libffi
Version: 3.6.0A portable foreign-function interface library.
What is "libffi"?
A portable foreign-function interface library.
How to use this package
Quick install
Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.
min add libffiDeclare as a task dependency in minimal.toml
Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.
[tasks.dev]
packages = ["libffi"]Build-time vs runtime
Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.
min add --build libffi
min add --runtime libffiDependencies (4)
| Name | Version | Kind |
|---|---|---|
| base-bootstrap | — | build |
| glibc CVE:5 | 2.43 | runtime |
| make | 4.4.1 | build |
| toolchain | — | build |
Dependency changes
Loading diff…
Could not load the dependency diff for one of the selected versions. Try again.
No dependency changes
The two selected versions have identical direct dependencies.
| Name | Version | Kind |
|---|
-
- Lines: +1 Deps: 4Released:
- Lines: -1 Deps: 4Released:
- Lines: +3 / -1 Deps: 4Released:
- Lines: +3 / -1 Deps: 4Released:
- Lines: +2 / -2 Deps: 4Released:
- Lines: +2 / -2 Deps: 4 ( +1 / -1 )Released:
- Lines: +1 / -1 Deps: 4Released:
-
-
- Lines: +1 / -1 Deps: 4Released:
- Lines: +1 / -1 Deps: 4Released:
- Lines: +7 Deps: 4Released:
- Lines: +1 Deps: 4Released:
- Lines: +9 / -1 Deps: 4Released:
- Lines: +6 / -1 Deps: 4Released:
- Lines: +5 / -2 Deps: 4Released:
- Lines: +44 Deps: 4 ( +4 )Released:
-
No direct advisories
This package inherits 5 transitive advisories from its dependencies.
Showing 5 transitive advisories via libffi's dependencies
No advisories match the current filters.
| Critical ( 1 ) | ||||||
| Status | IDs | Package | Severity | |||
|---|---|---|---|---|---|---|
| Under investigation | glibc | Critical: 9.8 | ||||
Summaryscanf %mc off-by-one heap buffer overflow ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H References
| ||||||
| High ( 3 ) | ||||||
| Status | IDs | Package | Severity | |||
| Under investigation | glibc | High: 7.5 | ||||
SummaryPotential buffer under-read in ungetwc ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
| Under investigation | glibc | High: 7.5 | ||||
Summaryiconv crash due to assertion failure with untrusted input ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H References
| ||||||
| Under investigation | glibc | High: 7.5 | ||||
Summarygethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
| Medium ( 1 ) | ||||||
| Status | IDs | Package | Severity | |||
| Under investigation | glibc | Medium: 5.4 | ||||
Summarygethostbyaddr and gethostbyaddr_r return invalid DNS hostnames ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N | ||||||
| Low ( 0 ) | ||||||
| Status | IDs | Package | Severity | |||
| Unknown ( 0 ) | ||||||
| Status | IDs | Package | Severity | |||
43 components
No components match your filter.
| Packages | Version |
|---|---|
| libffi ROOT | 3.6.0 |
| acl | 2.4.0 |
| attr | 2.6.0 |
| bash | 5.3 |
| bash-bootstrap | 5.3 |
| binutils | 2.46.1 |
| bison | 3.8.2 |
| bzip2 | 1.0.8 |
| coreutils | 9.11 |
| diffutils | 3.12 |
| expat | 2.8.2 |
| file | 5.48 |
| findutils | 4.10.0 |
| flex | 2.6.4 |
| gawk | 5.4.0 |
| gawk-bootstrap | 5.3.2 |
| gcc | 15.2.0 |
| gdbm | 1.26 |
| glibc | 2.43 |
| gmp | 6.3.0 |
| grep | 3.12 |
| gzip | 1.14 |
| libcap | 2.78 |
| linux_headers | 6.12.43 |
| lz4 | 1.10.0 |
| m4 | 1.4.21 |
| make | 4.4.1 |
| mpc | 1.4.0 |
| mpfr | 4.2.2 |
| ncurses | 6.6 |
| openssl | 3.6.3 |
| pcre2 | 10.47 |
| perl | 5.42.2 |
| pkgconf | 2.5.1 |
| python | 3.14.6 |
| readline | 8.3 |
| sed | 4.10 |
| sqlite | 3.50.4 |
| tar | 1.35 |
| util-linux | 2.42.2 |
| xz | 5.8.3 |
| zlib | 1.3.2 |
| zstd | 1.5.7 |