Fedora Core 3: 2005-562 Critical: net-snmp Denial of Service

SNMP (Simple Network Management Protocol) is a protocol used for

network management. The NET-SNMP project includes various SNMP tools:

an extensible agent, an SNMP library, tools for requesting or setting

information from SNMP agents, tools for generating and handling SNMP

traps, a version of the netstat command which uses SNMP, and a Tk/Perl

mib browser. This package contains the snmpd and snmptrapd daemons,

documentation, etc.

You will probably also want to install the net-snmp-utils package,

which contains NET-SNMP utilities.

Building option:

--without tcp_wrappers : disable tcp_wrappers support

- CAN-2005-2177 new upstream version fixing DoS (#162908)

- CAN-2005-1740 net-snmp insecure temporary file usage (#158770)

- session free fixed, agentx modules build fine (#157851)

- report gigabit Ethernet speeds using Ethtool (#152480)

4b721f407f7e3f8328b55c221934a1c3 SRPMS/net-snmp-5.2.1.2-FC3.1.src.rpm

b5e93da4d42a9ed378ade7a4dca53303 x86_64/net-snmp-5.2.1.2-FC3.1.x86_64.rpm

5c9b2a222c5b73d8574bfa73fa7a43db x86_64/net-snmp-utils-5.2.1.2-FC3.1.x86_64.rpm

0742d799d460c662ead52bc00cb5c0c4 x86_64/net-snmp-devel-5.2.1.2-FC3.1.x86_64.rpm

9f4058884731fb796989c070cc8daf79 x86_64/net-snmp-perl-5.2.1.2-FC3.1.x86_64.rpm

16e4b9661cd1877a7fe4c407defcfb59 x86_64/net-snmp-libs-5.2.1.2-FC3.1.x86_64.rpm

3172c8d4cd09a5aacaf07fe67838b3e0 x86_64/debug/net-snmp-debuginfo-5.2.1.2-FC3.1.x86_64.rpm

7b9f7d1d829c812906550f4788315d55 x86_64/net-snmp-libs-5.2.1.2-FC3.1.i386.rpm

592d67733a8b4dcaa2cae2aff855674d i386/net-snmp-5.2.1.2-FC3.1.i386.rpm

437282b8f6bf797286b55ab96021b27e i386/net-snmp-utils-5.2.1.2-FC3.1.i386.rpm

ad465047964e37127328c5c260562d8a i386/net-snmp-devel-5.2.1.2-FC3.1.i386.rpm

8da7b9da314591bcc6ebf0f139cb79c1 i386/net-snmp-perl-5.2.1.2-FC3.1.i386.rpm

7b9f7d1d829c812906550f4788315d55 i386/net-snmp-libs-5.2.1.2-FC3.1.i386.rpm

bdf494c06278cdb8bd7a029694403ff5 i386/debug/net-snmp-debuginfo-5.2.1.2-FC3.1.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com