Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).

net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch

@@ -0,0 +1,16 @@
+diff -Nurp net-snmp-5.9.4-orig/apps/snmptrapd_handlers.c net-snmp-5.9.4/apps/snmptrapd_handlers.c
+--- net-snmp-5.9.4-orig/apps/snmptrapd_handlers.c	2026-01-12 08:08:23.751152850 +0000
++++ net-snmp-5.9.4/apps/snmptrapd_handlers.c	2026-01-12 08:10:29.907152850 +0000
+@@ -1112,6 +1112,12 @@ snmp_input(int op, netsnmp_session *sess
+ 	     */
+             if (pdu->trap_type == SNMP_TRAP_ENTERPRISESPECIFIC) {
+                 trapOidLen = pdu->enterprise_length;
++                /*
++                 * Drop packets that would trigger an out-of-bounds trapOid[]
++                 * access.
++                 */
++                if (trapOidLen < 1 || trapOidLen > OID_LENGTH(trapOid) - 2)
++                    return 1;
+                 memcpy(trapOid, pdu->enterprise, sizeof(oid) * trapOidLen);
+                 if (trapOid[trapOidLen - 1] != 0) {
+                     trapOid[trapOidLen++] = 0;

net-snmp.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Jan 12 11:35:23 UTC 2026 - Alexander Bergmann <abergmann@suse.com>
+
+- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
+  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch
+
 -------------------------------------------------------------------
 Thu Nov 14 16:53:39 UTC 2024 - Alexander Bergmann <abergmann@suse.com>
 

net-snmp.spec

@@ -64,6 +64,7 @@ Patch13:        net-snmp-5.9.4-fix-create-v3-user-outfile.patch
 Patch14:        net-snmp-5.9.4-subagent-set-response.patch
 Patch15:        net-snmp-5.9.4-fixed-python2-bindings.patch
 Patch16:        net-snmp-5.9.4-add-netgroups-functionality.patch
+Patch17:        net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch
 BuildRequires:  %{python_module devel}
 BuildRequires:  %{python_module setuptools}
 BuildRequires:  autoconf