[bluewhite64-security] net-snmp (BW64SA:20081116-02)
Hash: SHA1
[bluewhite64-security] net-snmp (BW64SA:20081116-02)
New net-snmp packages are available for Bluewhite64 12.0, 12.1, and -current to
fix a denial of service issue.
More details about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4309
Here are the details from the Bluewhite64 12.1 ChangeLog:
+--------------------------+
PATCHES/packages/net-snmp-5.4.2.1-x86_64-1.tgz: Upgraded to net-snmp-5.4.2.1.
This fixes a problem where a user with read access could cause snmpd to
crash, resulting in a denial of service.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4309
[*** Security fix ***]
+--------------------------+
Where to find the new packages:
+-----------------------------+
See the "Get Bluewhite64" section on http://bluewhite64.com for additional mirror sites
near you.
Updated package for Bluewhite64 12.0:
http://data.bluewhite64.com/bluewhite64-12.0/patches/packages/net-snmp-5.4.2.1-x86_64-1.tgz
Updated package for Bluewhite64 12.1:
http://data.bluewhite64.com/bluewhite64-12.1/patches/packages/net-snmp-5.4.2.1-x86_64-1.tgz
Updated package for Bluewhite64 -current:
http://data.bluewhite64.com/bluewhite64-current/bluewhite64/n/net-snmp-5.4.2.1-x86_64-1.tgz
MD5 signatures:
+-------------+
Bluewhite64 12.0 package:
86e9f136ccd0e3759f107bfa7522eb6f net-snmp-5.4.2.1-x86_64-1.tgz
Bluewhite64 12.1 package:
1022e8a57bf8b1eea5067a9ff20f3791 net-snmp-5.4.2.1-x86_64-1.tgz
Bluewhite64 -current package:
8a0cc712a58b5eb7d353b73d334a00a6 net-snmp-5.4.2.1-x86_64-1.tgz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg net-snmp-5.4.2.1-x86_64-1.tgz
+-----+
Bluewhite64 Linux Security Team
http://bluewhite64.com/gpg-key
security©bluewhite64.com
+-------------------------------------------------------+
| To leave the bluewhite64-security mailing list:
+-------------------------------------------------------+
| Send a blank email to
|
| bluewhite64-security-unsubscribe©bluewhite64.com
|
| You will get a confirmation message back containing
| instructions to complete the process.
|
| Please do not reply to this email address.
+--------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkkgrZYACgkQpTOsxuDdlY6wzACfeoHenw+MmA1m00ux1FMmgo6S
SWkAnAx2Cz2CfNYIrj3Ot2+bPiGMjru8
=Il+c
-----END PGP SIGNATURE-----