Re: Net-SNMP 5.9.5. and 5.10.pre2 released to address snmptrapd security vulnerability

--===============3459628295319448570==
Content-Type: multipart/alternative; boundary="00000000000040c85f0646984057"

--00000000000040c85f0646984057
Content-Type: text/plain; charset="UTF-8"

On Tue, 23 Dec 2025 at 10:39, Wes Hardaker via Net-snmp-coders <
[email protected]> wrote:

>
> Today we are releasing Net-SNMP 5.9.5 and 5.10.pre2, which addresses a
> critical security vulnerability (CVE-2025-68615) in snmptrapd.
>
Hi Wes,
  Any chance of you or someone else pointing out the relevant commits that
fixed this?
From a brief scan, I can see a handful it might be.

For stable distributions such as the ones in Debian,  we need to have a
minimal change set.
For our sid distribution, 5.9.5 will do the job fine, it's just the older
ones such as forky and trixie will need to be patched.

 - Craig

--00000000000040c85f0646984057
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Tue, 23 Dec 2025 at 10:39, Wes Hardake=
r via Net-snmp-coders &lt;<a href=3D"mailto:[email protected]=
ge.net">[email protected]</a>&gt; wrote:</div><div clas=
s=3D"gmail_quote gmail_quote_container"><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);pad=
ding-left:1ex"><br>
Today we are releasing Net-SNMP 5.9.5 and 5.10.pre2, which addresses a<br>
critical security vulnerability (CVE-2025-68615) in snmptrapd.<br></blockqu=
ote><div>Hi Wes,</div><div>=C2=A0 Any chance of you or someone else pointin=
g out the relevant commits that fixed this?</div><div>From a brief scan, I =
can see a handful it might be.</div><div><br></div><div>For stable distribu=
tions such as the ones in Debian,=C2=A0 we need to have a minimal change se=
t.</div><div>For our sid distribution, 5.9.5 will do the job fine, it&#39;s=
 just the older ones such as forky and trixie will need to be patched.</div=
><div><br></div><div>=C2=A0- Craig</div><br></div></div>

--00000000000040c85f0646984057--


--===============3459628295319448570==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============3459628295319448570==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

--===============3459628295319448570==--