends on D159616

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/1d383d85d648
Update libusrsctp. r=ng
https://hg.mozilla.org/integration/autoland/rev/1224847160b3
Update Tsan suppressions for libusrsctp, and add a stack unwind to help avoid reentrancy problems. r=decoder,ng

Comment 6

[Noemi Erli[:noemi_erli]]

https://hg.mozilla.org/mozilla-central/rev/1d383d85d648
https://hg.mozilla.org/mozilla-central/rev/1224847160b3

Comment 7

[Tom Ritter [:tjr]]

Attachment: advisory.txt

Comment 8

[Byron Campen [:bwc]]

Comment on attachment 9299067 [details]
Bug 1795697: Update Tsan suppressions for libusrsctp, and add a stack unwind to help avoid reentrancy problems. r?decoder,ng

ESR Uplift Approval Request

• If this is not a sec:{high,crit} bug, please state case for ESR consideration:
• User impact if declined:
• Fix Landed on Version: 108
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky): Has already been on nightly for a while, seems to work fine.

Comment 9

[Ryan VanderMeulen [:RyanVM]]

Comment on attachment 9299064 [details]
Bug 1795697: Update libusrsctp. r?ng

Approved for 102.7esr.

Comment 10

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-esr102/rev/523c7a1138c2
https://hg.mozilla.org/releases/mozilla-esr102/rev/f1d82db9f81b