[Pkg-net-snmp-devel] Bug#966544: Bug#966544: snmpd: extend option broken after update

[Axel Uhl]

Same here. snmpd broke over night, now my mrtg which is reporting, e.g., 
disk temperatures using a smartctl-based cannot be reported anymore, and 
I was wondering why this cron job now keeps flooding my inbox... All 
intranet, all very inconvenient. As others mentioned, a warning would 
have been nice. Now I need to compile from sources. What a hassle!

On Fri, 31 Jul 2020 12:32:05 +0900 Christian Balzer <chibi at gol.com> wrote:
> 
> Hello Craig,
> 
> These issues, do they warrant utterly breaking things w/o any recourse
> short of recompiling things for many, many users that use the extend
> feature?
> Especially given the fact that SNMP traffic tends to be on private
> networks and the feature not being enabled by default in the config.
> 
> At the very least a "this will break things, abort now" missive during
> upgrade would have been nice.
> 
> If upstream can't/won't fix this snmpd has lost it's usefulness for me in
> the long run compared to other data collectors.
> 
> Regards,
> 
> Christian
> 
> 
> On Fri, 31 Jul 2020 10:46:29 +1000 Craig Small <csmall at debian.org> wrote:
> > Hi James,
> >   That would have been intentional, the EXTEND MIB has major security
> > issues.
> > 
> >  - Craig
> > 
> > 
> > On Thu, 30 Jul 2020 at 23:03, James Greig <james at host-it.co.uk> wrote:
> > 
> > > Package: snmpd
> > > Version: 5.7.3+dfsg-1.7+deb9u2
> > > Severity: important
> > >
> > > Dear Maintainer,
> > >
> > > *** Reporter, please consider answering these questions, where appropriate
> > > ***
> > >
> > > Updating snmpd from deb9u1 to deb9u2 via apt on any stretch system
> > > breaks the ability to use 'extend' in snmpd.
> > >
> > > After updating on any stretch system and restarting snmpd this error will
> > > appear:-
> > >
> > > Warning: Unknown token: extend
> > >
> > > It's likely the latest binary build of this package has not included
> > > options to
> > > enable extend and/or other extras.
> > >
> > > *** End of the template - remove these template lines ***
> > >
> > >
> > > -- System Information:
> > > Debian Release: 9.13
> > >   APT prefers oldstable-updates
> > >   APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
> > > Architecture: amd64 (x86_64)
> > >

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1572 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-net-snmp-devel/attachments/20200801/096be634/attachment.bin>