net-snmp-5.5-54.AXS4

SNMP (Simple Network Management Protocol) is a protocol used for
network management. The NET-SNMP project includes various SNMP tools:
an extensible agent, an SNMP library, tools for requesting or setting
information from SNMP agents, tools for generating and handling SNMP
traps and a version of the netstat command which uses SNMP. This
package contains the snmpd and snmptrapd daemons, documentation, etc.

You will probably also want to install the net-snmp-utils package,
which contains NET-SNMP utilities.

Security issues fixed with this release:

CVE-2014-3565

Fixed bugs:

* The HOST-RESOURCES-MIB::hrSystemProcesses object was not implemented because
parts of the HOST-RESOURCES-MIB module were rewritten in an earlier version of
net-snmp. Consequently, HOST-RESOURCES-MIB::hrSystemProcesses did not provide
information on the number of currently loaded or running processes. With this
update, HOST-RESOURCES-MIB::hrSystemProcesses has been implemented, and the
net-snmp daemon reports as expected.
* The Net-SNMP agent daemon, snmpd, reloaded the system ARP table every 60
seconds. As a consequence, snmpd could cause a short CPU usage spike on busy
systems with a large APR table. With this update, the problem was fixed.
* Previously, snmpd used an invalid pointer to the current time when
periodically checking certain conditions specified by the "monitor" option in
the /etc/snmpd/snmpd.conf file. Consequently, snmpd terminated unexpectedly on
start with a segmentation fault if a certain entry with the "monitor" option was
used. Now, snmpd has been update to pass this error.
* Previously, snmpd expected 8-bit network interface indices when processing
HOST-RESOURCES-MIB::hrDeviceTable. If an interface index of a local network
interface was larger than 30,000 items, snmpd could terminate unexpectedly due
to accessing invalid memory. The bug was fixed in this update.
* The snmpdtrapd service incorrectly checked for errors when forwarding a trap
with a RequestID value of 0, and logged "Forward failed" even though the trap
was successfully forwarded. This update fixes snmptrapd checks and the
aforementioned message is now logged only when appropriate.
* Previously, snmpd ignored the value of the "storageUseNFS" option in the
/etc/snmpd/snmpd.conf file. As a consequence, NFS drivers were shown as "Network
Disks", even though "storageUseNFS" was set to "2" to report them as "Fixed
Disks" in HOST-RESOURCES-MIB::hrStorageTable. With this update, fixed it.
* Previously, the Net-SNMP python binding used an incorrect size (8 bytes
instead of 4) for variables of IPADDRESS type. Consequently, applications that
were using Net-SNMP Python bindings could send malformed SNMP messages. With
this update, this bug has been fixed.
* Previously, the snmpd service did not cut values in
HOST-RESOURCES-MIB::hrStorageTable to signed 32-bit integers, as required by
SNMP standards, and provided the values as unsigned integers. As a consequence,
the HOST-RESOURCES-MIB::hrStorageTable implementation did not conform to RFC
2790. The values are now cut to 32-bit signed integers, and snmpd is therefore
standard compliant.