RHBA-2009:1437 - Bug Fix Advisory

Topic

Updated net-snmp packages that resolve several issues are now available.

Description

The Simple Network Management Protocol (SNMP) is a protocol used for
network management. The net-snmp packages include various SNMP tools:an
extensible agent, an SNMP library, tools for requesting or setting
information from SNMP agents, tools for generating and handling SNMP traps,
a version of the netstat command which uses SNMP, and a Tk/Perl MIB browser.

These updated net-snmp packages provide fixes for the following bugs:

• snmpd, the SNMP daemon, did not expect the packet counters in the

/proc/net/snmp and /proc/net/snmp6 directories to be 64-bit on 64-bit
systems. When these counters exceeded 32 bits in size, which would occur
when the Linux kernel sent or received greater than 4,294,967,296 (2^32)
packets, then the snmpd daemon would terminate abnormally. With this
update, the snmpd daemon no longer crashes when it encounters a packet
counter in the directories listed above that is greater than 32 bits in
size, thus resolving the issue. (BZ#516183)

• snmpd, the SNMP daemon, contained several memory leaks in the

ipNetToMediaTable module. These leaks caused snmpd to leak memory
relatively slowly, but at a rate which could cause problems on machines
with multi-month uptimes. These memory leaks have been plugged in these
updated packages so that snmpd no longer leaks memory slowly. (BZ#517041)

All users of net-snmp are advised to upgrade to these updated packages,
which resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.4 ia64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.4 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.4 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.4 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 516183 - [MC5.3]The snmpd terminated abnormally.
• BZ - 517041 - [RHEL5.4] Memory leak in snmpd
• BZ - 518920 - snmpd leaks memory

CVEs

(none)

References

(none)