RHBA-2015:0607 - Bug Fix Advisory

Topic

Updated net-snmp packages that fix several bugs are now available for Red Hat
Enterprise Linux 7.

Description

The net-snmp packages provide various libraries and tools for the Simple Network
Management Protocol (SNMP), including an SNMP library, an extensible agent,
tools for requesting or setting information from SNMP agents, tools for
generating and handling SNMP traps, a version of the netstat command which uses
SNMP, and a Tk/Perl Management Information Base (MIB) browser.

This update fixes the following bugs:

• The SNMP daemon (snmpd) can optionally ignore remote file systems to speed up

the reporting of storage-related statistics by setting the
"skipNFSInHostResources" option in the snmpd.conf file to "1". Prior to this
update, net-snmp did not ignore the MultiVersion File System (MVFS) with this
configuration. Consequently, when snmpd ran on a system with an MVFS mounted,
snmpd had to wait for remote storage information or network timeouts when
gathering storage-related information. The net-snmp packages have been updated
to ignore MVFS in the described situation, and the negative impact on the snmpd
performance no longer occurs. (BZ#1086606)

• Previously, snmpd did not expect that two or more entries with the same

destination and the same gateway addresses can be present in a network routing
table and did not check for duplicates in the "IP-FORWARD-MIB::ipCidrRouteTable"
object. This could cause snmpd to send an incorrect reply to the GETNEXT
requests in "IP-FORWARD-MIB::ipCidrRouteTable", as it returned the same object
instead of returning the next object. Consequently, the system displayed the
"Error: OID not increasing" message after using the snmpwalk utility to read
"IP-FORWARD-MIB::ipCidrRouteTable". This update modifies snmpd to check for
duplicates in "IP-FORWARD-MIB::ipCidrRouteTable", and snmpd now returns the next
object in the described situation. (BZ#1172013)

• The "clientaddr" and "clientaddrUsesPort" configuration options allow the

system administrator to set a specific port for outgoing SNMP requests.
Previously, when the port number could not be used, SNMP tools and daemons did
not report this and instead assigned a random port for the outgoing request. As
a consequence, net-snmp sent the SNMP requests from unexpected ports, and the
system administrator was not informed about this. This update modifies net-snmp
to report the error in the described situation, and the system administrator is
now informed that the requested port cannot be used. (BZ#1086925)

• Previously, when an object identifier (OID) was out of the subtree registered

by the proxy statement in the /etc/snmp/snmpd.conf file, snmpd failed to use a
correct OID of proxied GETNEXT requests. With this update, snmpd adjusts the
OIDs of proxied GETNEXT requests correctly and sends appropriate requests to the
remote agent as expected. (BZ#1087801)

• Previously, the net-snmp-python subpackage contained a generic net-snmp readme

file. With this update, net-snmp-python provides a readme file related to the
Net-SNMP Python module. (BZ#1158391)

• Previously, snmpd did not expect that the CPU number can have more than two

digits. As a consequence, snmpd did not show more than 100 processors in the
"HOST-RESOURCES-MIB::hrProcessorTable" object when reading CPU statistics. With
this update, snmpd has been modified to no longer make assumptions about the CPU
ID length. As a result, "HOST-RESOURCES-MIB::hrProcessorTable" now shows all
CPUs. (BZ#1070076)

Users of net-snmp are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64

Fixes

• BZ - 1070076 - SNMP HRPROCESSORLOAD RETURNS INCORRECT VALUES FOR PROCESSOR #'S > 100
• BZ - 1086925 - snmpd does not report error when clientaddr <ip>:<port> cannot bind to the specified port
• BZ - 1087801 - proxied OIDs unspecified in proxy statement in snmpd.conf
• BZ - 1158391 - README file in net-snmp-python package is wrong
• BZ - 1172013 - NetworkManager causes snmp OID not increasing

CVEs

(none)

References

(none)