Net-SNMP 5.0.9 available -- Note: contains a security fix

Net-SNMP 5.0.9 has been made available on our download site (
http://www.Net-SNMP.org/download/ ) and all users are encouraged to
upgrade when possible.  Specifically, it does contain a security patch
that will affect deployments where restricted read-access is granted
to certain users or community strings.

Contents of this announcement
-----------------------------
  - What has Changed recently?
  - Where can I get it?
  - Are there binaries available?
  - What operating systems does it run on?
  - Which versions of the SNMP protocol are supported in this package?
  - I've found a bug or have a suggestion, how do I tell you about it?
  - What's the difference between UCD-SNMP and Net-SNMP?

What has Changed recently?
-------------------------------------------

  Here's the portion of the NEWS file from 5.0.6 to 5.0.9 (the last
  few releases):

  *5.0.9*

   SECURITY:
      - An existing user/community could get access to data in MIB
        objects that were explicitly excluded from their view.

   Fixes:
      - Perl build environment should better under Windows
      - Misc kerberos support fixes.
      - Improvements on various manual pages.
      - A annoying bug with SETs being passed to pass scripts was fixed.
      - The often talked about VACM optimization improvement was fixed again.
      - mib2c handles augmentation tables better now.
      - Various 64 bit issues have been addressed.

  *5.0.8*
   New:
      - No new features will be added to the 5.0.x line.

   Ports:
      - Update libtool to version 1.4.3, for the benefit of Darwin
      - diskio support for Darwin
      - Updates for OpenBSD 3. 
      - Updates to solaris README

   Fixes:
      - find libwrap w/nsl on RedHat
      - fix for openssl 0.9.7
      - Fix some AgentX memory leaks
      - use macro for inline function prototypes
      - Attempt to find unused port before running tests
      - Use SNMP_SLEEP environment variable when running tests
      - calculate a proper ifSpeed under linux when possible
      - better daemonization of snmpd
      - close and reopen snmptrapd log files on HUP
      - support for 16 bit reuqest ids
      - Recognize new 't' code in display hints
      - misc other fixes

  *5.0.7*
   New:
      - VACM (access control) optimizations which will greatly benefit
        people who wish to exclude large portions of the MIB tree from
        some people.  Previously this was a large resource drain.
      - Add command line option to snmpd to set syslog facility
      - Reverse DISPLAY-HINT processing, i.e. it allows you to input data
        formatted like a DISPLAY-HINT prescribes
      - Support setting of sysDescr and sysObjectID via snmpd.conf
        configuration directives
      - New output option to force display of strings as hex
      - Persistent directory can be specified at runtime
      - Add support for Linux virtual interfaces in the ipAddressTable.
      - implemented the mteEventTable and the mteEventNotificationTable
        form the DISMAN-EVENT-MIB.

   Fixes:
      - AgentX no longer flagged as experimental
      - A few memory leak fixes for the table_iterator agent API.
      - Processed flag cleared before each pass of a set request
      - Remove snmpd pid file on exit
      - Restore default behaviour of building shared libraries
      - misc other fixes

  *5.0.6*

   Fixes:
      - prevent denial of service attack from authenticated users
        (really this time).
      - misc other fixes

Where can I get it?
------------------

  Download:
    - http://www.net-snmp.org/download/
    - ftp://ftp.net-snmp.org/pub/sourceforge/net-snmp/
  Web page:
    - http://www.net-snmp.org/
  Sourceforge Project page:
    - http://www.net-snmp.org/project/
  Mirrors:
    - US:          ftp://ftp.freesnmp.com/mirrors/net-snmp/
    - Bulgaria:    http://rtfm.uni-svishtov.bg/net-snmp/
    - Japan:       ftp://ftp.ayamura.org/pub/net-snmp/
    - Germany:     ftp://ftp.mpg.goe.ni.schule.de/pub/internet/net-snmp/


Are there binaries available?
----------------------------

  - Binaries do appear on our download site, but often are published a
    bit later than the normal source code.  Recently we've received
    more and more requests for RPMS, and we'll work hard in making
    those available.  Recently, in fact, we've even started supplying
    RPMs for the perl modules as well.  Most of the binaries that are
    available have been linked with the OpenSSL package so you'll need
    a copy of it installed in order to use them.  If you don't have
    OpenSSL installed and don't want it installed, please get the
    net-snmp source release instead and built it yourself (but you'll
    loose support for SNMPv3 with SHA1 authentication and both DES and
    AES encryption).

What operating systems does it run on?
-------------------------------------

  Both the applications and the agent have been reported as running
  (at least in part) on the following operating systems:

	* HP-UX (10.20 to 9.01 and 11.0 -- see README.hpux11)
	* Ultrix (4.5 to 4.2)
	* Solaris (2.8 to 2.3) and SunOS (4.1.4 to 4.1.2)
	* OSF (4.0, 3.2)
	* NetBSD (1.5alpha to 1.0)
	* FreeBSD (4.1 to 2.2)
	* BSDi (4.0.1 to 2.1)
	* Linux (kernels 2.4 to 1.3)
	* AIX (4.1.5, 3.2.5)
	* OpenBSD (2.8, 2.6)
	* Irix (6.5 to 5.1)
	* OS X (10.1.1 and 10.1.2)
	* Dynix/PTX 4.4

  We have also been informed about a port to the Stratus VOS.
  See http://ftp.stratus.com/vos/network/network.html for details.

  See the next question but one for the status of Windows support.

  Certain systems (e.g. HP-UX 11, Irix?) fail to compile particular
  portions of the agent.  These can usually be persuaded to compile
  (at the loss of some functionality) by omitting the modules affected.
  See the next question for more details.

  Also note that the presence of a particular configuration in this
  list does not imply a perfect or complete implementation.  This is
  simply what various people have reported as seeming to work. (Or more
  frequently, the configurations people have reported problems with
  that we think we've fixed!)

Which versions of the SNMP protocol are supported in this package?
-----------------------------------------------------------------

  SNMPv1, SNMPv2c, and SNMPv3 (including user-based and kerberos-based support) 

I've found a bug or have a suggestion, how do I tell you about it?
-----------------------------------------------------------------

  Please submit the bug to our bug-tracking system at
  http://www.net-snmp.org/bugs/

We hope you enjoy this new release,
The NET-SNMP Development Team

What's the difference between UCD-SNMP and Net-SNMP?
---------------------------------------------------

  Not a great deal, really.
  Although the project originally started at UC Davis (hence the name),
  and it has always been based there, most of the contributors have had
  little or no connection with this institution.

    The move to SourceForge was intended to provide a more flexible
  environment for the project, and to distribute the administrative
  workload more evenly.  The change of name simply reflects this move,
  which was the last remaining link with UC Davis.

    The 4.2.x line is the last release line that uses the ucd-snmp name,
  and all releases under this banner will be bug-fixes only.  Release
  5.0 is the first version using the net-snmp name, and all new features
  and significant development will be released under this name.
    (Though the dividing line between a bug-fix and a new feature is
  something of a vague one, so some changes in the 4.2.x line may be
  relatively non-trivial!)
 
    Starting with the 5.0 release, we are also trying to review and
  rework the underlying code base to improve the readability and
  maintainability of the package.  The 5.0 changes have mostly
  concentrated on the agent architecture, though there have been some
  significant changes to the library as well.  Future releases may
  include further restructuring of the library.
    This process will probably result in some changes to the API,
  though we will attempt to retain some form of backwards
  compatibility as far as possible, and clearly mark anything that has
  changed.  The most significant change with the 5.0 release is a
  restructuring of the header file organisation - not least a change
  from <ucd-snmp/xxx.h> to <net-snmp/yyy.h>.

-- 
Wes Hardaker
Sparta


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf