mirror of
git://slackware.nl/current.git
synced 2024-12-31 10:28:29 +01:00
7e93037632
patches/packages/net-snmp-5.9.3-x86_64-1_slack15.0.txz: Upgraded.
This update fixes security issues:
A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause
an out-of-bounds memory access.
A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL
pointer dereference.
Improper Input Validation when SETing malformed OIDs in master agent and
subagent simultaneously.
A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable
can cause an out-of-bounds memory access.
A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a
NULL pointer dereference.
A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer
dereference.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24805
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24806
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24807
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24808
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24810
(* Security fix *)
45 lines
2 KiB
Diff
45 lines
2 KiB
Diff
diff -urNp a/man/netsnmp_config_api.3.def b/man/netsnmp_config_api.3.def
|
|
--- a/man/netsnmp_config_api.3.def 2018-07-18 11:18:06.196792766 +0200
|
|
+++ b/man/netsnmp_config_api.3.def 2018-07-18 11:20:04.631679886 +0200
|
|
@@ -295,7 +295,7 @@ for one particular machine.
|
|
.PP
|
|
The default list of directories to search is \fC SYSCONFDIR/snmp\fP,
|
|
followed by \fC DATADIR/snmp\fP,
|
|
-followed by \fC LIBDIR/snmp\fP,
|
|
+followed by \fC /usr/lib(64)/snmp\fP,
|
|
followed by \fC $HOME/.snmp\fP.
|
|
This list can be changed by setting the environmental variable
|
|
.I SNMPCONFPATH
|
|
@@ -367,7 +367,7 @@ A colon separated list of directories to
|
|
files in.
|
|
Default:
|
|
.br
|
|
-SYSCONFDIR/snmp:\:DATADIR/snmp:\:LIBDIR/snmp:\:$HOME/.snmp
|
|
+SYSCONFDIR/snmp:\:DATADIR/snmp:\:/usr/lib(64)/snmp:\:$HOME/.snmp
|
|
.SH "SEE ALSO"
|
|
netsnmp_mib_api(3), snmp_api(3)
|
|
.\" Local Variables:
|
|
diff -urNp a/man/snmp_config.5.def b/man/snmp_config.5.def
|
|
--- a/man/snmp_config.5.def 2018-07-18 11:18:06.194792767 +0200
|
|
+++ b/man/snmp_config.5.def 2018-07-18 11:20:56.423626117 +0200
|
|
@@ -10,7 +10,7 @@ First off, there are numerous places tha
|
|
found and read from. By default, the applications look for
|
|
configuration files in the following 4 directories, in order:
|
|
SYSCONFDIR/snmp,
|
|
-DATADIR/snmp, LIBDIR/snmp, and $HOME/.snmp. In each of these
|
|
+DATADIR/snmp, /usr/lib(64)/snmp, and $HOME/.snmp. In each of these
|
|
directories, it looks for files snmp.conf, snmpd.conf and/or
|
|
snmptrapd.conf, as well as snmp.local.conf, snmpd.local.conf
|
|
and/or snmptrapd.local.conf. *.local.conf are always
|
|
diff -urNp a/man/snmpd.conf.5.def b/man/snmpd.conf.5.def
|
|
--- a/man/snmpd.conf.5.def 2018-07-18 11:18:06.196792766 +0200
|
|
+++ b/man/snmpd.conf.5.def 2018-07-18 11:21:44.263574388 +0200
|
|
@@ -1559,7 +1559,7 @@ filename), and call the initialisation r
|
|
.RS
|
|
.IP "Note:"
|
|
If the specified PATH is not a fully qualified filename, it will
|
|
-be interpreted relative to LIBDIR/snmp/dlmod, and \fC.so\fR
|
|
+be interpreted relative to /usr/lib(64)/snmp/dlmod, and \fC.so\fR
|
|
will be appended to the filename.
|
|
.RE
|
|
.PP
|