Multiple Security-fix Net-SNMP Releases: 5.5.2.1, 5.6.2.1, and 5.7.2.1

We're unhappy to release the following versions of Net-SNMP:

  Net-SNMP-5.5.2.1
  Net-SNMP-5.6.2.1
  Net-SNMP-5.7.2.1

Releases from 5.5 through 5.7.2 were subject to a potential remotely
triggerable denial of service attack on linux when the ICMP-MIB is in
use.  These releases fix just this issue.  Versions from the 5.4.* code
line are not affected.

Here's the NEWS file snippet for this release:

   * 5.{5,6,7}.2.1 *
       snmpd:
         - SECURITY: a denial of service attack vector was discovered on
           the linux implementation of the ICMP-MIB.  This release fixes
           this bug and all users are encouraged to update their SNMP
           agent if they make use of the ICMP-MIB table objects.

Additionally, please note that 5.7.3 is coming out soon and 5.7.3.pre3
is available for use as well and contains other bug fixes beyond the
5.7.2.1 release.


Other standing release information follows:


Where can I get it?
------------------

  Download:
    - http://www.net-snmp.org/download.html
  Web page:
    - http://www.net-snmp.org/
  Sourceforge Project page:
    - http://www.net-snmp.org/project/net-snmp/

Are there binaries available?
----------------------------

  - Binaries do appear on our download site, but often are published a
    bit later than the normal source code.  Most of the binaries that
    are available have been linked with the OpenSSL package so you'll
    need a copy of it installed in order to use them.  If you don't
    have OpenSSL installed and don't want it installed, please get the
    net-snmp source release instead and built it yourself (but you'll
    loose support for SNMPv3 with SHA1 authentication and both DES and
    AES encryption).

What operating systems does it run on?
-------------------------------------


  Both the applications and the agent have been reported as running
  (at least in part) on the following operating systems:

        * Linux (kernels 2.6 to 1.3)
        * Solaris/SPARC (11 to 2.3), Solaris/Intel (10, 9) -- see 
          README.solaris
        * HP-UX (11.31 to 9.01) -- see README.hpux11
        * Mac OS X (10.5 to 10.1) -- see README.osX
        * NetBSD (2.0 to 1.0)
        * FreeBSD (7.0 to 2.2)
        * OpenBSD (4.0 to 2.6)
        * BSDi (4.0.1 to 2.1)
        * AIX (6.1, 5.3, 5.2, 5.1, 4.3.3, 4.1.5, 3.2.5) -- see README.aix
        * IRIX (6.5 to 5.1)
        * OSF (4.0, 3.2 and Tru64 Unix 5.1B) -- see README.tru64
        * SunOS 4 (4.1.4 to 4.1.2)
        * Ultrix (4.5 to 4.2)
        * Dynix/PTX 4.4
        * QNX 6.2.1A

  See our FAQ at http://www.net-snmp.org/wiki/index.php/FAQ for more
  details on portability of the Net-SNMP package.

Which versions of the SNMP protocol are supported in this package?
-----------------------------------------------------------------

  SNMPv1, SNMPv2c, and SNMPv3 (including user-based (USM) support, TLS
  and DTLS-based support and an alpha implementation of
  kerberos-based and ssh-based support)

I've found a bug or have a suggestion, how do I tell you about it?
-----------------------------------------------------------------

  Please submit the bug to our bug-tracking system at:

    http://www.net-snmp.org/bugs/

  Please submit patches (for features or bugs) to our patch-tracking
  system.  (You don't need to submit a big report as well, just a patch)

    http://www.net-snmp.org/patches/

What's the difference between UCD-SNMP and Net-SNMP?
---------------------------------------------------

  Not a great deal, really.
  Although the project originally started at UC Davis (hence the name),
  and it has always been based there, most of the contributors have had
  little or no connection with this institution.

    The move to SourceForge was intended to provide a more flexible
  environment for the project, and to distribute the administrative
  workload more evenly.  The change of name simply reflects this move,
  which was the last remaining link with UC Davis.

    The 4.2.x line is the last release line that uses the ucd-snmp name,
  and all releases under this banner will be bug-fixes only.  Release
  5.0 is the first version using the net-snmp name, and all new features
  and significant development will be released under this name.
    (Though the dividing line between a bug-fix and a new feature is
  something of a vague one, so some changes in the 4.2.x line may be
  relatively non-trivial!)


-- 
Wes Hardaker                                     
My Pictures:       http://capturedonearth.com/
My 2014 Calendar:  http://calendar.capturedonearth.com/
My Thoughts:       http://pontifications.hardakers.net/

------------------------------------------------------------------------------
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk