OVMSA-2020-0052 - net-snmp security update
| Type: | SECURITY |
| Severity: | IMPORTANT |
| Release Date: | 2020-11-18 |
Description
[1:5.5-60.0.1]
- Add Oracle ACFS to hrStorage (John Haxby) [orabug 18510373]
[1:5.5-60.el6.2]
- fix CVE-2020-15862 (#1875960)
[1:5.5-60.el6.1]
- fix fsync issue (#1703099)
[1:5.5-60.el6]
- fix reading of ipAddressTable from /proc/net/if_inet6 on Linux (#1396337)
[1:5.5-59.el6]
- fix parser for SCTP stats (#1329333)
[1:5.5-58.el6]
- Resolves: #1315481 - An SNMPv3 request with a small max message size can lead to SNMPv1/2c bulk requests timing out
[1:5.5-57.el6]
- Removed debug output in large FD_SET processing
[1:5.5-56.el6]
- Fixed crash when processing large file descriptor (#1261727)
[1:5.5-55.el6]
- Fixed 'clientaddr' option for UDPv6 client messages (#1279501)
- Increased maximum size of AgentX packets (#1271196).
- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
(#1250023).
- Fixed client utilities reporting 'read_config_store open failure on
/var/lib/net-snmp/snmpapp.conf' (#1246568)
- Fixed typos in NET-SNMP-AGENT-MIB.txt (#1241865)
- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1227640)
- Restored message about duplicate IP address (#1227374)
- Fixed fd leak in sctp statistics (#1291054)
[1:5.5-54.el6_7.1]
- Fixed parsing of invalid variables in incoming packets (#1248410)
[1:5.5-54]
- Quicker loading of IP-MIB::ipAddrTable (#1191393)
[1:5.5-53]
- Quicker loading of IP-MIB::ipAddressTable (#1191393)
[1:5.5-52]
- Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is
received (#CVE-2014-3565)
[1:5.5-51]
- added faster caching into IP-MIB::ipNetToMediaTable (#789500)
- fixed compilation with '-Werror=format-security' (#1181994)
- added clear error message when port specified in 'clientaddrr' config
option cannot be bound (#886468)
- fixed error check in IP-MIB::ipAddressTable (#1012430)
- fixed agentx client crash on failed response (#1023570)
- fixed dashes in net-snmp-config.h (#1034441)
- fixed crash on monitor trigger (#1050970)
- fixed 'netsnmp_assert 1 == new_val->high failed' message in system log
(#1065210)
- fixed parsing of 64bit counters from SMUX subagents (#1069046)
- Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
(#1070075)
- fixed net-snmp-create-v3-user to have the same content on 32 and 64bit
installations (#1073544)
- fixed IPADDRESS value length in Python bindings (#1100099)
- fixed hrStorageTable to contain 31 bits integers (#1104293)
- fixed links to developer man pages (#1119567)
- fixed storageUseNFS functionality in hrStorageTable (#1125793)
- fixed netsnmp_set Python bindings call truncating at the first '\000'
character (#1126914)
- fixed log level of SMUX messages (#1140234)
- use python/README to net-snmp-python subpackage (#1157373)
- fixed forwarding of traps with RequestID=0 in snmptrapd (#1146948)
- fixed typos in NET-SNMP-PASS-MIB and SMUX-MIB (#1162040)
- fixed close() overhead of extend commands (#1188295)
- fixed lmSensorsTable not reporting sensors with duplicate names (#967871)
- fixed hrDeviceTable with interfaces with large ifIndex (#1195547)
[1:5.5-50]
- added 'diskio' option to snmpd.conf, it's possible to monitor only selected
devices in diskIOTable (#990674)
- fixed CVE-2014-2284: denial of service flaw in Linux implementation of
ICMP-MIB (#1073223)
- added cache to hrSWRunTable to provide consistent results (#1007634)
- skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
- fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)
- fixed HOST-RESOURCES-MIB::hrSystemProcesses (#1134335)
[1:5.5-49]
- fixed snmp daemons and utilities crashing in FIPS mode (#1001830)
- added support of btrfs filesystem in hrStorageTable (#1006706)
[1:5.5-48]
- fixed issues found by static analysis tools
[1:5.5-47]
- restored ABI of read_configs_* functions
[1:5.5-46]
- fixed parsing of bulk responses (#983116)
- added support of vzfs filesystem in hrStorageTable (#989498)
- fixed endless loop when parsing sendmail configuration file with
queue groups (#991213)
[1:5.5-45]
- fixed potential memory leak on realloc failure when processing 'extend'
option (#893119)
- added precise enumeration of configuration files searched to
snmp_config(5) man page (#907571)
- set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
- fixed kernel threads in hrSWRunTable (#919952)
- fixed various error codes in Python module (#955771)
- fixed snmpd crashing in the middle of agentx request processing when
a subagent disconnects (#955511)
- allow 'includeFile' and 'includeDir' options in configuration files
(#917816)
- fixed netlink message size (#927474)
- fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
(#947973)
- fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
as a port (#960568)
- fixed snmpd segfault when 'agentaddress' configuration options is used
and too many SIGHUP signals are received (#968898)
- updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
if 'includeAllDisks' is specified in snmpd.conf (#922691)
[1:5.5-44.2]
- fixed crash when parsing invalid SNMP packets (#953926)
[1:5.5-44.1]
- fixed snmpd crashing with 'exec' command with no arguments in snmpd.conf
(#919259)
[1:5.5-44]
- rebuild with fixed libnetsnmpmibs linking broken by perl-rpath patch
[1:5.5-43]
- fixed value of UCD-SNMP-MIB::extCommand to contain full command
line (#842279)
- fixed rpath to perl.so (#848319)
- added support for port numbers in 'clientaddr' configuration
option (#833013)
- fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
is used (#824402)
- fixed engineID of outgoing traps if 'trapsess -e ' is used in
snmpd.conf (#800671)
- updated documentation of '-c' option of snmptrapd (#784502)
- fixed endless loop when SIGTEM arrives in middle of internal query
processing (#851637)
- fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
- removed various error log messages related to counte64 expansions
(#846906)
- removed various error log messages when IPv6 is disabled (#845157)
- added support of cvfs filesystem in hrStorageTable (#846532)
- fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
which could result in some entries missing in the table (#846436)
- added support of simfs filesystem in hrStorageTable (#861152)
- fixed responding to requests on a multihost machine (#825889)
[1:5.5-42]
- removed fixed limit of 50 'exec' entries in snmpd.conf (#829271)
[1:5.5-41]
- moved /var/lib/net-snmp fro net-snmp to net-snmp-libs package
(#822480)
[1:5.5-40]
- fixed CVE-2012-2141 (#820100)
[1:5.5-39]
- fixed proxying of out-of-tree GETNEXT requests (#799291)
[1:5.5-38]
- fixed snmpd crashing with many AgentX subagent (#749227)
- fixed SNMPv2-MIB::sysObjectID value when 'sysObjectID' config file
option with long OID was used (#786931)
- fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
- fixed parsing of 'proxy' snmpd.conf option not to enable
verbose logging by default (#746903)
- added new 'realStorageUnits' config file option to support
disks > 16 TB in hrStorageTable (#741789)
- added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
(#746903)
- fixed snmpd sigsegv when embedded perl script registers one handler
twice (#748907)
- fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
SNMP-SET request on 64-bit platforms (#754275)
- fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
SELinux context (#754971)
- fixed memory leak when agentx subagent disconnects in the middle
of request processing (#736580)
- fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
- removed 'error finding row index in _ifXTable_container_row_restore'
error message (#788954)
[1:5.5-37]
- recompiled with relro in perl and python modules (#725657)
[1:5.5-36]
- fixed crash in AgentX when closing subagent session (#729738)
[1:5.5-35]
- fixed few QA complaints in bugs #681949, #708370 and #710667
[1:5.5-34]
- another rebuild with updated SMUX to ensure ABI compatibility of
libsnmpagent.so
[1:5.5-33]
- rebuilt with updated SMUX to ensure ABI compatibility of libsnmpagent.so
[1:5.5-32]
- fixed varbind parsing in python netsnmp module (#711481)
- fixed session initialization in python netsnmp module (#710667)
- fixed crash when getting out-of-memory in inetNetToMediaTable (#708947)
- added xfs and jfs filesystem support to hrStorageTable (#707912)
- fixed snmpd to purge zombies resulted from pass_persist process exit
(#703682)
- added a log message when snmpd detects two interfaces with the same
IP address and thus having only one ipTable entry for both (#702171)
- added new snmpd.conf options 'interface_fadeout' and
'interface_replace_old' to controll snmpd behavior when more
interfaces get the same name (#702165)
- fixed snmptrapd leaking memory when processing traps in embedded perl
(#678314)
- fixed hrSystemDate timezone sign (#683680)
- fixed snmp logging 'truncating integer value > 32 bits' for
UCD-SNMP-MIB::systemStats (#681949)
- fixed rare race condition in hrSWRunTable (#683563)
- recompiled with relro for better security (#725657)
- snmpd should not change request-id when sending multiple SMUX messages
(#708370)
[1:5.5-31]
- fixed BRIDGE-MIB implementation in /usr/bin/snmp-bridge-mib,
now it supports embedded perl and answers GETNEXT requests correctly
(#630157).
[1:5.5-30]
- fixed snmpd crashing on registration of smux peer (#672595)
[1:5.5-29]
- fixed snmpd printing 'looks like a 64bit wrap, but prev!=new' to syslog
(#674757)
[1:5.5-28]
- fixed recompilation of the package on machine without IPv6 (#657835)
- fixed SMUX getting stuck on big-endian platforms (#665053)
- fixed OID comparsion in snmpwalk, now the output does not include
objects outside requested subtree (#636890)
- fixed IPv4 address creation in ipAddressTable (#616764)
- added IPv6 address creation to ipAddressTable (#616336)
- fixed value of ipAddressPrefixAutonomousFlag OID (#625262)
- fixed ipv6IfTable - new interfaces were not added there (#627564)
- extended BRIDGE-MIB implementation to cover RFC 4363 (#630157)
[1:5.5-27.1]
- fixed truncation of sysObjectID (#641113)
- fixed assertions in calculating of statistics in IF-MIB (#621664)
[1:5.5-27]
- removed APSL 1.1 licensed files from source tarball (#619906)
[1:5.5-26]
- fixed gfs2 support in hrFSTable and hrStorageTable (#616496)
[1:5.5-25]
- fixed temporary filename generation in snmptrapd (#560081)
[1:5.5-24]
- further improved snmptranslate dysplaying ranges on 32-bit HW (#606874)
[1:5.5-23]
- fixed segfault when parsing snmpd.conf with disman entries (#607080)
- fixed value of IP-MIB::ipv6InterfaceForwarding (#607074)
- fixed output of snmptranslate tool when displaying ranges of UNSIGNED
type (#606874)
[1:5.5-22]
- fixed value of ipIfStatsTable.Ip6ReasmReqds (#597265)
- added missing include files from util_funcs directory (#604636)
[1:5.5-21]
- fixed hrFSTable and hrStorageTable to provide persistent table indexes
according to RFS 2790 (#595325)
[1:5.5-20]
- fixed a memory leak in TCP-MIB and LM-SENSORS-MIB (#591005)
[1:5.5-19]
- fixed exit code of snmp utilities when wrong argument to '-A' option
is specified (#574061)
- fixed BER parsing of incoming packets - siletnly discard the invalid ones
according to RFC (#568651)
[1:5.5-18]
- fixed the automated test suite running with udp6 and tcp6 transports
(#581873)
[1:5.5-17]
- fixed snmpd running as different user using '-u' parameter (#578405)
[1:5.5-16]
- added Perl implementation of BRIDGE-MIB, see man snmp-bridge-mib
(#532759)
[1:5.5-15]
- remove net-snmp-gui subpackage, perl-Tk is being removed from
distro (#568786)
- fix IF-MIB::ifSpeed of inactive interfaces (#561884)
- correct the package license
[1:5.5-14]
- store temporary files in /var/run/net-snmp instead of /tmp (SELinux does
not allow writing /tmp) (#560081)
- fix filedescriptor leak in RMON-MIB and Etherlike-MIB (#562108)
[1:5.5-13]
- fix minor typo in snmpnetstat man page (#556838)
[1:5.5-12]
- fix memory leak in RMON-MIB and ETHERLIKE-MIB when there are aliased interfaces
(#555318)
[1:5.5-11]
- fix additional memory leak in ipAddressPrefixTable, related to #518633
[1:5.5-10]
- move the perl(:MODULE_COMPAT_5.10.x) require to net-snmp-libs
[1:5.5-9]
- require perl(:MODULE_COMPAT_5.10.x) because the package links against
libperl.so
[1:5.5-8]
- rebuild with new rpm
- plug another leak as port from RHEL5
[1:5.5-7]
- fix invalid access to memory in tcpListenerTable (#551030)
- fix crash with interfaces without broadcast addresses (like OpenVPN's tun0)
(#549390)
- fix responding to broadcast SNMP requests (#549390)
- port patches from RHEL-5 to avoid regressions
[1:5.5-6]
- fix compilation of the python module
[1:5.5-5]
- rebuild against perl 5.10.1
[1:5.5-4]
- fix udpTable indexes on big-endian systems (#543352)
- fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
- lower the default log level of snmpd to get rid of the debug messages
[ 1:5.5-3]
- prepare the .spec file for review
- run automatic regression suite after the compilation of the package
to check for obvious regressions
- remove unnecessary package dependencies
[ 1:5.5-2]
- introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
line options. /etc/snmp/snmptrapd.options is not used anymore (#540799)
- build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
- remove ucd5820stat helper script, it depends on get5820stats, which is not
available in Fedora
- move sample services ipf-mod.pl to documentation
- remove logrotate config, snmpd logs into syslog
[5.5-1]
- update to Net-SNMP 5.5
- remove static libraries from -devel subpackage
[1:5.4.2.1-17]
- implement force-reload command in initscripts (#523126)
[1:5.4.2.1-16]
- rebuilt with new openssl
[1:5.4.2.1-15]
- Prevent post script failure on fresh installs
[1:5.4.2.1-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
[5.4.2.1-13]
- package cleanup, remove unnecessary patches
- move local state file from /var/net-snmp/ to /var/lib/net-snmp
[5.4.2.1-12]
- make the default configuration less noisy, i.e. do not print 'Connection from
UDP:' and 'Received SNMP packet(s) from UDP:' messages on each connection.
(#509055)
[5.4.2.1-11]
- fix divison-by-zero in cpu statistics (#501210)
[5.4.2.1-10]
- Rebuild for new rpm
[1:5.4.2.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
[5.4.2.1-8]
- fix tcp_wrappers integration (CVE-2008-6123)
[5.4.2.1-7]
- fix build on s390x which has no libsensors
[5.4.2.1-7]
- rebuild with new openssl
[5.4.2.1-6]
- rebuilt for new python again...
[5.4.2.1-5]
- fix rpm ownership of all created directories (#473582)
[5.4.2.1-4]
- Rebuild for fixed rpm (#473420)
[1:5.4.2.1-3]
- Rebuild for Python 2.6
[5.4.2.1-1]
- explicitly require the right version and release of net-snmp and
net-snmp-libs
- update to net-snmp-5.4.2.1 to fix CVE-2008-4309
[5.4.2-3]
- further tune up the distribution of files among subpackages
and dependencies
[5.4.2-2]
- redistribute the perl scripts to the net-snmp package,
net-snmp-utils doesn't depend on perl now (#462484)
[5.4.2-1]
- update to net-snmp-5.4.2
[5.4.1-22]
- add net-snmp-python
[5.4.1-21]
- fix perl SNMP::Session::set (#452131)
[5.4.1-20]
- prepare for new rpm version
[5.4.1-19]
- fix various flaws (CVE-2008-2292 CVE-2008-0960)
[5.4.1-18]
- fix sparc handling in /usr/bin/net-snmp-config
[5.4.1-17]
- fix sparc handling in /usr/include/net-snmp/net-snmp-config-sparc.h
[5.4.1-16]
-sparc multilib handling
[5.4.1-15]
- explicitly require lm_sensor > 3 for build (#442718)
- create multilib net-snmp-config on multilib architectures only
[5.4.1-14]
- add Requires for versioned perl (libperl.so)
- get rid of silly file Requires
[5.4.1-13]
- BR: perl(ExtUtils::Embed)
[5.4.1-12]
- rebuild for new perl
[5.4.1-11]
- add openssl-devel to the list of netsnmp-devel deps
[5.4.1-10]
- fixing ipNetToMediaNetAddress to show IP address (#432780)
[5.4.1-9]
- introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
/etc/snmp/snmpd.options is not used anymore (#431391)
[5.4.1-8]
- init scripts made LSB compliant
[5.4.1-7]
- rebuild for openssl soname bump
[5.4.1-6]
- add support of lm_sensors v3
- added procps to build dependencies (#380321)
- removed beecrypt from dependencies
- fixed crash on reading xen interfaces (#386611)
[5.4.1-5]
- move mib2c-update from net-snmp-utils to net-snmp-perl, where
mib2c is located
- add tkmib to net-snmp-gui package (#167933)
[5.4.1-4]
- License: field fixed to 'BSD and CMU'
[5.4.1-3]
- include these tables: ip-mib/ipv4InterfaceTable
ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
- fix Requires of net-snmp-devel to include lmsensors-devel on supported
architectures
[5.4.1-2]
- gawk added to build dependencies
[5.4.1-1]
- License: field changed to MIT
- 5.4.1 integrated
[5.4-16]
- supported lm_sensors on ppc64 (#249255)
- snmpconf generates config files with proper selinux context
(#247462)
- fix leak in udp transport (#247771)
- add alpha to supported archs in net-snmp-config (#246825)
- fix hrSWInst (#250237)
[5.4-15]
- fix default snmptrapd.conf
[5.4-14]
- fix snmptrapd hostname logging (#238587)
- fix udpEndpointProcess remote IP address (#236551)
- fix -M option of net-snmp-utils (#244784)
- default snmptrapd.conf added (#243536)
- fix crash when multiple exec statements have the same name
(#243536)
- fix ugly error message when more interfaces share
one IP address (#209861)
[1:5.4-13]
- fix overly verbose log message (#221911)
- few minor tweaks for review - still not perfect
- fix linking with lcrypto (#231805)
[5.4-12]
- lm_sensors-devel only where avaliable
[5.4-11]
- fix lm_sensors-devel Requires (#229109)
[5.4-10]
- fix net-snmp-config strange values for --libs (#228588)
[5.4-9]
- fix dependency on lm_sensors-devel (#229109)
- spec file cleanups
[5.4-8]
- fix occasional segfaults when snmpd starts
[5.4-7]
- fix ethtool extension (#222268)
[5.4-6]
- swith to new disman implementation
[5.4-5]
- fix memleaks in ip-addr and tcpConn
[5.4-4]
- fix rtnetlink.h/if_addr.h
[5.4-3]
- add Requires for tcp_wrappers-devel for -devel
[5.4-2]
- rebuilt against tcp_wrappers-devel
[5.4-1]
- upgrade to 5.4
- patch cleanup
- snmpd uses /var/run/snmpd.pid (#211264)
[5.3.1-11]
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
[5.3.1-10]
- add mibII/mta_sendmail (#207909)
[5.3.1-9]
- fix deprecated syscall base_reachable_time (#207273)
[5.3.1-8]
- enable smux to listen only on LOCAL by default (#181667)
- use correct answer adrress
[5.3.1-7]
- better upstream patch for byteorder
- add epoch to corespond with upstream versioning
[5.3.1.0-6]
- fix IPv4/IPv6 address presentation (#200255)
[5.3.1.0-5]
- SMUX support is still needed .. will disappear later!
- static libs should be in devel not libs (#203571)
- fix lm_sensors issues
[5.3.1.0-4]
- turn off SMUX support (#110931)
- add dist tag
[5.3.1.0-3]
- fix lib dirs in configure (#197684)
[5.3.1.0-2]
- better patch for depreciated sysctl call
[5.3.1.0-1]
- update to 5.3.1 final version, fix version number
[5.3.1.rc4-2]
- fix init script, read .options files from /etc/snmp (#195702)
[5.3.1.rc4-1.1]
- rebuild
[5.3.1.rc4-1]
- update to release candidate 4
- fix lib dependencies on 64bit archs
- supress perl build
[5.3.1.pre3-2]
- add tcp-mib (#194856)
[5.3.1.pre3-1]
- update to another prerelease (fixes perl agents)
[5.3.1.pre2-4]
- fix lib version
[5.3.1.pre2-3]
- another multilib fix. Fix also net-snmp-config script
[5.3.1.pre2-2]
- another attempt to fix multilib issue. Generate dummy net-snmp-config.h file
[5.3.1.pre2-1]
- update to 5.3.1.pre2
- fix multilib issues (#192736)
On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h
[5.3-8]
- fix missing IF-MIB::ifNumber.0 (#189007)
[5.3-7]
- fix parsing of /proc/diskstats
- fix disman monitor crash
- fix perl vendor name
- fix OID lookup fail
[5.3-6]
- use net.ipv6.neigh.lo.retrans_time_ms (#186546)
[5.3-5]
- allow disman/event-mib
[5.3-4.2]
- bump again for double-long bug on ppc(64)
[5.3-4.1]
- rebuilt for new gcc4.1 snapshot and glibc changes
[5.3-4]
- fix crash on s390x and ppc64
[5.3-3]
- fix for lm_Senors, the max is no longer a fixed value
- parsing fixed for /proc/net/if_inet6
[5.3-2]
- Security fix. Bug granting write access to read-only users
or communities which were configured using the 'rocommunity'
or 'rouser' snmpd.conf tokens fixed
* Fri Dec 30 2005 Radek Vokal
- upgrade to 5.3
* Fri Dec 16 2005 Jesse Keating
- rebuilt for new gcj
[5.2.2-4]
- check for header files in configure
- patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)
[5.2.2-3]
- fix ipaddr return type on 64bit machines
[5.2.2-2]
- fix read problem on stream sockets (net-snmp bz#1337534)
[5.2.2-1]
- upgrade to 5.2.2 final
[5.2.2-0.rc6.1]
- update to rc6, snmpnetstat changes due to license problems
- persistent files in directory defined by snmp.conf persistentDir are
loaded at startup
[5.2.2-0.rc5.1]
- another release candidate
[5.2.2-0.rc4.2]
- Remove .la file from net-snmp-libs (#172618)
- grab new openssl
[5.2.2-0.rc4.1]
- update to release candidate 4
[5.2.2-0.rc3.1]
- release candidate 3 of net-snmp-5.2.2
[5.2.2.rc2-1]
- rc2 prebuilt
[5.2.1.2-3]
- fix endian issues for addresses
[5.2.1.2-2]
- fix for s390x counter32 overflow (sachinp@in.ibm.com)
[5.2.1.2-1]
- CAN-2005-2177 new upstream version fixing DoS (#162908)
[5.2.1-13]
- CAN-2005-1740 net-snmp insecure temporary file usage (#158770)
- patch from suse.de
[5.2.1-12]
- session free fixed, agentx modules build fine (#157851)
- fixed dependency for net-snmp libs (#156932)
[5.2.1-11]
- report gigabit Ethernet speeds using Ethtool (#152480)
[5.2.1-10]
- fixed missing requires for devel package (#155221)
[5.2.1-9]
- switching to a different 64bit patch, hopefully 64bit problems are gone for a while
[5.2.1-8]
- net-snmp properly deals with large partitions (#153101)
[5.2.1-7]
- agentx double free error fix
[5.2.1-6]
- fixed unexpected length for type ASN_UNSIGNED (#151892)
- fixed uptime problems on ia64
[5.2.1-5]
- 64bit needed some changes, was causing timeouts on 64bit archs!?
- affects bugs #125432 and #132058
[5.2.1-4]
- rebuild with openssl-0.9.7e
[5.1.2-3]
- patch from CVS - kill extra carriage return (#144917)
- removed patch for interface indexing - doesn't show virtual interfaces
[5.2.1-2]
- rebuild for new librpm
[5.2.1-1]
- new release, fixing several issues
- pointer needs to be inicialized (#146417)
[5.2-2]
- patch adding ipv6 support to ip system stats
[5.2-1]
- net-snmp-5.2, patch clean-up
[5.1.2-12]
- snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
- rather dirty patch fixing conf directory for net-snmp-config
[5.1.2-11]
- Logrotate support added (#125004)
[5.1.2-10]
- Extended the libwrap and bsdcompat patches
[5.1.2-9]
- Droped obsolete lm-sensors patch and enabled lmSensors module
- Marked several patches to be removed for 5.1.3
[5.1.2-8]
- remove README* that do not apply to Linux
- trim massive ChangeLog
* Wed Sep 22 2004 Florian La Roche
- move ldconfig post/postun to libs subrpm
[5.1.2-6]
- Split out libs package for multilib compatibility
[5.1.2-4]
- New prereq for net-snmp-devel
- lelf check removed from configure.in (#128748)
- fixed snmpd coredump when sent SIGHUP (#127314)
[5.1.2-3]
- Agentx failed to send trap, fixed (#130752, #122338)
[5.1.2-2]
- Patch fixing uninitalized stack variable in smux_trap_process (#130179)
[5.1.2-1]
- Update to 5.1.2
- Removed net-snmp-5.0.1-initializer patch, included upstream
* Tue Jun 15 2004 Phil Knirsch
- Fixed small bug in snmptrapd initscript (#126000).
* Tue Jun 15 2004 Elliot Lee
- rebuilt
[5.1.1-3]
- Reworked the perl filelist stuff (Thanks to marius feraru).
[5.1.1-2]
- Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
- Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)
[5.1.1-1]
- Update to latest upstream version 5.1.1
- Included updated patches from Kaj J. Niemi (#118580).
[5.1-12]
- Hacked an ugly perl hack to get rid of perl RPATH problems.
- Fixed 64bit patch and applied it. ;-)
* Tue Mar 02 2004 Elliot Lee
- rebuilt
* Fri Feb 13 2004 Elliot Lee
- rebuilt
[5.1-10]
- Included 64bit fix from Mark Langsdorf (#114645).
[5.1-9]
- Reverted removal of _includir redefiniton due to php-snmp dependancy.
- Remove SO_BSDCOMPAT setsockopt() call, deprecated.
[5.1-8]
- Quite a bit of specfile cleanup from Marius FERARU.
[5.1-7]
- enabled pie (snmpd, snmptrapd) - postponed for ia64
- added --with-pic to configure call
[5.1-6]
- Fixed 64bit build problems when 32bit popt lib is installed.
[5.1-5]
- rebuilt
[5.1-4]
- rebuild for new rpm
[5.1-3]
- Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
- Fixed getopt definition in include file (#111209).
- Included Kaj J. Niemi's patch for broken perl module (#111319).
- Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
- Included Kaj J. Niemi's patch for broken hr_storage (#111502).
[5.1-2]
- Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
- Fixed deprecated initscript options (#110618).
[5.1-1]
- Updated to latest net-snmp-5.1 upstream version.
- Tons of specfile and patch cleanup.
- Cleaned up perl stuff (mib2c etc, see #107707).
- Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
- Added support for custom mib paths and mibs to snmptrapd initscript (#102762)
[5.0.9-2]
- Due to rpm-devel we need elfutils-devel, too (#103982).
[5.0.9-1]
- Updated to latest upstream version net-snmp-5.0.9
- Added patch to fix net-snmp-perl problems (#105842).
* Tue Sep 23 2003 Florian La Roche
- allow compiling without tcp_wrappers
[5.0.8-11.1]
- rebuilt
[5.0.8-11]
- Fixed permission for net-snmp-config in net-snmp-devel
[5.0.8-10.1]
- rebuilt
[5.0.8-10]
- Moved net-snmp-config into devel package (#103927)
[5.0.8-9.1]
- rebuilt
[5.0.8-9]
- Added sample config to make net-snmp RFC 1213 compliant.
[5.0.8-8]
- Fixed problem with perl option (#102420).
- Added patch for libwrap fix (#77926).
[5.0.8-7.1]
- rebuilt
[5.0.8-7]
- Fixed build problems on ppc64
- Fixed double packaged manpages (#102075).
* Thu Aug 07 2003 Phil Knirsch
- Fixed problem with new proc output (#98619, #89960).
* Wed Aug 06 2003 Phil Knirsch
- Fixed ro/rw problem with v2 and v3 request (#89612)
* Tue Aug 05 2003 Phil Knirsch
- Fixed permission problem for debuginfo (#101456)
[5.0.8-6.1]
- Fixed file list for latest build.
[5.0.8-6]
- Fixed build problems for net-snmp-perl.
[5.0.8-5]
- actually apply ipv6 patch
* Wed Jun 04 2003 Elliot Lee
- rebuilt
[5.0.8-3]
- bumped release and rebuilt.
[5.0.8-2]
- Hack to make it build on 64bit platforms with /usr/lib64 correctly.
- Fixed bug #85071 (leak of open descriptors for ipv6).
[5.0.8-1]
- Updated to latest upstream version 5.0.8 (bug #88580)
* Thu Feb 13 2003 Phil Knirsch
- Included generation of perl stuff. Thanks to Harald Hoyer.
[5.0.7-1]
- Updated to net-snmp-5.0.7. Fixed especially the performance problem with
limited trees.
[5.0.6-17]
- Fixed ucd-snmp.redhat.conf (#78391).
- Fixed snmpwalk examples in config file.
[5.0.6-15]
- Fixed invalid SMUX packet (#83487).
[5.0.6-14]
- Fixed the libdir problem.
[5.0.6-13]
- Updated the old libtool rpath patch.
[5.0.6-12]
- rebuilt
[5.0.6-11]
- Updated nolibelf patch and activated it again.
[5.0.6-10]
- Rebuild
[5.0.6-9]
- Added bzip2-devel to BuildPreReq (#76086, #70199).
[5.0.6-8]
- Added patch to increase SMUXMAXSTRLEN.
[5.0.6-6]
- rebuilt to fix broken deps
- remove files from the buildroot that we don't want to ship
[5.0.6-5]
- add fix for -DUCD_COMPATIBLE (#77405)
[5.0.6-4]
- Another bump required. Some more specfile changes.
[5.0.6-3]
- Bumped release and rebuilt.
- Removed all dbFOO cruft again.
[5.0.6-2]
- Updated to latest released version.
* Sat Aug 31 2002 Florian La Roche
- do not link against -lelf
[5.0.1-5]
- Added --enable-ucd-snmp-compatibility for compatibility with older version
and fixed installation thereof.
- Got rid of the perl(Tk) dependancy by removing snmpcheck.
- Include /usr/include/ucd-snmp in the filelist.
- Fixed a problem with the ucd-snmp/version.h file.
[5.0.1-1]
- Updated to 5.0.1
- Dropped --enable-reentrant as it's currently broken
[5.0-1]
- Switch to latest stable version, 5.0
- Renamed the packate to net-snmp and obsoleted ucd-snmp.
[4.2.4-3]
- Fixed problem with reload in initscript (#63526).
[4.2.4-2]
- rebuilt in new environment
[4.2.4-1]
- update to 4.2.4 final
[4.2.4.pre3-5]
- Added some missing files to the %files section.
[4.2.4.pre3-4]
- Hardcoded the ETC_MNTTAB to point to '/etc/mtab'.
[4.2.4.pre3-3]
- Removed the check for dbFOO as we don't want to add another requirement.
[4.2.4.pre3-2]
- Added missing BuildPrereq to openssl-devel (#61525)
[4.2.4.pre3-1]
- Added ucd5820stat to the files section.
- Updated to latest version (4.2.4.pre3)
[4.2.4.pre2-1]
- Updated to latest version (4.2.4.pre2)
[4.2.3-4]
- Added the snmptrapd init script as per request (#49205)
- Fixed the again broken rpm query stuff (#57444)
- Removed all old and none-used db related stuff (libs and header checks/files)
[4.2.3-2]
- Included the Axioma Security Research fix for snmpnetstat from bugtraq.
[4.2.3-1]
- Update to 4.2.3 final.
- Fixed libtool/rpath buildroot pollution problem.
- Fixed library naming problem.
* Fri Oct 05 2001 Philipp Knirsch
- Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
and Wes Hardaker for the patch.
* Mon Sep 10 2001 Philipp Knirsch
- Fixed problem with RUNTESTS script.
* Tue Sep 04 2001 Preston Brown
- fixed patch related to bug #35016 (Dell)
[4.2.1-6]
- Fixed snmpd description (#52366)
* Wed Aug 22 2001 Philipp Knirsch
- Final bcm5820 fix. Last one was broken.
- Fixed bugzilla bug (#51960) where the binaries contained rpath references.
* Wed Aug 15 2001 Philipp Knirsch
- Fixed a couple of security issues:
o /tmp race and setgroups() privilege problem
o Various buffer overflow and format string issues.
o One signedness problem in ASN handling.
- Fixed an important RFE to support bcm5820 cards. (#51125)
* Fri Jul 20 2001 Philipp Knirsch
- Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
perl module required to run it (#49363)
- Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
those during the build anymore (it used to) (#46388)
* Thu Jul 19 2001 Philipp Knirsch
- Enabled IPv6 support (RFE #47764)
- Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
for the patch and Matt Domsch for reporting the problem.
* Tue Jun 26 2001 Philipp Knirsch
- Fixed smux compilation problems (#41452)
- Fixed wrong paths displayed in manpages (#43053)
* Mon Jun 25 2001 Philipp Knirsch
- Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
- Include /usr/share/snmp/snmpconf in %files
* Wed Jun 13 2001 Than Ngo
- fix to use libwrap in distro
- add buildprereq: tcp_wrappers
* Fri Jun 01 2001 Bill Nottingham
- add a *new* patch for IP address return sizes
* Fri Apr 20 2001 Bill Nottingham
- add patch so that only four bytes are returned for IP addresses on ia64 (#32244)
* Wed Apr 11 2001 Bill Nottingham
- rebuild (missing alpha packages)
* Fri Apr 06 2001 Matt Wilson
- added ucd-snmp-4.2-null.patch to correcly handle a NULL value (#35016)
* Tue Apr 03 2001 Preston Brown
- clean up deinstallation (#34168)
* Tue Mar 27 2001 Matt Wilson
- return a usable RETVAL when running 'service snmpd status' (#33571)
* Tue Mar 13 2001 Matt Wilson
- configure with --enable-reentrant and added 'smux' and 'agentx' to
--with-mib-modules= argument (#29626)
* Fri Mar 02 2001 Nalin Dahyabhai
- rebuild in new environment
* Mon Feb 26 2001 Tim Powers
- fixed initscript, for reload and restart it was start then stop,
fixed. (#28477)
* Fri Feb 02 2001 Trond Eivind Glomsrod
- i18nize initscript
* Sat Jan 06 2001 Jeff Johnson
- don't depend on /etc/init.d so that package will work with 6.2.
- perl path fiddles no longer needed.
- rely on brp-compress frpm rpm to compress man pages.
- patch from ucd-snmp CVS (Wes Hardaker).
- configure.in needs to check for rpm libraries correctly (#23033).
- add simple logrotate script (#21399).
- add options to create pidfile and log with syslog with addresses (#23476).
* Sat Dec 30 2000 Jeff Johnson
- package for Red Hat 7.1.
* Thu Dec 07 2000 Wes Hardaker
- update for 4.2
* Thu Oct 12 2000 Jeff Johnson
- add explicit format for syslog call (#18153).
* Thu Jul 20 2000 Bill Nottingham
- move initscript back
* Thu Jul 20 2000 Jeff Johnson
- rebuild per Trond's request.
* Tue Jul 18 2000 Nalin Dahyabhai
- fix syntax error that crept in with condrestart
* Wed Jul 12 2000 Prospector
- automatic rebuild
* Mon Jul 10 2000 Preston Brown
- move initscript and add condrestart magic
* Sat Jun 17 2000 Bill Nottingham
- fix %attr on man pages
* Mon Jun 12 2000 Jeff Johnson
- tkmib doco had #!/usr/bin/perl55
- include snmpcheck and tkmib again (still needs some CPAN module, however).
* Tue Jun 06 2000 Jeff Johnson
- update to 4.1.2.
- FHS packaging.
- patch for rpm 4.0.
* Thu May 18 2000 Trond Eivind Glomsrod
- add version to buildroot
- rebuilt with new libraries
* Sun Feb 27 2000 Jeff Johnson
- default config was broken (from Wes Hardaker) (#9752)
* Sun Feb 13 2000 Jeff Johnson
- compressed man pages.
* Fri Feb 11 2000 Wes Hardaker
- update to 4.1.1
* Sat Feb 05 2000 Florian La Roche
- change %postun to %preun
* Thu Feb 03 2000 Elliot Lee
- Don't ship tkmib, since we don't ship the perl modules needed to run it.
(Bug #4881)
* Tue Aug 31 1999 Jeff Johnson
- default config permits RO access to system group only (Wed Hardaker).
* Sun Aug 29 1999 Jeff Johnson
- implement suggestions from Wes Hardaker.
* Fri Aug 27 1999 Jeff Johnson
- stateless access to rpm database.
* Wed Aug 25 1999 Jeff Johnson
- update to 4.0.1.
* Mon Aug 16 1999 Bill Nottingham
- initscript munging
* Sat Jun 12 1999 Jeff Johnson
- update to 3.6.2 (#3219,#3259).
- add missing man pages (#3057).
* Thu Apr 08 1999 Wes Hardaker
- fix Source0 location.
- fix the snmpd.conf file to use real community names.
* Sun Mar 21 1999 Cristian Gafton
- auto rebuild in the new build environment (release 3)
* Fri Mar 19 1999 Preston Brown
- upgrade to 3.6.1, fix configuration file stuff.
* Wed Feb 24 1999 Preston Brown
- Injected new description and group.
* Tue Feb 02 1999 Jeff Johnson
- restore host resources mib
- simplified config file
- rebuild for 6.0.
* Tue Dec 22 1998 Bill Nottingham
- remove backup file to fix perl dependencies
* Tue Dec 08 1998 Jeff Johnson
- add all relevant rpm scalars to host resources mib.
* Sun Dec 06 1998 Jeff Johnson
- enable libwrap (#253)
- enable host module (rpm queries over SNMP!).
* Mon Oct 12 1998 Cristian Gafton
- strip binaries
* Fri Oct 02 1998 Jeff Johnson
- update to 3.5.3.
- don't include snmpcheck until perl-SNMP is packaged.
* Thu Aug 13 1998 Jeff Johnson
- ucd-snmpd.init: start daemon w/o -f.
* Tue Aug 04 1998 Jeff Johnson
- don't start snmpd unless requested
- start snmpd after pcmcia.
* Sun Jun 21 1998 Jeff Johnson
- all but config (especially SNMPv2p) ready for prime time
* Sat Jun 20 1998 Jeff Johnson
- update to 3.5.
* Tue Dec 30 1997 Otto Hammersmith
- created the package... possibly replace cmu-snmp with this.
Related CVEs
Updated Packages
| Release/Architecture | Filename | MD5sum | Superseded By Advisory |
|
| Oracle VM 3.4 (x86_64) | net-snmp-5.5-60.0.1.el6_10.2.src.rpm | 73ffb72b35e0c47a68afafa2f7454296 | - |
| net-snmp-5.5-60.0.1.el6_10.2.x86_64.rpm | 6e601702b07575ace6186e0f7bbe2f50 | - |
| net-snmp-libs-5.5-60.0.1.el6_10.2.x86_64.rpm | d45213e7947f8742a0c1bf87856290c4 | - |
| net-snmp-utils-5.5-60.0.1.el6_10.2.x86_64.rpm | a6cb45ce0e864529587eab907de584cb | - |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
