Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

openSUSE Leap 15.3 Important: net-snmp DoS Fix Available

opensuse
Calendar Grey January 11, 2022
Dist Opensuse Esm H88
Stay secure with the latest openSUSE net-snmp update addressing critical DoS vulnerabilities and MIB issues. Apply the update to protect your system
An update that solves two vulnerabilities, contains one feature and has 13 fixes is now available

Description

This update for net-snmp fixes the following issues:

- CVE-2020-15862: Make extended MIB read-only (bsc#1174961)

- CVE-2018-18065: Fix remote DoS in agent/helpers/table.c (bsc#1111122)

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.3:

zypper in -t patch openSUSE-SLE-15.3-2022-50=1

Package List

- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):

libsnmp30-5.7.3-10.9.1

libsnmp30-debuginfo-5.7.3-10.9.1

net-snmp-5.7.3-10.9.1

net-snmp-debuginfo-5.7.3-10.9.1

net-snmp-debugsource-5.7.3-10.9.1

net-snmp-devel-5.7.3-10.9.1

perl-SNMP-5.7.3-10.9.1

perl-SNMP-debuginfo-5.7.3-10.9.1

python2-net-snmp-5.7.3-10.9.1

python2-net-snmp-debuginfo-5.7.3-10.9.1

python3-net-snmp-5.7.3-10.9.1

python3-net-snmp-debuginfo-5.7.3-10.9.1

snmp-mibs-5.7.3-10.9.1

- openSUSE Leap 15.3 (x86_64):

libsnmp30-32bit-5.7.3-10.9.1

libsnmp30-32bit-debuginfo-5.7.3-10.9.1

net-snmp-devel-32bit-5.7.3-10.9.1

References

https://www.suse.com/security/cve/CVE-2018-18065.html

https://www.suse.com/security/cve/CVE-2020-15862.html

https://bugzilla.suse.com/1027353

https://bugzilla.suse.com/1081164

https://bugzilla.suse.com/1102775

https://bugzilla.suse.com/1108471

https://bugzilla.suse.com/1111122

https://bugzilla.suse.com/1116807

https://bugzilla.suse.com/1140341

https://bugzilla.suse.com/1145864

https://bugzilla.suse.com/1152968

https://bugzilla.suse.com/1174961

https://bugzilla.suse.com/1178021

https://bugzilla.suse.com/1178351

https://bugzilla.suse.com/1179009

https://bugzilla.suse.com/1179699

https://bugzilla.suse.com/1181591

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2022:0050-1
Rating: important
Affected Products: openSUSE Leap 15.3 ble.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here