• [SECURITY] [DSA 4314-1] net-snmp security update

    From Salvatore Bonaccorso@1:229/2 to All on Thu Oct 11 21:50:02 2018
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4314-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 11, 2018 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : net-snmp
    CVE ID : CVE-2018-18065
    Debian Bug : 910638

    Magnus Klaaborg Stubman discovered a NULL pointer dereference bug in
    net-snmp, a suite of Simple Network Management Protocol applications,
    allowing a remote, authenticated attacker to crash the snmpd process
    (causing a denial of service).

    For the stable distribution (stretch), this problem has been fixed in
    version 5.7.3+dfsg-1.7+deb9u1.

    We recommend that you upgrade your net-snmp packages.

    For the detailed security status of net-snmp please refer to its
    security tracker page at:
    https://security-tracker.debian.org/tracker/net-snmp

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlu/pPVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0RpdQ//UcOJ+UDG5dfXj6J7peoZKXznHTn84fTuOH/1TLOUqOPj+/gP9056aLVI urWE+OySyA0NobAZVMD7nh2QNUI3QpHI3Iup7+0D4XXZ14F6Tp6g8wSW/TbM1b+9 7GNlyRfrPKm3f4DJ+XA8z/unl6Wis4NRkxWRj3byQexndTcOtjARnIDf+hYkMx+/ 2HZv739nsAOJduz+q4S9y5jQmQhkrS9YNdwd8rC0V+SUbYaFrv26NNQ+woUB7vrM Xzsa71sHCAwrKpi09k0QUMUPfcKUpf87jyXY0bJwNsk6b5rejizYsuqE+6VsCqYd AcZC2wZAyrBvHHYpAG9iU5OTh2KJdlEodBJcbCDz9PMwCc69NUeij5CXhAy3OpRQ sLa/B3COHHua9TAeqMhp2xnBFrcSvWFQ2B7QvkTx21Vc/Ryb/vDdTREVShTAAE6Z W5kUcBBX1dTH2gVK33tEqYb3oqbhg8tnpBRaHc6Yted6kNNbdTcqKUTIDj3R5N70 DfIb8M6ma9dMXtlYj6/ZZtjM1oKg5pkEDl3M66z8dDusZFLCZWOTRt2PP7dEpv50 cBWEvt7w5GZTpfs3hTOnv/Xkt5mafa4vicOTwj0AL2uSFdID8VI4yu0s/KRbEIyY tBTjaZgM2Uf8O4mrFh1TuGclG78RxsJ0mffGFBRSlaYbb/u7uLE=
    =jUAl
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)