Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1019904

Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hi,

Though I do appreciate that security should come above everything.  I have to agree with everyone else here it seems surprising  that it has just been removed like this.  We use it in read-only ourselves as well and it has broken a lot of monitoring.

Kind regards

James Greig
From: Craig Small <csmall@debian.org>
Sent: 31 July 2020 01:46
To: James Greig <James@host-it.co.uk>; 966544@bugs.debian.org
Subject: Re: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update

Hi James,
  That would have been intentional, the EXTEND MIB has major security issues.

 - Craig


On Thu, 30 Jul 2020 at 23:03, James Greig <james@host-it.co.uk<mailto:james@host-it.co.uk>> wrote:
Package: snmpd
Version: 5.7.3+dfsg-1.7+deb9u2
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

Updating snmpd from deb9u1 to deb9u2 via apt on any stretch system
breaks the ability to use 'extend' in snmpd.

After updating on any stretch system and restarting snmpd this error will appear:-

Warning: Unknown token: extend

It's likely the latest binary build of this package has not included options to
enable extend and/or other extras.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.13
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-13-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages snmpd depends on:
ii  adduser                3.115
ii  debconf [debconf-2.0]  1.5.61
ii  init-system-helpers    1.48
ii  libc6                  2.24-11+deb9u4
ii  libsnmp-base           5.7.3+dfsg-1.7+deb9u2
ii  libsnmp30              5.7.3+dfsg-1.7+deb9u2
ii  lsb-base               9.20161125

snmpd recommends no packages.

Versions of packages snmpd suggests:
pn  snmptrapd  <none>

-- debconf information excluded

_______________________________________________
Pkg-net-snmp-devel mailing list
Pkg-net-snmp-devel@alioth-lists.debian.net<mailto:Pkg-net-snmp-devel@alioth-lists.debian.net>
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-net-snmp-devel

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#966544: snmpd: extend option broken after update James Greig <james@host-it.co.uk> - 2020-07-30 15:10 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update Craig Small <csmall@debian.org> - 2020-07-31 03:00 +0200
    Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update James Greig <James@host-it.co.uk> - 2020-07-31 10:00 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update Christian Balzer <chibi@gol.com> - 2020-07-31 05:40 +0200
    Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update Axel Uhl <axel.uhl@gmx.de> - 2020-08-01 18:00 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after update Albertas Sileika <a.sileika@gmail.com> - 2020-07-31 06:20 +0200
    Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update Craig Small <csmall@debian.org> - 2020-07-31 06:30 +0200
      Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update Albertas Sileika <a.sileika@gmail.com> - 2020-07-31 06:40 +0200
      Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option  broken after update Ramon Cahenzli <rca@psy-q.ch> - 2020-07-31 09:10 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update Rudi Daemen <info@kratjebierhosting.nl> - 2020-07-31 10:10 +0200
  Bug#966544: [Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update Zubrick <zubrick@number6.ch> - 2020-07-31 11:40 +0200
  Bug#966544: snmpd: extend option broken after update Salvatore Bonaccorso <carnil@debian.org> - 2020-08-01 08:40 +0200
    Bug#966544: snmpd: extend option broken after update James Greig <James@host-it.co.uk> - 2020-08-01 18:40 +0200
    Bug#966544: snmpd: extend option broken after update Salvatore Bonaccorso <carnil@debian.org> - 2020-08-04 19:20 +0200
      Bug#966544: snmpd: extend option broken after update James Greig <James@host-it.co.uk> - 2020-08-04 20:40 +0200
  Bug#966544: Switching from extend to pass for custom endpoints Ian Campbell <ijc@debian.org> - 2020-08-03 19:00 +0200

csiph-web