[Pkg-net-snmp-devel] Bug#969508: net-snmp: NET-SNMP-EXTEND-MIB::nsExtendCacheTime cannot be set anymore

Salvatore Bonaccorso carnil at debian.org
Thu Sep 3 21:42:28 BST 2020

Source: net-snmp
Version: 5.7.3+dfsg-5+deb10u1
Severity: important
X-Debbugs-Cc: carnil at debian.org,team at security.debian.org
Control: affects -1 + release.debian.org,security.debian.org

Hi Craig,

The fix for CVE-2020-15862 appears to have introduced an issue that
nsExtendCacheTime cannot be modified anymore. I have not seen reports
in Debian so far that, and given it might be rather an edge case, can
you fix the issue via the upcoming point release?

The Ubuntu report is at
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1892980 (which
lead to "USN-4471-2: Net-SNMP regression" to be issued

Detailed reproduction steps are described in

appears to be the relevant fix needed, comparing with the Ubuntu


More information about the Pkg-net-snmp-devel mailing list