Описание
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
Список пакетов
Image SLES15-SP7-Azure-3P
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-Azure-Basic
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-Azure-Standard
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-BYOS-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-BYOS-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-BYOS-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-CHOST-BYOS-Aliyun
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-CHOST-BYOS-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-CHOST-BYOS-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-CHOST-BYOS-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-CHOST-BYOS-GDC
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-EC2-ECS-HVM
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-GCE-3P
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-HPC-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-HPC-BYOS-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-HPC-BYOS-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-HPC-BYOS-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-Hardened-BYOS-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-Hardened-BYOS-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-Hardened-BYOS-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Azure-3P
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-BYOS-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-BYOS-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-BYOS-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-GCE-3P
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Hardened-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAP-Hardened-GCE
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAPCAL-Azure
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAPCAL-EC2
libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-SAPCAL-GCE
libpcap1-1.10.5-150700.3.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libpcap-devel-1.10.5-150700.3.7.1
libpcap1-1.10.5-150700.3.7.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
libpcap1-32bit-1.10.5-150700.3.7.1
Ссылки
- Link for SUSE-SU-2026:0063-1
- E-Mail link for SUSE-SU-2026:0063-1
- SUSE Security Ratings
- SUSE Bug 1255765
- SUSE CVE CVE-2025-11961 page
Описание
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
Затронутые продукты
Image SLES15-SP7-Azure-3P:libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-Azure-Basic:libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-Azure-Standard:libpcap1-1.10.5-150700.3.7.1
Image SLES15-SP7-BYOS-Azure:libpcap1-1.10.5-150700.3.7.1
Ссылки
- CVE-2025-11961
- SUSE Bug 1255765