Summary
[5.8-27.0.1]
- fix error index value when snmpget is used a proxy pass [Orabug: 34905643]
[1:5.8-27]
- fix memory leak due of proc file creating (#2105957)
- fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
- fix memory leak when ipv6 disable set to 1 (#2151537)
- fix proxy timeout issue (#2160723)
[1:5.8-26]
- backport two memory leaks from upstream (#2134635)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | net-snmp | 1:5.8-27.0.1.el8 |
| Oracle Linux · 8 | net-snmp-agent-libs | 1:5.8-27.0.1.el8 |
| Oracle Linux · 8 | net-snmp-devel | 1:5.8-27.0.1.el8 |
| Oracle Linux · 8 | net-snmp-libs | 1:5.8-27.0.1.el8 |
| Oracle Linux · 8 | net-snmp-perl | 1:5.8-27.0.1.el8 |
| Oracle Linux · 8 | net-snmp-utils | 1:5.8-27.0.1.el8 |
Vulnerabilities 2
-
Medium 6.5CVE-2022-44792 EPSS 52%
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bu…
-
Medium 6.5CVE-2022-44793 EPSS 53%
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Except…