RHBA-2011:0238 - Bug Fix Advisory

Topic

Updated net-snmp packages that fix various bugs are now available for Red Hat
Enterprise Linux 4.

Description

The Simple Network Management Protocol (SNMP) is a protocol used for network
management. The net-snmp packages include an extensible agent, an SNMP library,
tools for requesting or setting information from SNMP agents, tools for
generating and handling SNMP traps, a version of the netstat command which uses
SNMP, and a Tk/Perl MIB browser.

This update fixes the following bugs:

• Prior to this update, a buffer overflow may have occurred when parsing the

"notificationEvent" configuration option, causing the snmpd daemon to crash.
With this update, this error no longer occurs, and snmpd now works as expected.
(BZ#598293)

• Previously, the snmpd daemon may have read already released memory when

sending a trap invoked by "monitor", "defaultMonitor", or
"linkUpDownNotifications" configuration options. As a result, it may have been
unable to send the trap at all, or may have sent it multiple times. With this
update, outgoing traps are composed correctly, and are now sent only once.
(BZ#631934, BZ#549724)

• On 64-bit systems, an SNMP trap sent by the snmpd daemon or an application

using the Net-SNMP libraries may have erroneously encoded IPv4 addresses in its
variable bindings, using 8 octets instead of 4 octets. With this update, such
addresses are now properly encoded in 4 octets as expected. (BZ#576777)

• When Ethernet interfaces were down, snmpd reported inconsistent interface

speeds (the "ifSpeed" value): 0 for twisted pair, 1000000 (that is, 10 MB/sec)
if the link was fiber. This was caused by two I/O control (ioctl) system calls
not returning information from the kernel when the down interface was fiber.
This error no longer occurs, and the snmpd daemon now always returns consistent
interface speeds. (BZ#487261)

• With this update, the snmpd daemon is now able to process and respond to

broadcast UDP requests as expected. (BZ#521758)

All SNMP users are advised to upgrade to these updated packages, which resolve
these issues.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 549724 - No trap for linkdown/linkup on the network is notified
• BZ - 631934 - intermittent duplicate traps
• BZ - 663879 - net-snmp library breaks selinux because of creating index file

CVEs

(none)

References

(none)