Synopsis

net-snmp enhancement and bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated net-snmp packages that fix various bugs and add enhancements are
now available.

Description

The Simple Network Management Protocol (SNMP) is a protocol used for
network management. The net-snmp packages include various SNMP tools: an
extensible agent; an SNMP library; tools for requesting or setting
information from SNMP agents; tools for generating and handling SNMP traps;
a version of the netstat command which uses SNMP; and a Tk/Perl MIB
browser.

These updated net-snmp packages provide fixes for the following bugs:

• when two default routes with the same content existed in the machine's
  routing table, the snmpd daemon could have entered an endless loop and
  logged the following error to syslog: "error on subcontainer 'dr_index'
  insert(-1)". Processing of the routing table has been improved in this
  update so that snmpd no longer enters an endless route when this occurs.
  (BZ#504742)
  
• on 64-bit systems experiencing very high network traffic, the snmpd
  daemon periodically logged the following message to syslog: "truncating
  integer value > 32 bits". With this update, snmpd correctly adjusts
  reported counters and no error is logged. (BZ#507528)
  
• the snmpd daemon did not expect the packet counters in the /proc/net/snmp
  and /proc/net/snmp6 directories to be 64-bit on 64-bit systems. When these
  counters exceeded 32 bits in size, which occurred when the Linux kernel
  sent or received greater than 4,294,967,296 (2^32) packets, then the snmpd
  daemon would terminate abnormally. With this update, the snmpd daemon no
  longer crashes when it encounters a packet counter in the directories
  listed above that is greater than 32 bits in size, thus resolving the
  issue. (BZ#514703)
  
• the snmpd daemon contained several memory leaks in the ipNetToMediaTable,
  mteEventSetTable and ipAddressPrefixTable objects. These slow memory leaks
  could have caused problems on machines with multi-month uptimes. These
  memory leaks have been plugged in these updated packages. (BZ#518633,
  BZ#515650)
  
• this update ensures that the snmpd daemon is able to process and respond
  to broadcast UDP requests. (BZ#521175)
  
• header files contained within the net-snmp-devel package differed
  according to the architecture of the system, i386 or Itanium, they were
  installed on. Because net-snmp is a multilib package, this update moves
  architecture-dependent header files into separate files, thus allowing
  development packages for different architectures to be installed on the
  same system. (BZ#521820)
  
• the libnetsnmp shared object library maintains cached data in the
  /usr/share/snmp/mibs/.index file. Because this file did not have the proper
  SELinux context, SELinux denied applications write access to this file.
  This update ensures that this .index file is properly labeled with the
  correct SELinux context so that applications are permitted to access it.
  (BZ#523249)
  
• the snmpd daemon was unable to process requests to create a new
  User-Based Security Model (USM) veiw with Object ID components larger than
  255. With ths update, snmpd is able to create new USM views with all valid
  OIDs. (BZ#527364)
  
• SNMP applications such as snmpget and snmpwalk reported "truncating
  unsigned value to 32 bits" errors on 64-bit achitectures when they received
  invalid SNMP responses from legacy systems. With this update, SNMP programs
  suppress these error messages when the received SNMP response can still be
  parsed. (BZ#528164)
  
• the snmpd daemon assumed that network interface hardware addresses were
  always 6 bytes in length. Hardware such as InfiniBand network cards can
  have addresses of a different size, in which case snmpd reported "ioctl
  35123 returned -1" to syslog. With this update, snmpd does not make the
  6-byte assumption, and this error is no longer logged. (BZ#543499)
  
• the snmpd daemon reported IP addresses in the ipCidrRouteTable object as
  8 bytes on 64-bit hardware. This update ensures that snmpd reports IPv4
  addresses as 4 bytes. (BZ#547698)
  

All SNMP users are advised to upgrade to these updated net-snmp packages,
which resolve these issues and add these enhancements.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 518633 - snmpd leaks memory
• BZ - 521820 - Package is not multilib safe
• BZ - 523249 - net-snmp library breaks selinux because of creating index file
• BZ - 527364 - inconsistentName error for the oid with the number greater than 255
• BZ - 528164 - Spurious "truncating unsigned value" errors
• BZ - 543499 - snmpd: ioctl 35123 returned -1
• BZ - 547698 - snmpd reports IP addresses as 8 bytes in ipCidrRouteTable

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
net-snmp-5.3.2.2-9.el5.src.rpm	SHA-256: e321e54ec379aee3788f2ebe0eff5b19f7b39ca1e7e30bcf94076faba26410dc
x86_64
net-snmp-5.3.2.2-9.el5.x86_64.rpm	SHA-256: c6538a0205139c76c6115106bf3511124e8a734a03de2aea894b9d075e40c602
net-snmp-devel-5.3.2.2-9.el5.i386.rpm	SHA-256: ca81f01fb08a8c272719352a22078dd01620a3dc58446480a1f92503b76f8b7b
net-snmp-devel-5.3.2.2-9.el5.x86_64.rpm	SHA-256: edd51a472bcd4d9bb7057c7bb5b3c62ce56c88588ec30b059c665d6d44613501
net-snmp-libs-5.3.2.2-9.el5.i386.rpm	SHA-256: a29a14c6c1bf3da5e2848d8a0a623669c4efe03adcd125cb81e3803a6abe7f3b
net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm	SHA-256: 4e789a67cba853b3e5b638cfd7763b0aba14d7e5716e484374b8aa71e3d58448
net-snmp-perl-5.3.2.2-9.el5.x86_64.rpm	SHA-256: a76c36a47dbf7a8747278dda6a7234c8f9331eef4f322534a88e30ac31c397d5
net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm	SHA-256: f354e37b80e1e4a5cbb2e09a14c1949139697df2f0d8e7cdf3da9c29e3d84294
ia64
net-snmp-5.3.2.2-9.el5.ia64.rpm	SHA-256: 472a588bc1193d3388177c4648f68cf969655f066c2fafa670dcc9f041ce9fe7
net-snmp-devel-5.3.2.2-9.el5.ia64.rpm	SHA-256: 5341e0bdcc34576246b5f3ff2a62ee36147f63b74f90ba8da66299637ac1ee7f
net-snmp-libs-5.3.2.2-9.el5.ia64.rpm	SHA-256: 3d94f3c96f55bb9cf1db2c05450149900f32d5013fcb0494470c2006c8efe85f
net-snmp-perl-5.3.2.2-9.el5.ia64.rpm	SHA-256: e90e58377d45c8800519548571134cf26904107c25a8a887491671bfd210241e
net-snmp-utils-5.3.2.2-9.el5.ia64.rpm	SHA-256: 8adc9ab3b5fb63667c24b7412d9507ca7a41676669c684ffcf12903d665408c4
i386
net-snmp-5.3.2.2-9.el5.i386.rpm	SHA-256: a58a2b7e0fcdb5f3047898e3d92f8e173b366c9efa4c55bf972cf869c472618f
net-snmp-devel-5.3.2.2-9.el5.i386.rpm	SHA-256: ca81f01fb08a8c272719352a22078dd01620a3dc58446480a1f92503b76f8b7b
net-snmp-libs-5.3.2.2-9.el5.i386.rpm	SHA-256: a29a14c6c1bf3da5e2848d8a0a623669c4efe03adcd125cb81e3803a6abe7f3b
net-snmp-perl-5.3.2.2-9.el5.i386.rpm	SHA-256: 2796b14535580b79106fb3948b6ff4140141a4f09508b5d5ec8b39bbbf110946
net-snmp-utils-5.3.2.2-9.el5.i386.rpm	SHA-256: 89ed15e618fc3feabeb8e2a583860d4d81fab5c3381240833fdc0d24f0a721f0

Red Hat Enterprise Linux Workstation 5

SRPM
net-snmp-5.3.2.2-9.el5.src.rpm	SHA-256: e321e54ec379aee3788f2ebe0eff5b19f7b39ca1e7e30bcf94076faba26410dc
x86_64
net-snmp-5.3.2.2-9.el5.x86_64.rpm	SHA-256: c6538a0205139c76c6115106bf3511124e8a734a03de2aea894b9d075e40c602
net-snmp-devel-5.3.2.2-9.el5.i386.rpm	SHA-256: ca81f01fb08a8c272719352a22078dd01620a3dc58446480a1f92503b76f8b7b
net-snmp-devel-5.3.2.2-9.el5.x86_64.rpm	SHA-256: edd51a472bcd4d9bb7057c7bb5b3c62ce56c88588ec30b059c665d6d44613501
net-snmp-libs-5.3.2.2-9.el5.i386.rpm	SHA-256: a29a14c6c1bf3da5e2848d8a0a623669c4efe03adcd125cb81e3803a6abe7f3b
net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm	SHA-256: 4e789a67cba853b3e5b638cfd7763b0aba14d7e5716e484374b8aa71e3d58448
net-snmp-perl-5.3.2.2-9.el5.x86_64.rpm	SHA-256: a76c36a47dbf7a8747278dda6a7234c8f9331eef4f322534a88e30ac31c397d5
net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm	SHA-256: f354e37b80e1e4a5cbb2e09a14c1949139697df2f0d8e7cdf3da9c29e3d84294
i386
net-snmp-5.3.2.2-9.el5.i386.rpm	SHA-256: a58a2b7e0fcdb5f3047898e3d92f8e173b366c9efa4c55bf972cf869c472618f
net-snmp-devel-5.3.2.2-9.el5.i386.rpm	SHA-256: ca81f01fb08a8c272719352a22078dd01620a3dc58446480a1f92503b76f8b7b
net-snmp-libs-5.3.2.2-9.el5.i386.rpm	SHA-256: a29a14c6c1bf3da5e2848d8a0a623669c4efe03adcd125cb81e3803a6abe7f3b
net-snmp-perl-5.3.2.2-9.el5.i386.rpm	SHA-256: 2796b14535580b79106fb3948b6ff4140141a4f09508b5d5ec8b39bbbf110946
net-snmp-utils-5.3.2.2-9.el5.i386.rpm	SHA-256: 89ed15e618fc3feabeb8e2a583860d4d81fab5c3381240833fdc0d24f0a721f0

Red Hat Enterprise Linux Desktop 5

SRPM
net-snmp-5.3.2.2-9.el5.src.rpm	SHA-256: e321e54ec379aee3788f2ebe0eff5b19f7b39ca1e7e30bcf94076faba26410dc
x86_64
net-snmp-5.3.2.2-9.el5.x86_64.rpm	SHA-256: c6538a0205139c76c6115106bf3511124e8a734a03de2aea894b9d075e40c602
net-snmp-libs-5.3.2.2-9.el5.i386.rpm	SHA-256: a29a14c6c1bf3da5e2848d8a0a623669c4efe03adcd125cb81e3803a6abe7f3b
net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm	SHA-256: 4e789a67cba853b3e5b638cfd7763b0aba14d7e5716e484374b8aa71e3d58448
net-snmp-perl-5.3.2.2-9.el5.x86_64.rpm	SHA-256: a76c36a47dbf7a8747278dda6a7234c8f9331eef4f322534a88e30ac31c397d5
net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm	SHA-256: f354e37b80e1e4a5cbb2e09a14c1949139697df2f0d8e7cdf3da9c29e3d84294
i386
net-snmp-5.3.2.2-9.el5.i386.rpm	SHA-256: a58a2b7e0fcdb5f3047898e3d92f8e173b366c9efa4c55bf972cf869c472618f
net-snmp-libs-5.3.2.2-9.el5.i386.rpm	SHA-256: a29a14c6c1bf3da5e2848d8a0a623669c4efe03adcd125cb81e3803a6abe7f3b
net-snmp-perl-5.3.2.2-9.el5.i386.rpm	SHA-256: 2796b14535580b79106fb3948b6ff4140141a4f09508b5d5ec8b39bbbf110946
net-snmp-utils-5.3.2.2-9.el5.i386.rpm	SHA-256: 89ed15e618fc3feabeb8e2a583860d4d81fab5c3381240833fdc0d24f0a721f0

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
net-snmp-5.3.2.2-9.el5.src.rpm	SHA-256: e321e54ec379aee3788f2ebe0eff5b19f7b39ca1e7e30bcf94076faba26410dc
s390x
net-snmp-5.3.2.2-9.el5.s390x.rpm	SHA-256: 282f01345d9601bb0ad3e07f1fcbebfa6a8b4624f5fd628ac3df1f35afa11b1f
net-snmp-devel-5.3.2.2-9.el5.s390.rpm	SHA-256: 0f5c931ca1d77348ebe4d0e3bffdcb69c5f112492d2532ce0dfaa99235ecd1b8
net-snmp-devel-5.3.2.2-9.el5.s390x.rpm	SHA-256: 7a4dbc7a5923264af5f007b97f8432b7e958ab207f14d5c1f4c2e10a663ff6af
net-snmp-libs-5.3.2.2-9.el5.s390.rpm	SHA-256: ae3c2804315f463b3e13d832dfa4a4a39002da3123ae5a18c84966a9464e5b68
net-snmp-libs-5.3.2.2-9.el5.s390x.rpm	SHA-256: d848efd3180b1d11acf58295820e41dd7c7b937cd6fcc84e2e78529cd05a52b7
net-snmp-perl-5.3.2.2-9.el5.s390x.rpm	SHA-256: 687cc858c97caf3acffabed3ae1498ecab7e9d48e088960935a2ae808ff508f4
net-snmp-utils-5.3.2.2-9.el5.s390x.rpm	SHA-256: 24ab0deb86774c34244e8b416318262d97d50df8acd0c5f22a2e7138a6e5afd0

Red Hat Enterprise Linux for Power, big endian 5

SRPM
net-snmp-5.3.2.2-9.el5.src.rpm	SHA-256: e321e54ec379aee3788f2ebe0eff5b19f7b39ca1e7e30bcf94076faba26410dc
ppc
net-snmp-5.3.2.2-9.el5.ppc.rpm	SHA-256: 14619a6dfecbd864563fcadf57cfcf53a23dbd4b321ee4ecdabac6959acac3cd
net-snmp-devel-5.3.2.2-9.el5.ppc.rpm	SHA-256: cd3a84aafeac37fb30b3a550717fa55b0830d5ecfee35a7698d94c73a465414e
net-snmp-devel-5.3.2.2-9.el5.ppc64.rpm	SHA-256: 48dccaf1be5ebbc469446e9332296acc2e1542e07fddd0a3179927ff4aa31b2c
net-snmp-libs-5.3.2.2-9.el5.ppc.rpm	SHA-256: 6819530e61829048fd7fcf2d17ba3af568807e1c8dd318cb1dc152433aa0fd14
net-snmp-libs-5.3.2.2-9.el5.ppc64.rpm	SHA-256: 73feacde39f48ab7033046e8017936dcf9748a4053a6e75056f4da09ab570acd
net-snmp-perl-5.3.2.2-9.el5.ppc.rpm	SHA-256: cc02034dd7a671b5e24b3bfe8484448bb7894b7c3b7ef160c43714b29bc53c1a
net-snmp-utils-5.3.2.2-9.el5.ppc.rpm	SHA-256: d48bfd236a3da848dd034d17a8b525f38e9eb2ebbe853217f0c4009db04dc4d3

Red Hat Enterprise Linux Server from RHUI 5

SRPM
net-snmp-5.3.2.2-9.el5.src.rpm	SHA-256: e321e54ec379aee3788f2ebe0eff5b19f7b39ca1e7e30bcf94076faba26410dc
x86_64
net-snmp-5.3.2.2-9.el5.x86_64.rpm	SHA-256: c6538a0205139c76c6115106bf3511124e8a734a03de2aea894b9d075e40c602
net-snmp-devel-5.3.2.2-9.el5.i386.rpm	SHA-256: ca81f01fb08a8c272719352a22078dd01620a3dc58446480a1f92503b76f8b7b
net-snmp-devel-5.3.2.2-9.el5.x86_64.rpm	SHA-256: edd51a472bcd4d9bb7057c7bb5b3c62ce56c88588ec30b059c665d6d44613501
net-snmp-libs-5.3.2.2-9.el5.i386.rpm	SHA-256: a29a14c6c1bf3da5e2848d8a0a623669c4efe03adcd125cb81e3803a6abe7f3b
net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm	SHA-256: 4e789a67cba853b3e5b638cfd7763b0aba14d7e5716e484374b8aa71e3d58448
net-snmp-perl-5.3.2.2-9.el5.x86_64.rpm	SHA-256: a76c36a47dbf7a8747278dda6a7234c8f9331eef4f322534a88e30ac31c397d5
net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm	SHA-256: f354e37b80e1e4a5cbb2e09a14c1949139697df2f0d8e7cdf3da9c29e3d84294
i386
net-snmp-5.3.2.2-9.el5.i386.rpm	SHA-256: a58a2b7e0fcdb5f3047898e3d92f8e173b366c9efa4c55bf972cf869c472618f
net-snmp-devel-5.3.2.2-9.el5.i386.rpm	SHA-256: ca81f01fb08a8c272719352a22078dd01620a3dc58446480a1f92503b76f8b7b
net-snmp-libs-5.3.2.2-9.el5.i386.rpm	SHA-256: a29a14c6c1bf3da5e2848d8a0a623669c4efe03adcd125cb81e3803a6abe7f3b
net-snmp-perl-5.3.2.2-9.el5.i386.rpm	SHA-256: 2796b14535580b79106fb3948b6ff4140141a4f09508b5d5ec8b39bbbf110946
net-snmp-utils-5.3.2.2-9.el5.i386.rpm	SHA-256: 89ed15e618fc3feabeb8e2a583860d4d81fab5c3381240833fdc0d24f0a721f0