RHBA-2011:1524 - Bug Fix Advisory

Topic

Updated net-snmp packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

The net-snmp packages provide various libraries and tools for the Simple Network
Management Protocol (SNMP), including an SNMP library, an extensible agent,
tools for requesting or setting information from SNMP agents, tools for
generating and handling SNMP traps, a version of the netstat command which uses
SNMP, and a Tk/Perl management information base (MIB) browser.

These updated net-snmp packages include numerous bug fixes. Space precludes
documenting all of these changes in this advisory. Users are directed to the Red
Hat Enterprise Linux 6.2 Technical Notes for information on the most significant
of these changes:

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/net-snmp.html#RHBA-2011-1524

All users of net-snmp are advised to upgrade to these updated packages, which
provide numerous bug fixes.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 678314 - snmptrapd leaks memory when NetSNMP::TrapReceiver is used for trap handlers
• BZ - 681949 - net-snmp logs "truncating integer value > 32 bits" for ssIORawSent and ssIORawReceived
• BZ - 683563 - SEGV in snmpd in var_hrswrun() in host/hr_swrun.c.
• BZ - 683680 - hrSystemDate timzeone sign is incorrect
• BZ - 707912 - net-snmp does not see mounted XFS filesystem
• BZ - 708370 - net-snmp increments request-id when generating multiple SMUX-PDUs for a SMUX peer
• BZ - 708947 - RHEL6: net-snmp may crash in netsnmp_access_arp_entry_create when system runs out of memory
• BZ - 709633 - fails to build without downstream patches
• BZ - 710667 - Net-SNMP python bindings core dump with SNMPv3
• BZ - 711481 - Python binding regex fails to account for colon
• BZ - 720704 - Assigning negative number to unsigned variable
• BZ - 725657 - net-snmp should be compiled with relro
• BZ - 729738 - net-snmp dumps core in netsnmp_oid_find_prefix

CVEs

(none)

References

• https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/net-snmp.html#RHBA-2011-1524