{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"Low"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"libpcap security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for libpcap is now available for openEuler-24.03-LTS",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":"This is the official web site of tcpdump, a powerful command-line \npacket analyzer; and libpcap, a portable C/C++ library for \nnetwork traffic capture.\n\nSecurity Fix(es):\n\npcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented.  If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.(CVE-2025-11961)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for libpcap is now available for openEuler-24.03-LTS.\n\nopenEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"Low",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"libpcap",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2026-1109",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1109"
			},
			{
				"summary":"CVE-2025-11961",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-11961&packageName=libpcap"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11961"
			},
			{
				"summary":"openEuler-SA-2026-1109 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-1109.json"
			}
		],
		"title":"An update for libpcap is now available for openEuler-24.03-LTS",
		"tracking":{
			"initial_release_date":"2026-01-22T09:58:23+08:00",
			"revision_history":[
				{
					"date":"2026-01-22T09:58:23+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-01-22T09:58:23+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-01-22T09:58:23+08:00",
			"id":"openEuler-SA-2026-1109",
			"version":"1.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"openEuler-24.03-LTS",
									"name":"openEuler-24.03-LTS"
								},
								"name":"openEuler-24.03-LTS",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-1.10.4-5.oe2403.src.rpm",
									"name":"libpcap-1.10.4-5.oe2403.src.rpm"
								},
								"name":"libpcap-1.10.4-5.oe2403.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-1.10.4-5.oe2403.x86_64.rpm",
									"name":"libpcap-1.10.4-5.oe2403.x86_64.rpm"
								},
								"name":"libpcap-1.10.4-5.oe2403.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-debuginfo-1.10.4-5.oe2403.x86_64.rpm",
									"name":"libpcap-debuginfo-1.10.4-5.oe2403.x86_64.rpm"
								},
								"name":"libpcap-debuginfo-1.10.4-5.oe2403.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-debugsource-1.10.4-5.oe2403.x86_64.rpm",
									"name":"libpcap-debugsource-1.10.4-5.oe2403.x86_64.rpm"
								},
								"name":"libpcap-debugsource-1.10.4-5.oe2403.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-devel-1.10.4-5.oe2403.x86_64.rpm",
									"name":"libpcap-devel-1.10.4-5.oe2403.x86_64.rpm"
								},
								"name":"libpcap-devel-1.10.4-5.oe2403.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"noarch",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-help-1.10.4-5.oe2403.noarch.rpm",
									"name":"libpcap-help-1.10.4-5.oe2403.noarch.rpm"
								},
								"name":"libpcap-help-1.10.4-5.oe2403.noarch.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-1.10.4-5.oe2403.aarch64.rpm",
									"name":"libpcap-1.10.4-5.oe2403.aarch64.rpm"
								},
								"name":"libpcap-1.10.4-5.oe2403.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-debuginfo-1.10.4-5.oe2403.aarch64.rpm",
									"name":"libpcap-debuginfo-1.10.4-5.oe2403.aarch64.rpm"
								},
								"name":"libpcap-debuginfo-1.10.4-5.oe2403.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-debugsource-1.10.4-5.oe2403.aarch64.rpm",
									"name":"libpcap-debugsource-1.10.4-5.oe2403.aarch64.rpm"
								},
								"name":"libpcap-debugsource-1.10.4-5.oe2403.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS"
									},
									"product_id":"libpcap-devel-1.10.4-5.oe2403.aarch64.rpm",
									"name":"libpcap-devel-1.10.4-5.oe2403.aarch64.rpm"
								},
								"name":"libpcap-devel-1.10.4-5.oe2403.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-1.10.4-5.oe2403.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.src",
					"name":"libpcap-1.10.4-5.oe2403.src as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-1.10.4-5.oe2403.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.x86_64",
					"name":"libpcap-1.10.4-5.oe2403.x86_64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-debuginfo-1.10.4-5.oe2403.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-debuginfo-1.10.4-5.oe2403.x86_64",
					"name":"libpcap-debuginfo-1.10.4-5.oe2403.x86_64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-debugsource-1.10.4-5.oe2403.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-debugsource-1.10.4-5.oe2403.x86_64",
					"name":"libpcap-debugsource-1.10.4-5.oe2403.x86_64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-devel-1.10.4-5.oe2403.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-devel-1.10.4-5.oe2403.x86_64",
					"name":"libpcap-devel-1.10.4-5.oe2403.x86_64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-help-1.10.4-5.oe2403.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-help-1.10.4-5.oe2403.noarch",
					"name":"libpcap-help-1.10.4-5.oe2403.noarch as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-1.10.4-5.oe2403.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.aarch64",
					"name":"libpcap-1.10.4-5.oe2403.aarch64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-debuginfo-1.10.4-5.oe2403.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-debuginfo-1.10.4-5.oe2403.aarch64",
					"name":"libpcap-debuginfo-1.10.4-5.oe2403.aarch64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-debugsource-1.10.4-5.oe2403.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-debugsource-1.10.4-5.oe2403.aarch64",
					"name":"libpcap-debugsource-1.10.4-5.oe2403.aarch64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS",
				"product_reference":"libpcap-devel-1.10.4-5.oe2403.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS:libpcap-devel-1.10.4-5.oe2403.aarch64",
					"name":"libpcap-devel-1.10.4-5.oe2403.aarch64 as a component of openEuler-24.03-LTS"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2025-11961",
			"notes":[
				{
					"text":"pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented.  If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.src",
					"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.x86_64",
					"openEuler-24.03-LTS:libpcap-debuginfo-1.10.4-5.oe2403.x86_64",
					"openEuler-24.03-LTS:libpcap-debugsource-1.10.4-5.oe2403.x86_64",
					"openEuler-24.03-LTS:libpcap-devel-1.10.4-5.oe2403.x86_64",
					"openEuler-24.03-LTS:libpcap-help-1.10.4-5.oe2403.noarch",
					"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.aarch64",
					"openEuler-24.03-LTS:libpcap-debuginfo-1.10.4-5.oe2403.aarch64",
					"openEuler-24.03-LTS:libpcap-debugsource-1.10.4-5.oe2403.aarch64",
					"openEuler-24.03-LTS:libpcap-devel-1.10.4-5.oe2403.aarch64"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.src",
						"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.x86_64",
						"openEuler-24.03-LTS:libpcap-debuginfo-1.10.4-5.oe2403.x86_64",
						"openEuler-24.03-LTS:libpcap-debugsource-1.10.4-5.oe2403.x86_64",
						"openEuler-24.03-LTS:libpcap-devel-1.10.4-5.oe2403.x86_64",
						"openEuler-24.03-LTS:libpcap-help-1.10.4-5.oe2403.noarch",
						"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.aarch64",
						"openEuler-24.03-LTS:libpcap-debuginfo-1.10.4-5.oe2403.aarch64",
						"openEuler-24.03-LTS:libpcap-debugsource-1.10.4-5.oe2403.aarch64",
						"openEuler-24.03-LTS:libpcap-devel-1.10.4-5.oe2403.aarch64"
					],
					"details":"libpcap security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1109"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"LOW",
						"baseScore":1.9,
						"vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.src",
						"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.x86_64",
						"openEuler-24.03-LTS:libpcap-debuginfo-1.10.4-5.oe2403.x86_64",
						"openEuler-24.03-LTS:libpcap-debugsource-1.10.4-5.oe2403.x86_64",
						"openEuler-24.03-LTS:libpcap-devel-1.10.4-5.oe2403.x86_64",
						"openEuler-24.03-LTS:libpcap-help-1.10.4-5.oe2403.noarch",
						"openEuler-24.03-LTS:libpcap-1.10.4-5.oe2403.aarch64",
						"openEuler-24.03-LTS:libpcap-debuginfo-1.10.4-5.oe2403.aarch64",
						"openEuler-24.03-LTS:libpcap-debugsource-1.10.4-5.oe2403.aarch64",
						"openEuler-24.03-LTS:libpcap-devel-1.10.4-5.oe2403.aarch64"
					]
				}
			],
			"threats":[
				{
					"details":"Low",
					"category":"impact"
				}
			],
			"title":"CVE-2025-11961"
		}
	]
}