-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2014:017 http://www.mandriva.com/en/support/security/ _______________________________________________________________________ Package : net-snmp Date : January 22, 2014 Affected: Business Server 1.0 _______________________________________________________________________ Problem Description: Updated net-snmp packages fix security vulnerability: Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, and hang) by causing the AgentX subagent to timeout (CVE-2012-6151). This update also fixes two other minor issues: IPADDRESS size in python-netsnmp on 64-bit systems and adding btrfs support to hrFSTable. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6151 http://advisories.mageia.org/MGASA-2014-0019.html _______________________________________________________________________ Updated Packages: Mandriva Business Server 1/X86_64: 959228fa98cb764643fda49fc3f2d16b mbs1/x86_64/lib64net-snmp30-5.7.2-1.mbs1.x86_64.rpm 521d3baf5a9bc2b64b645d5fded54b4b mbs1/x86_64/lib64net-snmp-devel-5.7.2-1.mbs1.x86_64.rpm cd4b2bc8aa2adc8cda3d96afb0594e26 mbs1/x86_64/lib64net-snmp-static-devel-5.7.2-1.mbs1.x86_64.rpm 86ebfcc8f265fa0af6b43b4fe07a7edf mbs1/x86_64/net-snmp-5.7.2-1.mbs1.x86_64.rpm 887b5a7ef272830005001bfd899d223d mbs1/x86_64/net-snmp-mibs-5.7.2-1.mbs1.x86_64.rpm 7f6123819e280fd7e88acb01f61e6567 mbs1/x86_64/net-snmp-tkmib-5.7.2-1.mbs1.x86_64.rpm 6a495803e81a1896242b0943230ea895 mbs1/x86_64/net-snmp-trapd-5.7.2-1.mbs1.x86_64.rpm befe57de590d5c41fcc147abc06c1a97 mbs1/x86_64/net-snmp-utils-5.7.2-1.mbs1.x86_64.rpm 56810dcad44c9b1608b6141fa12f9a45 mbs1/x86_64/perl-NetSNMP-5.7.2-1.mbs1.x86_64.rpm a92230ace71657d042cd7bf770c98234 mbs1/x86_64/python-netsnmp-5.7.2-1.mbs1.x86_64.rpm 7e1c7f2c91b059835d1ff01ddd1fdc58 mbs1/SRPMS/net-snmp-5.7.2-1.mbs1.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFS37hgmqjQ0CJFipgRAjxKAKC6ViJ2WOTAAWJFn11qJpAb/VDpIQCePDvL 7Y2ZoOmPI9yoA8XKT9uUKMk= =y+p/ -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
