RHBA-2009:0230 - Bug Fix Advisory

Topic

Updated net-snmp packages that fix various bugs and add enhancements are
now available.

Description

The Simple Network Management Protocol (SNMP) is a protocol used for
network management. The net-snmp packages include various SNMP tools: an
extensible agent; an SNMP library; tools for requesting or setting
information from SNMP agents; tools for generating and handling SNMP traps;
a version of the netstat command which uses SNMP; and a Tk/Perl MIB
browser.

With this update, Net-SNMP was re-based to net-snmp-5.3.2.2, the latest
stable net-snmp release in the 5.3 branch. This re-base adds Stream Control
Transmission Protocol (SCTP) support (as per RFC 3873,
http://www.ietf.org/rfc/rfc3873.txt) and introduces two new configuration
options (to be used in /etc/snmpd.conf). For information on these options
and other changes introduced with these re-based packages, see the Red Hat
Enterprise Linux 5.3 Release Notes.

In addition, these updated net-snmp packages fix for the following bugs:

• the snmpd daemon now correctly runs on machines with more than 255

network interfaces.

• the snmpd daemon now reports an error when it's configured to listen on

port higher than 65535.

• a race condition was fixed. The snmpd daemon no longer leak file

descriptors when reading from the /proc filesystem.

• when running under a kernel without the ipv6 module the snmpd daemon now

reports all entries in inetNetToMediaTable.

• a memory leak in the net-snmp client libraries was fixed.
• the snmpd daemon now correctly reports hrProcessorLoad OID, even on

multi-CPU hardware. Note: it takes 60 seconds from the daemo's initial
startup to calculate the OID value.

• the snmpd daemon now correctly updates all counters in ifTable.
• the snmptrapd daemon's "-A" command line option was fixed.

As well, this update adds with following enhancements:

• SCTP MIB (RFC 3873) has been implemented.
• these two new, above-noted, options can be used in snmpd.conf files:

"dontLogTCPWrappersConnects" (this suppresses logging of connection
attempts); and "v1trapaddress" (this allows an agent's IP address to be set
inside outgoing SNMP traps).

• the snmpd.options and snmptrapd.options files, containing command line

options for snmp daemons, were moved from /etc/snmp to /etc/sysconfig
directory.

Finally, the snmpd.conf manual page was updated with details regarding the
following:

• the target specifier of 'trapsess' option should include port number.
• the results of external programs started by the 'exec' option are not

cached.

• the net-snmp-devel package now correctly requires the lm_sensors-devel

package.

All SNMP users are advised to upgrade to these updated net-snmp packages,
which resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 431439 - CRM #1765368 HOST-RESOURCES-MIB::hrProcessorLoad
• BZ - 431519 - exec does not cache
• BZ - 434746 - CRM #1799024 net-snmp spec file does not have require net-snmp-libs
• BZ - 438151 - ifInError is never updated on ppp interfaces
• BZ - 443758 - snmptrapd -A switch broken in red hat net-snmp release
• BZ - 449351 - When an invalid port number that exceeds 0x10000(65536) is specified by the snmpd and snmptrapd command, an improper port number is generated.
• BZ - 454977 - Rebase to net-snmp-5.3.2.2
• BZ - 458937 - net-smp fails to parse if_inet6 when the iface index is greater than 255

CVEs

(none)

References

(none)