Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

Slackware: 2008-320-02 Critical: Net-SNMP Denial of Service Advisory

slackware
Calendar Grey November 16, 2008
Dist Slackware Esm H88
Updated net-snmp packages for Slackware address a vulnerability that could lead to a denial of service in versions 12.0 and 12.1.
New net-snmp packages are available for Slackware 12.0, 12.1, and -current to fix a denial of service issue

Summary

Here are the details from the Slackware 12.1 ChangeLog: patches/packages/net-snmp-5.4.2.1-i486-1_slack12.1.tgz: Upgraded to net-snmp-5.4.2.1. This fixes a problem where a user with read access could cause snmpd to crash, resulting in a denial of service. For more information, see: https://www.cve.org/CVERecord?id=CVE-2008-4309 (* Security fix *)

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/net-snmp-5.4.2.1-i486-1_slack12.0.tgz
Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/net-snmp-5.4.2.1-i486-1_slack12.1.tgz
Updated package for Slackware -current:

MD5 Signatures

Slackware 12.0 package: c585af1a43e86cb7be73382c1ee4e575 net-snmp-5.4.2.1-i486-1_slack12.0.tgz
Slackware 12.1 package: 0aee48e834e781e8d2b910b5278fd8a7 net-snmp-5.4.2.1-i486-1_slack12.1.tgz
Slackware -current package: cc259e3a080404e89d7dab5eb7cbc709 net-snmp-5.4.2.1-i486-1.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg net-snmp-5.4.2.1-i486-1_slack12.1.tgz Then, restart snmpd if the system uses it.

Related News

Your message here