[ubuntu/trusty-proposed] net-snmp 5.7.2~dfsg-8.1ubuntu3 (Accepted)

[Marc Deslauriers]

net-snmp (5.7.2~dfsg-8.1ubuntu3) trusty; urgency=medium

  * SECURITY UPDATE: denial of service via AgentX subagent timeout
    - debian/patches/CVE-2012-6151.patch: track cancelled sessions in
      agent/mibgroup/agentx/{master.c,master_admin.c}, agent/snmp_agent.c,
      include/net-snmp/agent/snmp_agent.h.
    - CVE-2012-6151
  * SECURITY UPDATE: denial of service when ICMP-MIB is in use
    - debian/patches/CVE-2014-2284.patch: fix ICMP mib table handling in
      agent/mibgroup/mibII/icmp.c, agent/mibgroup/mibII/kernel_linux.*.
    - CVE-2014-2284
  * SECURITY UPDATE: denial of service in perl trap handler
    - debian/patches/CVE-2014-2285.patch: handle empty community string in
      perl/TrapReceiver/TrapReceiver.xs.
    - CVE-2014-2285

Date: Tue, 08 Apr 2014 08:17:14 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/trusty/+source/net-snmp/5.7.2~dfsg-8.1ubuntu3
-------------- next part --------------
Format: 1.8
Date: Tue, 08 Apr 2014 08:17:14 -0400
Source: net-snmp
Binary: snmpd snmp libsnmp-base libsnmp30 libsnmp30-dbg libsnmp-dev libsnmp-perl python-netsnmp tkmib
Architecture: source
Version: 5.7.2~dfsg-8.1ubuntu3
Distribution: trusty
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libsnmp-base - SNMP configuration script, MIBs and documentation
 libsnmp-dev - SNMP (Simple Network Management Protocol) development files
 libsnmp-perl - SNMP (Simple Network Management Protocol) Perl5 support
 libsnmp30  - SNMP (Simple Network Management Protocol) library
 libsnmp30-dbg - SNMP (Simple Network Management Protocol) library debug
 python-netsnmp - SNMP (Simple Network Management Protocol) Python support
 snmp       - SNMP (Simple Network Management Protocol) applications
 snmpd      - SNMP (Simple Network Management Protocol) agents
 tkmib      - SNMP (Simple Network Management Protocol) MIB browser
Changes: 
 net-snmp (5.7.2~dfsg-8.1ubuntu3) trusty; urgency=medium
 .
   * SECURITY UPDATE: denial of service via AgentX subagent timeout
     - debian/patches/CVE-2012-6151.patch: track cancelled sessions in
       agent/mibgroup/agentx/{master.c,master_admin.c}, agent/snmp_agent.c,
       include/net-snmp/agent/snmp_agent.h.
     - CVE-2012-6151
   * SECURITY UPDATE: denial of service when ICMP-MIB is in use
     - debian/patches/CVE-2014-2284.patch: fix ICMP mib table handling in
       agent/mibgroup/mibII/icmp.c, agent/mibgroup/mibII/kernel_linux.*.
     - CVE-2014-2284
   * SECURITY UPDATE: denial of service in perl trap handler
     - debian/patches/CVE-2014-2285.patch: handle empty community string in
       perl/TrapReceiver/TrapReceiver.xs.
     - CVE-2014-2285
Checksums-Sha1: 
 bb62510f17f4c346b0ff041f0903583bb8eb534d 3007 net-snmp_5.7.2~dfsg-8.1ubuntu3.dsc
 6b13e654e6f2ae0e9c345b6c0e69b8c5989775e9 67954 net-snmp_5.7.2~dfsg-8.1ubuntu3.debian.tar.gz
Checksums-Sha256: 
 b79761a2c69df37d7da4e52f4556827743d6b8f7ade3007d594776fb6a263da0 3007 net-snmp_5.7.2~dfsg-8.1ubuntu3.dsc
 3a48b8b3962759fbe9b7582eb615758d2aad3979ac61681780d95ecfb9b2cc1c 67954 net-snmp_5.7.2~dfsg-8.1ubuntu3.debian.tar.gz
Files: 
 be5c4ba0f2c7eac46ce555b404629e61 3007 net optional net-snmp_5.7.2~dfsg-8.1ubuntu3.dsc
 af7a3155501324ee4d41b1446ee961c3 67954 net optional net-snmp_5.7.2~dfsg-8.1ubuntu3.debian.tar.gz
Original-Maintainer: Net-SNMP Packaging Team <pkg-net-snmp-devel at lists.alioth.debian.org>