Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -2 articles for you...
197

Debian LTS: DLA-2868-1 Critical: AdvanceCOMP Memory Access Issues

Several vulnerabilities have been fixed in the AdvanceCOMP recompression utilities. CVE-2018-1056 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2868-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk December 29, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : advancecomp Version : 1.20-1+deb9u1 CVE ID : CVE-2018-1056 CVE-2019-8379 CVE-2019-8383 CVE-2019-9210 Debian Bug : 889270 923416 928729 928730 Several vulnerabilities have been fixed in the AdvanceCOMP recompression utilities. CVE-2018-1056 Out-of-bounds heap buffer read in advzip. CVE-2019-8379 NULL pointer dereference in be_uint32_read(). CVE-2019-8383 Invalid memory access in adv_png_unfilter_8(). CVE-2019-9210 Integer overflow in advpng with invalid PNG size. For Debian 9 stretch, these problems have been fixed in version 1.20-1+deb9u1. We recommend that you upgrade your advancecomp packages. For the detailed security status of advancecomp please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/advancecomp Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu LTS USN-4910-1 addresses several vulnerabilities in image processing libraries to improve reliability and safety.. advancecomp update, Debian security, Debian advisory, security update on utilities. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 29, 2021 Critical Debian LTS
197

Debian Stretch: DLA-2829-1 Critical: Libvpx Buffer Read Security Fix

An out-of-bounds buffer read on truncated key frames in vp8_decode_frame has been fixed in libvpx, a popular library for the VP8 and VP9 video codecs. For Debian 9 stretch, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2829-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk November 27, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : libvpx Version : 1.6.1-3+deb9u3 CVE ID : CVE-2020-0034 An out-of-bounds buffer read on truncated key frames in vp8_decode_frame has been fixed in libvpx, a popular library for the VP8 and VP9 video codecs. For Debian 9 stretch, this problem has been fixed in version 1.6.1-3+deb9u3. We recommend that you upgrade your libvpx packages. For the detailed security status of libvpx please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libvpx Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . A critical vulnerability in libvpx resolved for Debian stretch. Update your system to improve protection.. libvpx Update, Debian Security, Buffer Read Fix, Video Codec Security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 27, 2021 Critical Debian LTS
197

Debian 8: DLA-2136-1 Critical: Libvpx Out-Of-Bounds Buffer Read

It was discovered that there was an out-of-bounds buffer read vulnerability in libvpx, a library implementing the VP8 & VP9 video codecs. . Package : libvpx Version : 1.3.0-3+deb8u3 CVE ID : CVE-2020-0034 It was discovered that there was an out-of-bounds buffer read vulnerability in libvpx, a library implementing the VP8 & VP9 video codecs. For Debian 8 "Jessie", this issue has been fixed in libvpx version 1.3.0-3+deb8u3. We recommend that you upgrade your libvpx packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS Regards, - -- ,'`. : :' : Chris Lamb `. `'` This email address is being protected from spambots. You need JavaScript enabled to view it. / chris-lamb.co.uk `- . The Libvpx framework encountered a critical out-of-bounds buffer read vulnerability. To resolve this, please upgrade to version 1.3.0-3+deb8u3.. libvpx Buffer Read Issue Out-Of-Bounds Security Update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 09, 2020 Critical Debian LTS
100

SUSE: 2019:1522-1 Important: sqlite3 Security Update for Server

An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:1522-1 Rating: important References: #1085790 #1132045 #1136976 Cross-References: CVE-2017-10989 CVE-2018-8740 CVE-2019-8457 Affected Products: SUSE Linux Enterprise Server 12-LTSS ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode() when handling invalid rtree tables (bsc#1136976). - CVE-2018-8740: Fixed a NULL pointer dereference related to corrupted databases schemas (bsc#1085790). - CVE-2017-10989: Fixed a heap-based buffer over-read in getNodeSize() (bsc#1132045). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2019-1522=1 Package List: - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): libsqlite3-0-3.8.3.1-2.12.1 libsqlite3-0-debuginfo-3.8.3.1-2.12.1 sqlite3-3.8.3.1-2.12.1 sqlite3-debuginfo-3.8.3.1-2.12.1 sqlite3-debugsource-3.8.3.1-2.12.1 - SUSE Linux Enterprise Server 12-LTSS (s390x x86_64): libsqlite3-0-32bit-3.8.3.1-2.12.1 libsqlite3-0-debuginfo-32bit-3.8.3.1-2.12.1 References: https://www.suse.com/security/cve/CVE-2017-10989.html https://www.suse.com/security/cve/CVE-2018-8740.html https://www.suse.com/security/cve/CVE-2019-8457.html https://bugzilla.suse.com/1085790 https://bugzilla.suse.com/1132045 https://bugzilla.suse.com/1136976 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . A security patch for sqlite3 addresses significant vulnerabilities stemming from three separate issues impacting SUSE environments.. SUSE Security Update, sqlite3 Patch Instructions, important Risks, Security Issues Resolution. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 17, 2019 Important SuSE
200

Scientific Linux: CVE-2012-2141 Moderate: Net-SNMP Remote Exploit Fix

Moderate: net-snmp security and bug fix update. Date: Wed, 16 Jan 2013 16:10:16 -0600 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Moderate: net-snmp on SL5.x i386/x86_64 MIME-Version: 1.0 Synopsis: Moderate: net-snmp security and bug fix update Issue Date: 2013-01-08 CVE Numbers: CVE-2012-2141 -- An out-of-bounds buffer read flaw was found in the net-snmp agent. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the "extend" directive (in "/etc/snmp/snmpd.conf") could use this flaw to crash snmpd via a crafted SNMP GET request. (CVE-2012-2141) Bug fixes: * Devices that used certain file systems were not reported in the "HOST- RESOURCES-MIB::hrStorageTable" table. As a result, the snmpd daemon did not recognize devices using tmpfs, ReiserFS, and Oracle Cluster File System (OCFS2) file systems. This update recognizes these devices and reports them in the "HOST-RESOURCES-MIB::hrStorageTable" table. * The snmptrapd (8) man page did not correctly describe how to load multiple configuration files using the "-c" option. This update describes correctly that multiple configuration files must be separated by a comma. * Integers truncated from 64 to 32-bit were not correctly evaluated. As a consequence, the snmpd daemon could enter an endless loop when encoding the truncated integers to network format. This update modifies the underlying code so that snmpd correctly checks truncated 64-bit integers. Now, snmpd avoids an endless loop. * snmpd did not correctly check for interrupted system calls when enumerating existing IPv6 network prefixes during startup. As a consequence, snmpd could prematurely exit when receiving a signal during this enumeration. This update checks the network prefix enumeration code for interrupted system calls. Now, snmpd no longer terminates when a signal is received. * snmpd used the wrong length of COUNTER64 values in the AgentX protocol. Asa consequence, snmpd could not decode two consecutive COUNTER64 values in one AgentX packet. This update uses the correct COUNTER64 size and can process two or mode COUNTER64 values in AgentX communication. * snmpd ignored the "-e" parameter of the "trapsess" option in the snmpd configuration file. As a result, outgoing traps were incorrectly sent with the default EngineID of snmpd when configuring "trapsess" with an explicit EngineID. This update modifies the underlying code to send outgoing traps using the EngineID as specified in the "trapsess -e" parameter in the configuration file. * snmpd did not correctly encode negative Request-IDs in outgoing requests, for example during trap operations. As a consequence, a 32-bit value could be encoded in 5 bytes instead of 4, and the outgoing requests were refused by certain implementations of the SNMP protocol as invalid. With this update, a Request-ID can no longer become negative and is always encoded in 4 bytes. * snmpd ignored the port number of the "clientaddr" option when specifying the source address of outgoing SNMP requests. As a consequence, the system assigned a random address. This update allows to specify both the port number and the source IP address in the "clientaddr" option. Now, administrators can increase security with firewall rules and Security-Enhanced Linux (SELinux) policies by configuring a specific source port of outgoing traps and other requests. * snmpd did not correctly process responses to internal queries when initializing monitoring enabled by the "monitor" option in the "/etc/snmp/snmpd.conf" configuration file. As a consequence, snmpd was not fully initialized and the error message "failed to run mteTrigger query" appeared in the system log 30 seconds after the snmpd startup. This update explicitly checks for responses to internal monitoring queries. After installing the update, the snmpd and snmptrapd daemons will be restarted automatically. -- SL5 x86_64 net-snmp-5.3.2.2-20.el5.x86_64.rpm net-snmp-debuginfo-5.3.2.2-20.el5.i386.rpm net-snmp-debuginfo-5.3.2.2-20.el5.x86_64.rpm net-snmp-libs-5.3.2.2-20.el5.i386.rpm net-snmp-libs-5.3.2.2-20.el5.x86_64.rpm net-snmp-perl-5.3.2.2-20.el5.x86_64.rpm net-snmp-utils-5.3.2.2-20.el5.x86_64.rpm net-snmp-devel-5.3.2.2-20.el5.i386.rpm net-snmp-devel-5.3.2.2-20.el5.x86_64.rpm i386 net-snmp-5.3.2.2-20.el5.i386.rpm net-snmp-debuginfo-5.3.2.2-20.el5.i386.rpm net-snmp-libs-5.3.2.2-20.el5.i386.rpm net-snmp-perl-5.3.2.2-20.el5.i386.rpm net-snmp-utils-5.3.2.2-20.el5.i386.rpm net-snmp-devel-5.3.2.2-20.el5.i386.rpm - Scientific Linux Development Team . Balanced net-snmp safety patch resolving bounds check vulnerability. Key improvements incorporated for reliability.. Scientific Linux, net-snmp, buffer read flaw, security update. . LinuxSecurity.com Team

Calendar 2 Jan 16, 2013 Scientific Linux
98

RHEL 5: RHSA-2023:0487-01 Important: OpenSSL Security Flaw

Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: net-snmp security and bug fix update Advisory ID: RHSA-2013:0124-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:0124.html Issue date: 2013-01-08 CVE Names: CVE-2012-2141 ==================================================================== 1. Summary: Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: These packages provide various libraries and tools for the Simple Network Management Protocol (SNMP). An out-of-bounds buffer read flaw was found in the net-snmp agent. A remote attacker with read privileges to a Management Information Base (MIB) subtree handled by the "extend" directive (in "/etc/snmp/snmpd.conf") could use this flaw to crash snmpd via a crafted SNMP GET request. (CVE-2012-2141) Bug fixes: * Devices that used certain file systems were not reported in the "HOST-RESOURCES-MIB::hrStorageTable" table. As a result, the snmpd daemon did not recognize devices using tmpfs, ReiserFS, and Oracle ClusterFile System (OCFS2) file systems. This update recognizes these devices and reports them in the "HOST-RESOURCES-MIB::hrStorageTable" table. (BZ#754652, BZ#755958, BZ#822061) * The snmptrapd (8) man page did not correctly describe how to load multiple configuration files using the "-c" option. This update describes correctly that multiple configuration files must be separated by a comma. (BZ#760001) * Integers truncated from 64 to 32-bit were not correctly evaluated. As a consequence, the snmpd daemon could enter an endless loop when encoding the truncated integers to network format. This update modifies the underlying code so that snmpd correctly checks truncated 64-bit integers. Now, snmpd avoids an endless loop. (BZ#783892) * snmpd did not correctly check for interrupted system calls when enumerating existing IPv6 network prefixes during startup. As a consequence, snmpd could prematurely exit when receiving a signal during this enumeration. This update checks the network prefix enumeration code for interrupted system calls. Now, snmpd no longer terminates when a signal is received. (BZ#799699) * snmpd used the wrong length of COUNTER64 values in the AgentX protocol. As a consequence, snmpd could not decode two consecutive COUNTER64 values in one AgentX packet. This update uses the correct COUNTER64 size and can process two or mode COUNTER64 values in AgentX communication. (BZ#803585) * snmpd ignored the "-e" parameter of the "trapsess" option in the snmpd configuration file. As a result, outgoing traps were incorrectly sent with the default EngineID of snmpd when configuring "trapsess" with an explicit EngineID. This update modifies the underlying code to send outgoing traps using the EngineID as specified in the "trapsess -e" parameter in the configuration file. (BZ#805689) * snmpd did not correctly encode negative Request-IDs in outgoing requests, for example during trap operations. As a consequence, a 32-bit value could be encoded in 5 bytes instead of 4, and the outgoing requests were refused bycertain implementations of the SNMP protocol as invalid. With this update, a Request-ID can no longer become negative and is always encoded in 4 bytes. (BZ#818259) * snmpd ignored the port number of the "clientaddr" option when specifying the source address of outgoing SNMP requests. As a consequence, the system assigned a random address. This update allows to specify both the port number and the source IP address in the "clientaddr" option. Now, administrators can increase security with firewall rules and Security-Enhanced Linux (SELinux) policies by configuring a specific source port of outgoing traps and other requests. (BZ#828691) * snmpd did not correctly process responses to internal queries when initializing monitoring enabled by the "monitor" option in the "/etc/snmp/snmpd.conf" configuration file. As a consequence, snmpd was not fully initialized and the error message "failed to run mteTrigger query" appeared in the system log 30 seconds after the snmpd startup. This update explicitly checks for responses to internal monitoring queries. (BZ#830042) Users of net-snmp should upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, the snmpd and snmptrapd daemons will be restarted automatically. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 755958 - net-snmp ignores reiserfs formatted partitions 803585 - agentx counter64 snmpget problem 815813 - CVE-2012-2141 net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash) 840861 - snmpd does not report error when clientaddr : cannot bind to the specified port 6. Package List: Red Hat Enterprise Linux Desktop (v. 5client): Source: i386: net-snmp-5.3.2.2-20.el5.i386.rpm net-snmp-debuginfo-5.3.2.2-20.el5.i386.rpm net-snmp-libs-5.3.2.2-20.el5.i386.rpm net-snmp-perl-5.3.2.2-20.el5.i386.rpm net-snmp-utils-5.3.2.2-20.el5.i386.rpm x86_64: net-snmp-5.3.2.2-20.el5.x86_64.rpm net-snmp-debuginfo-5.3.2.2-20.el5.i386.rpm net-snmp-debuginfo-5.3.2.2-20.el5.x86_64.rpm net-snmp-libs-5.3.2.2-20.el5.i386.rpm net-snmp-libs-5.3.2.2-20.el5.x86_64.rpm net-snmp-perl-5.3.2.2-20.el5.x86_64.rpm net-snmp-utils-5.3.2.2-20.el5.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: net-snmp-debuginfo-5.3.2.2-20.el5.i386.rpm net-snmp-devel-5.3.2.2-20.el5.i386.rpm x86_64: net-snmp-debuginfo-5.3.2.2-20.el5.i386.rpm net-snmp-debuginfo-5.3.2.2-20.el5.x86_64.rpm net-snmp-devel-5.3.2.2-20.el5.i386.rpm net-snmp-devel-5.3.2.2-20.el5.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: net-snmp-5.3.2.2-20.el5.i386.rpm net-snmp-debuginfo-5.3.2.2-20.el5.i386.rpm net-snmp-devel-5.3.2.2-20.el5.i386.rpm net-snmp-libs-5.3.2.2-20.el5.i386.rpm net-snmp-perl-5.3.2.2-20.el5.i386.rpm net-snmp-utils-5.3.2.2-20.el5.i386.rpm ia64: net-snmp-5.3.2.2-20.el5.ia64.rpm net-snmp-debuginfo-5.3.2.2-20.el5.ia64.rpm net-snmp-devel-5.3.2.2-20.el5.ia64.rpm net-snmp-libs-5.3.2.2-20.el5.ia64.rpm net-snmp-perl-5.3.2.2-20.el5.ia64.rpm net-snmp-utils-5.3.2.2-20.el5.ia64.rpm ppc: net-snmp-5.3.2.2-20.el5.ppc.rpm net-snmp-debuginfo-5.3.2.2-20.el5.ppc.rpm net-snmp-debuginfo-5.3.2.2-20.el5.ppc64.rpm net-snmp-devel-5.3.2.2-20.el5.ppc.rpm net-snmp-devel-5.3.2.2-20.el5.ppc64.rpm net-snmp-libs-5.3.2.2-20.el5.ppc.rpm net-snmp-libs-5.3.2.2-20.el5.ppc64.rpm net-snmp-perl-5.3.2.2-20.el5.ppc.rpm net-snmp-utils-5.3.2.2-20.el5.ppc.rpm s390x: net-snmp-5.3.2.2-20.el5.s390x.rpm net-snmp-debuginfo-5.3.2.2-20.el5.s390.rpm net-snmp-debuginfo-5.3.2.2-20.el5.s390x.rpm net-snmp-devel-5.3.2.2-20.el5.s390.rpm net-snmp-devel-5.3.2.2-20.el5.s390x.rpm net-snmp-libs-5.3.2.2-20.el5.s390.rpm net-snmp-libs-5.3.2.2-20.el5.s390x.rpm net-snmp-perl-5.3.2.2-20.el5.s390x.rpm net-snmp-utils-5.3.2.2-20.el5.s390x.rpm x86_64: net-snmp-5.3.2.2-20.el5.x86_64.rpm net-snmp-debuginfo-5.3.2.2-20.el5.i386.rpm net-snmp-debuginfo-5.3.2.2-20.el5.x86_64.rpm net-snmp-devel-5.3.2.2-20.el5.i386.rpm net-snmp-devel-5.3.2.2-20.el5.x86_64.rpm net-snmp-libs-5.3.2.2-20.el5.i386.rpm net-snmp-libs-5.3.2.2-20.el5.x86_64.rpm net-snmp-perl-5.3.2.2-20.el5.x86_64.rpm net-snmp-utils-5.3.2.2-20.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2012-2141 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat,Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFQ68PEXlSAg2UNWIIRAjCiAJ9W/MBaqJqdzDYYAGmTv4kzqNkg8wCghMvJ 51oSTzzi76pyrX3XyxqAuv0=MaWU -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . A significant vulnerability has been addressed in the latest net-snmp updates for Red Hat Enterprise Linux 5. Find further details.. net-snmp Update, Red Hat Security, Red Hat Updates. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 08, 2013 Important Red Hat
98

Red Hat Enterprise Linux 6: RHSA-2012:0876-04 Moderate net-snmp Buffer Read

Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: net-snmp security and bug fix update Advisory ID: RHSA-2012:0876-04 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2012:0876.html Issue date: 2012-06-20 CVE Names: CVE-2012-2141 ==================================================================== 1. Summary: Updated net-snmp packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses SNMP, and a Tk/Perl Management Information Base (MIB) browser. An array index error, leading to an out-of-bounds buffer read flaw, was found in the way the net-snmp agent looked up entries in the extension table. A remote attacker with read privileges to aManagement Information Base (MIB) subtree handled by the "extend" directive (in "/etc/snmp/snmpd.conf") could use this flaw to crash snmpd via a crafted SNMP GET request. (CVE-2012-2141) These updated net-snmp packages also include numerous bug fixes. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.3 Technical Notes for information on the most significant of these changes. All users of net-snmp are advised to upgrade to these updated packages, which contain backported patches to resolve these issues. After installing the update, the snmpd and snmptrapd daemons will be restarted automatically. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 736580 - snmpd memory leak when AgentX subagent disconnects while processing a request 748410 - hrStorageSize from HOST-RESOURCES-TYPES mib reports incorrect size for filesystems > 16TB 754275 - Cannot create new rows in snmpTargetAddrTable 757685 - net-snmp ignores reiserfs formatted partitions 786931 - sysObjectID cannot be set to an OID value with a length greater than 10. 788954 - snmpd: error finding row index in _ifXTable_container_row_restore 799291 - proxied OIDs unspecified in proxy statement in snmpd.conf 815813 - CVE-2012-2141 net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash) 822480 - move /var/lib/net-snmp from net-snmp to net-snmp-libs 6. Package List: Red Hat Enterprise Linux Desktop (v.6): Source: i386: net-snmp-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-libs-5.5-41.el6.i686.rpm x86_64: net-snmp-5.5-41.el6.x86_64.rpm net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.x86_64.rpm net-snmp-libs-5.5-41.el6.i686.rpm net-snmp-libs-5.5-41.el6.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): Source: i386: net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-devel-5.5-41.el6.i686.rpm net-snmp-perl-5.5-41.el6.i686.rpm net-snmp-python-5.5-41.el6.i686.rpm net-snmp-utils-5.5-41.el6.i686.rpm x86_64: net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.x86_64.rpm net-snmp-devel-5.5-41.el6.i686.rpm net-snmp-devel-5.5-41.el6.x86_64.rpm net-snmp-perl-5.5-41.el6.x86_64.rpm net-snmp-python-5.5-41.el6.x86_64.rpm net-snmp-utils-5.5-41.el6.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: net-snmp-5.5-41.el6.x86_64.rpm net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.x86_64.rpm net-snmp-libs-5.5-41.el6.i686.rpm net-snmp-libs-5.5-41.el6.x86_64.rpm net-snmp-perl-5.5-41.el6.x86_64.rpm net-snmp-python-5.5-41.el6.x86_64.rpm net-snmp-utils-5.5-41.el6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.x86_64.rpm net-snmp-devel-5.5-41.el6.i686.rpm net-snmp-devel-5.5-41.el6.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: i386: net-snmp-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-devel-5.5-41.el6.i686.rpm net-snmp-libs-5.5-41.el6.i686.rpm net-snmp-perl-5.5-41.el6.i686.rpm net-snmp-python-5.5-41.el6.i686.rpm net-snmp-utils-5.5-41.el6.i686.rpm ppc64: net-snmp-5.5-41.el6.ppc64.rpm net-snmp-debuginfo-5.5-41.el6.ppc.rpm net-snmp-debuginfo-5.5-41.el6.ppc64.rpm net-snmp-devel-5.5-41.el6.ppc.rpm net-snmp-devel-5.5-41.el6.ppc64.rpm net-snmp-libs-5.5-41.el6.ppc.rpm net-snmp-libs-5.5-41.el6.ppc64.rpm net-snmp-perl-5.5-41.el6.ppc64.rpm net-snmp-python-5.5-41.el6.ppc64.rpm net-snmp-utils-5.5-41.el6.ppc64.rpm s390x: net-snmp-5.5-41.el6.s390x.rpm net-snmp-debuginfo-5.5-41.el6.s390.rpm net-snmp-debuginfo-5.5-41.el6.s390x.rpm net-snmp-devel-5.5-41.el6.s390.rpm net-snmp-devel-5.5-41.el6.s390x.rpm net-snmp-libs-5.5-41.el6.s390.rpm net-snmp-libs-5.5-41.el6.s390x.rpm net-snmp-perl-5.5-41.el6.s390x.rpm net-snmp-python-5.5-41.el6.s390x.rpm net-snmp-utils-5.5-41.el6.s390x.rpm x86_64: net-snmp-5.5-41.el6.x86_64.rpm net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.x86_64.rpm net-snmp-devel-5.5-41.el6.i686.rpm net-snmp-devel-5.5-41.el6.x86_64.rpm net-snmp-libs-5.5-41.el6.i686.rpm net-snmp-libs-5.5-41.el6.x86_64.rpm net-snmp-perl-5.5-41.el6.x86_64.rpm net-snmp-python-5.5-41.el6.x86_64.rpm net-snmp-utils-5.5-41.el6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: net-snmp-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-devel-5.5-41.el6.i686.rpm net-snmp-libs-5.5-41.el6.i686.rpm net-snmp-perl-5.5-41.el6.i686.rpm net-snmp-python-5.5-41.el6.i686.rpm net-snmp-utils-5.5-41.el6.i686.rpm x86_64: net-snmp-5.5-41.el6.x86_64.rpm net-snmp-debuginfo-5.5-41.el6.i686.rpm net-snmp-debuginfo-5.5-41.el6.x86_64.rpm net-snmp-devel-5.5-41.el6.i686.rpm net-snmp-devel-5.5-41.el6.x86_64.rpm net-snmp-libs-5.5-41.el6.i686.rpm net-snmp-libs-5.5-41.el6.x86_64.rpm net-snmp-perl-5.5-41.el6.x86_64.rpm net-snmp-python-5.5-41.el6.x86_64.rpm net-snmp-utils-5.5-41.el6.x86_64.rpm Thesepackages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2012-2141 https://access.redhat.com/security/updates/classification#moderate https://access.redhat.com/search/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2012 Red Hat, Inc. . Check out the recent Red Hat advisory regarding net-snmp enhancements that tackle moderate security vulnerabilities. Ensure your packages are updated without delay!. Red Hat Security, net-snmp Patch, Enterprise Linux Update, Security Advisory, SNMP Security. . LinuxSecurity.com Team

Calendar 2 Jun 20, 2012 Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here