[SECURITY] [DLA 2313-1] net-snmp security update

2020-08-0415:30:18

lists.debian.org

Debian LTS Advisory DLA-2313-1 [email protected]
https://www.debian.org/lts/security/ Chris Lamb
August 04, 2020 https://wiki.debian.org/LTS

Package : net-snmp
Version : 5.7.3+dfsg-1.7+deb9u3
CVE IDs : CVE-2020-15861 CVE-2020-15862
Debian Bug : #966599

A privilege escalation vulnerability was discovered in Net-SNMP, a
set of tools for collecting and organising information about devices
on computer networks, due to incorrect symlink handling
(CVE-2020-15861).

This security update also applies an upstream fix to their previous
handling of CVE-2020-15862 as part of DLA-2299-1.

For Debian 9 "Stretch", these problems have been fixed in version
5.7.3+dfsg-1.7+deb9u3.

We recommend that you upgrade your net-snmp packages.

For the detailed security status of net-snmp please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/net-snmp

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9armhflibsnmp30-dbg< 5.7.3+dfsg-1.7+deb9u3libsnmp30-dbg_5.7.3+dfsg-1.7+deb9u3_armhf.deb
Debian9amd64libsnmp-perl< 5.7.3+dfsg-1.7+deb9u3libsnmp-perl_5.7.3+dfsg-1.7+deb9u3_amd64.deb
Debian9arm64libsnmp30< 5.7.3+dfsg-1.7+deb9u3libsnmp30_5.7.3+dfsg-1.7+deb9u3_arm64.deb
Debian9armellibsnmp30-dbg< 5.7.3+dfsg-1.7+deb9u3libsnmp30-dbg_5.7.3+dfsg-1.7+deb9u3_armel.deb
Debian9i386libsnmp30< 5.7.3+dfsg-1.7+deb9u3libsnmp30_5.7.3+dfsg-1.7+deb9u3_i386.deb
Debian9arm64snmpd< 5.7.3+dfsg-1.7+deb9u3snmpd_5.7.3+dfsg-1.7+deb9u3_arm64.deb
Debian9armhfsnmpd< 5.7.3+dfsg-1.7+deb9u3snmpd_5.7.3+dfsg-1.7+deb9u3_armhf.deb
Debian9i386snmpd< 5.7.3+dfsg-1.7+deb9u3snmpd_5.7.3+dfsg-1.7+deb9u3_i386.deb
Debian9armhfsnmptrapd< 5.7.3+dfsg-1.7+deb9u3snmptrapd_5.7.3+dfsg-1.7+deb9u3_armhf.deb
Debian9i386libsnmp-perl< 5.7.3+dfsg-1.7+deb9u3libsnmp-perl_5.7.3+dfsg-1.7+deb9u3_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	armhf	libsnmp30-dbg	< 5.7.3+dfsg-1.7+deb9u3	libsnmp30-dbg_5.7.3+dfsg-1.7+deb9u3_armhf.deb
Debian	9	amd64	libsnmp-perl	< 5.7.3+dfsg-1.7+deb9u3	libsnmp-perl_5.7.3+dfsg-1.7+deb9u3_amd64.deb
Debian	9	arm64	libsnmp30	< 5.7.3+dfsg-1.7+deb9u3	libsnmp30_5.7.3+dfsg-1.7+deb9u3_arm64.deb
Debian	9	armel	libsnmp30-dbg	< 5.7.3+dfsg-1.7+deb9u3	libsnmp30-dbg_5.7.3+dfsg-1.7+deb9u3_armel.deb
Debian	9	i386	libsnmp30	< 5.7.3+dfsg-1.7+deb9u3	libsnmp30_5.7.3+dfsg-1.7+deb9u3_i386.deb
Debian	9	arm64	snmpd	< 5.7.3+dfsg-1.7+deb9u3	snmpd_5.7.3+dfsg-1.7+deb9u3_arm64.deb
Debian	9	armhf	snmpd	< 5.7.3+dfsg-1.7+deb9u3	snmpd_5.7.3+dfsg-1.7+deb9u3_armhf.deb
Debian	9	i386	snmpd	< 5.7.3+dfsg-1.7+deb9u3	snmpd_5.7.3+dfsg-1.7+deb9u3_i386.deb
Debian	9	armhf	snmptrapd	< 5.7.3+dfsg-1.7+deb9u3	snmptrapd_5.7.3+dfsg-1.7+deb9u3_armhf.deb
Debian	9	i386	libsnmp-perl	< 5.7.3+dfsg-1.7+deb9u3	libsnmp-perl_5.7.3+dfsg-1.7+deb9u3_i386.deb