ELSA-2023-2969

ELSA-2023-2969 - net-snmp security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-05-24

Description

[5.8-27.0.1]
- fix error index value when snmpget is used a proxy pass [Orabug: 34905643]

[1:5.8-27]
- fix memory leak due of proc file creating (#2105957)
- fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
- fix memory leak when ipv6 disable set to 1 (#2151537)
- fix proxy timeout issue (#2160723)

[1:5.8-26]
- backport two memory leaks from upstream (#2134635)

Related CVEs

CVE-2022-44793

CVE-2022-44792

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	net-snmp-5.8-27.0.1.el8.src.rpm	600075e3e1b880aab0b48203a0a74bcf	-
	net-snmp-5.8-27.0.1.el8.aarch64.rpm	77e57184139f4c9911be1fc3d6fbd80e	-
	net-snmp-agent-libs-5.8-27.0.1.el8.aarch64.rpm	8b6405149b6a6045e3ae1dbc449d0d16	-
	net-snmp-devel-5.8-27.0.1.el8.aarch64.rpm	bacf02d7e67dce5673aad7dc8b7f99d5	-
	net-snmp-libs-5.8-27.0.1.el8.aarch64.rpm	11a8a399580aae8cda8b1398c6230621	-
	net-snmp-perl-5.8-27.0.1.el8.aarch64.rpm	21cd64966e02c6deee2e67d74eba7442	-
	net-snmp-utils-5.8-27.0.1.el8.aarch64.rpm	c47bee6e93516ec24626155bf4d5edc9	-
Oracle Linux 8 (x86_64)	net-snmp-5.8-27.0.1.el8.src.rpm	600075e3e1b880aab0b48203a0a74bcf	-
	net-snmp-5.8-27.0.1.el8.x86_64.rpm	750d780fc7ac39aa98db97ded706a495	-
	net-snmp-agent-libs-5.8-27.0.1.el8.i686.rpm	e34cd9ff07c9155a464654b29773288b	-
	net-snmp-agent-libs-5.8-27.0.1.el8.x86_64.rpm	c51e4bb443560c55e4b0eb80ef3b07cf	-
	net-snmp-devel-5.8-27.0.1.el8.i686.rpm	5c20a721974933fb1601c8fa361cb828	-
	net-snmp-devel-5.8-27.0.1.el8.x86_64.rpm	620e23cce1e3f87ce5778372c0fd62df	-
	net-snmp-libs-5.8-27.0.1.el8.i686.rpm	68c30daebb34ab36b847365955d69d9c	-
	net-snmp-libs-5.8-27.0.1.el8.x86_64.rpm	73e73f53181ea34a7dab1ab877455c8f	-
	net-snmp-perl-5.8-27.0.1.el8.x86_64.rpm	1fe9d8b029d4a918338daf33db04d932	-
	net-snmp-utils-5.8-27.0.1.el8.x86_64.rpm	269c7cdb1fde6fce027fed5964c3fe63	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team