net security update

CentOS Errata and Security Advisory CESA-2008:0529

The Simple Network Management Protocol (SNMP) is a protocol used for
network management.

A flaw was found in the way Net-SNMP checked an SNMPv3 packet’s Keyed-Hash
Message Authentication Code (HMAC). An attacker could use this flaw to
spoof an authenticated SNMPv3 packet. (CVE-2008-0960)

A buffer overflow was found in the Perl bindings for Net-SNMP. This could
be exploited if an attacker could convince an application using the
Net-SNMP Perl module to connect to a malicious SNMP agent. (CVE-2008-2292)

All users of net-snmp should upgrade to these updated packages, which
contain backported patches to resolve these issues.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2008-June/077132.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077133.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077142.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077145.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077148.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077151.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077176.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077177.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077202.html
https://lists.centos.org/pipermail/centos-announce/2008-June/077203.html

Affected packages:
net-snmp
net-snmp-devel
net-snmp-libs
net-snmp-perl
net-snmp-utils

Upstream details at:
https://access.redhat.com/errata/RHSA-2008:0529