Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1019888

Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

We use read-only mode for monitoring custom things with nagios.
Maybe it is possible to disable extend by default, but to leave possibility
to enable it. In our case it is enough to have read-only mode.

Albertas

On Fri, Jul 31, 2020 at 7:18 AM Craig Small <csmall@debian.org> wrote:

> I'm trying to understand why you (or anyone) would use such an insecure
> feature.  One question, are you using in read-only mode or read-write mode?
> read-only mode could be enabled, but read-write probably can't be anymore.
>
>  - Craig
>
>
> On Fri, 31 Jul 2020 at 14:15, Albertas Sileika <a.sileika@gmail.com>
> wrote:
>
>> Hi,
>>
>> It is not acceptable to remove feature without possibility to enable it
>> again. This update breaks part of our monitoring system.
>>
>> Albertas
>>
>> On Fri, 31 Jul 2020 10:46:29 +1000 Craig Small <csmall@debian.org> wrote:
>> > Hi James,
>> > That would have been intentional, the EXTEND MIB has major security
>> > issues.
>> >
>> > - Craig
>> >
>> >
>> > On Thu, 30 Jul 2020 at 23:03, James Greig <james@host-it.co.uk> wrote:
>> >
>> > > Package: snmpd
>> > > Version: 5.7.3+dfsg-1.7+deb9u2
>> > > Severity: important
>> > >
>> > > Dear Maintainer,
>> > >
>> > > *** Reporter, please consider answering these questions, where
>> appropriate
>> > > ***
>> > >
>> > > Updating snmpd from deb9u1 to deb9u2 via apt on any stretch system
>> > > breaks the ability to use 'extend' in snmpd.
>> > >
>> > > After updating on any stretch system and restarting snmpd this error
>> will
>> > > appear:-
>> > >
>> > > Warning: Unknown token: extend
>> > >
>> > > It's likely the latest binary build of this package has not included
>> > > options to
>> > > enable extend and/or other extras.
>> > >
>> > > *** End of the template - remove these template lines ***
>> > >
>> > >
>> > > -- System Information:
>> > > Debian Release: 9.13
>> > > APT prefers oldstable-updates
>> > > APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
>> > > Architecture: amd64 (x86_64)
>> > >
>> > > Kernel: Linux 4.9.0-13-amd64 (SMP w/8 CPU cores)
>> > > Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
>> > > LANGUAGE=en_GB:en (charmap=UTF-8)
>> > > Shell: /bin/sh linked to /bin/dash
>> > > Init: systemd (via /run/systemd/system)
>> > >
>> > > Versions of packages snmpd depends on:
>> > > ii adduser 3.115
>> > > ii debconf [debconf-2.0] 1.5.61
>> > > ii init-system-helpers 1.48
>> > > ii libc6 2.24-11+deb9u4
>> > > ii libsnmp-base 5.7.3+dfsg-1.7+deb9u2
>> > > ii libsnmp30 5.7.3+dfsg-1.7+deb9u2
>> > > ii lsb-base 9.20161125
>> > >
>> > > snmpd recommends no packages.
>> > >
>> > > Versions of packages snmpd suggests:
>> > > pn snmptrapd <none>
>> > >
>> > > -- debconf information excluded
>>
>>
>> --
>> Su pagarba,
>> Albertas Šileika
>> _______________________________________________
>> Pkg-net-snmp-devel mailing list
>> Pkg-net-snmp-devel@alioth-lists.debian.net
>>
>> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-net-snmp-devel
>
>

-- 
Su pagarba,
Albertas Šileika

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#966544: snmpd: extend option broken after update James Greig <james@host-it.co.uk> - 2020-07-30 15:10 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update Craig Small <csmall@debian.org> - 2020-07-31 03:00 +0200
    Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update James Greig <James@host-it.co.uk> - 2020-07-31 10:00 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update Christian Balzer <chibi@gol.com> - 2020-07-31 05:40 +0200
    Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update Axel Uhl <axel.uhl@gmx.de> - 2020-08-01 18:00 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update Albertas Sileika <a.sileika@gmail.com> - 2020-07-31 06:20 +0200
    Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update Craig Small <csmall@debian.org> - 2020-07-31 06:30 +0200
      Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update Albertas Sileika <a.sileika@gmail.com> - 2020-07-31 06:40 +0200
      Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option  broken after update Ramon Cahenzli <rca@psy-q.ch> - 2020-07-31 09:10 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update Rudi Daemen <info@kratjebierhosting.nl> - 2020-07-31 10:10 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update Zubrick <zubrick@number6.ch> - 2020-07-31 11:40 +0200
  Bug#966544: snmpd: extend option broken after update Salvatore Bonaccorso <carnil@debian.org> - 2020-08-01 08:40 +0200
    Bug#966544: snmpd: extend option broken after update James Greig <James@host-it.co.uk> - 2020-08-01 18:40 +0200
    Bug#966544: snmpd: extend option broken after update Salvatore Bonaccorso <carnil@debian.org> - 2020-08-04 19:20 +0200
      Bug#966544: snmpd: extend option broken after update James Greig <James@host-it.co.uk> - 2020-08-04 20:40 +0200
  Bug#966544: Switching from extend to pass for custom endpoints Ian Campbell <ijc@debian.org> - 2020-08-03 19:00 +0200

csiph-web