Hi,

Though I do appreciate that security should come above everything.  I have to 
agree with everyone else here it seems surprising  that it has just been 
removed like this.  We use it in read-only ourselves as well and it has broken 
a lot of monitoring.

Kind regards

James Greig
From: Craig Small <csm...@debian.org>
Sent: 31 July 2020 01:46
To: James Greig <ja...@host-it.co.uk>; 966...@bugs.debian.org
Subject: Re: [Pkg-net-snmp-devel] Bug#966544: snmpd: extend option broken after 
update

Hi James,
  That would have been intentional, the EXTEND MIB has major security issues.

 - Craig


On Thu, 30 Jul 2020 at 23:03, James Greig 
<ja...@host-it.co.uk<mailto:ja...@host-it.co.uk>> wrote:
Package: snmpd
Version: 5.7.3+dfsg-1.7+deb9u2
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

Updating snmpd from deb9u1 to deb9u2 via apt on any stretch system
breaks the ability to use 'extend' in snmpd.

After updating on any stretch system and restarting snmpd this error will 
appear:-

Warning: Unknown token: extend

It's likely the latest binary build of this package has not included options to
enable extend and/or other extras.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.13
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-13-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages snmpd depends on:
ii  adduser                3.115
ii  debconf [debconf-2.0]  1.5.61
ii  init-system-helpers    1.48
ii  libc6                  2.24-11+deb9u4
ii  libsnmp-base           5.7.3+dfsg-1.7+deb9u2
ii  libsnmp30              5.7.3+dfsg-1.7+deb9u2
ii  lsb-base               9.20161125

snmpd recommends no packages.

Versions of packages snmpd suggests:
pn  snmptrapd  <none>

-- debconf information excluded

_______________________________________________
Pkg-net-snmp-devel mailing list
pkg-net-snmp-de...@alioth-lists.debian.net<mailto:pkg-net-snmp-de...@alioth-lists.debian.net>
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-net-snmp-devel

Reply via email to