SUSE-SU-2012:0888-1: moderate: Security update for net-snmp

[sle-updates at lists.suse.com]

   SUSE Security Update: Security update for net-snmp
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:0888-1
Rating:             moderate
References:         #670789 #759352 #762433 #762887 
Cross-References:   CVE-2012-2141
Affected Products:
                    SUSE Linux Enterprise Software Development Kit 11 SP2
                    SUSE Linux Enterprise Software Development Kit 11 SP1
                    SUSE Linux Enterprise Server 11 SP2
                    SUSE Linux Enterprise Server 11 SP1 for VMware
                    SUSE Linux Enterprise Server 11 SP1
                    SUSE Linux Enterprise Desktop 11 SP2
                    SUSE Linux Enterprise Desktop 11 SP1
______________________________________________________________________________

   An update that solves one vulnerability and has three fixes
   is now available.

Description:


   This update to net-snmp resolves the following issues:

   * Specially crafted SNMP GET requests could cause a
   denial of service (application crash) via a heap-based
   out-out-bounds read flaw which could be exploited remotely
   (CVE-2012-2141).
   * The snmpd agent should read shared memory information
   from /proc/meminfo when running on Linux Kernel 2.6 or
   newer (bnc#762887).
   * The snmpd agent could crash when an AgentX sub-agent
   disconnects in the middle of a request (bnc#670789).
   * After rotating the net-snmp log file, use
   "try-restart" to restart the daemon. Reloading with a
   SIGHUP signal may trigger crashes when dynamic modules
   (dlmod) are in use (bnc#762433).

   Security Issue reference:

   * CVE-2012-2141
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2141
   >


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Software Development Kit 11 SP2:

      zypper in -t patch sdksp1-libsnmp15-6517

   - SUSE Linux Enterprise Software Development Kit 11 SP1:

      zypper in -t patch sdksp1-libsnmp15-6517

   - SUSE Linux Enterprise Server 11 SP2:

      zypper in -t patch slessp1-libsnmp15-6517

   - SUSE Linux Enterprise Server 11 SP1 for VMware:

      zypper in -t patch slessp1-libsnmp15-6517

   - SUSE Linux Enterprise Server 11 SP1:

      zypper in -t patch slessp1-libsnmp15-6517

   - SUSE Linux Enterprise Desktop 11 SP2:

      zypper in -t patch sledsp1-libsnmp15-6517

   - SUSE Linux Enterprise Desktop 11 SP1:

      zypper in -t patch sledsp1-libsnmp15-6517

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64):

      net-snmp-devel-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Software Development Kit 11 SP2 (x86_64):

      libsnmp15-32bit-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Software Development Kit 11 SP2 (ppc64):

      net-snmp-devel-32bit-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64):

      net-snmp-devel-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Software Development Kit 11 SP1 (x86_64):

      libsnmp15-32bit-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Software Development Kit 11 SP1 (ppc64):

      net-snmp-devel-32bit-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64):

      libsnmp15-5.4.2.1-8.12.10.1
      net-snmp-5.4.2.1-8.12.10.1
      perl-SNMP-5.4.2.1-8.12.10.1
      snmp-mibs-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64):

      libsnmp15-32bit-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Server 11 SP2 (ia64):

      libsnmp15-x86-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64):

      libsnmp15-5.4.2.1-8.12.10.1
      net-snmp-5.4.2.1-8.12.10.1
      perl-SNMP-5.4.2.1-8.12.10.1
      snmp-mibs-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64):

      libsnmp15-32bit-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64):

      libsnmp15-5.4.2.1-8.12.10.1
      net-snmp-5.4.2.1-8.12.10.1
      perl-SNMP-5.4.2.1-8.12.10.1
      snmp-mibs-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64):

      libsnmp15-32bit-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Server 11 SP1 (ia64):

      libsnmp15-x86-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):

      libsnmp15-5.4.2.1-8.12.10.1
      net-snmp-5.4.2.1-8.12.10.1
      perl-SNMP-5.4.2.1-8.12.10.1
      snmp-mibs-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Desktop 11 SP2 (x86_64):

      libsnmp15-32bit-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64):

      libsnmp15-5.4.2.1-8.12.10.1
      net-snmp-5.4.2.1-8.12.10.1
      perl-SNMP-5.4.2.1-8.12.10.1
      snmp-mibs-5.4.2.1-8.12.10.1

   - SUSE Linux Enterprise Desktop 11 SP1 (x86_64):

      libsnmp15-32bit-5.4.2.1-8.12.10.1


References:

   http://support.novell.com/security/cve/CVE-2012-2141.html
   https://bugzilla.novell.com/670789
   https://bugzilla.novell.com/759352
   https://bugzilla.novell.com/762433
   https://bugzilla.novell.com/762887
   http://download.novell.com/patch/finder/?keywords=59f077255350ef94a864a7c48ecca695