[CLSA-2026:1788268890] Fix CVE(s): CVE-2025-68615
Type:
security
Severity:
Critical
Release date:
2026-09-01 13:21:41 UTC
Description:
* SECURITY UPDATE: stack buffer overflow in snmptrapd trap OID handling - debian/patches/CVE-2025-68615.patch: bound the trapOid[] copies in snmp_input() and require an OBJECT IDENTIFIER varbind in apps/snmptrapd_handlers.c. - CVE-2025-68615
CVEs fixed:
Updated packages:
  • libsnmp-base_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_all.deb
    sha:bb9b848c5083865aaaa77ce7d0a6a71e092c8511
  • libsnmp-dev_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_amd64.deb
    sha:8645a35a36e2f5ba2ef63af1b9b1309dd392d773
  • libsnmp-perl_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_amd64.deb
    sha:1cddc506da8f21c83de4705f35ddb0b2c867a32f
  • libsnmp30_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_amd64.deb
    sha:95749817773771e5964d2f260e56482224134ac3
  • python-netsnmp_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_amd64.deb
    sha:45b339e5c4f2ef0f25be431650056dff87550fc4
  • snmp_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_amd64.deb
    sha:2391a2626616e190ee23cf638045e2e4eeb342cf
  • snmpd_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_amd64.deb
    sha:20f9dfa462a4a787dd266725fba6348f9ad57458
  • snmptrapd_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_amd64.deb
    sha:c4349f687afef16bca3c6f609d0b01bb23840128
  • tkmib_5.7.3+dfsg-1.8ubuntu3.8+tuxcare.els1_all.deb
    sha:22b9419326b0ffe516b34a25c6624148508c9cb0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.