libnetsnmptrapd should be linked against MySQL client library
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
net-snmp (Debian) |
Fix Released
|
Unknown
|
|||
net-snmp (Ubuntu) |
Fix Released
|
Medium
|
Andreas Hasenack |
Bug Description
libnetsnmptrapd has mysql unresolved symbols:
root@disco-snmp:~# ldd -r /usr/lib/
undefined symbol: my_init (/usr/lib/
undefined symbol: my_load_defaults (/usr/lib/
undefined symbol: mysql_sqlstate (/usr/lib/
undefined symbol: mysql_stmt_errno (/usr/lib/
undefined symbol: mysql_commit (/usr/lib/
undefined symbol: mysql_stmt_init (/usr/lib/
undefined symbol: mysql_stmt_prepare (/usr/lib/
undefined symbol: mysql_errno (/usr/lib/
undefined symbol: mysql_stmt_close (/usr/lib/
undefined symbol: mysql_server_end (/usr/lib/
undefined symbol: mysql_real_connect (/usr/lib/
undefined symbol: mysql_close (/usr/lib/
undefined symbol: mysql_stmt_error (/usr/lib/
undefined symbol: mysql_init (/usr/lib/
undefined symbol: mysql_insert_id (/usr/lib/
undefined symbol: mysql_error (/usr/lib/
undefined symbol: mysql_stmt_execute (/usr/lib/
undefined symbol: mysql_stmt_
undefined symbol: mysql_autocommit (/usr/lib/
undefined symbol: mysql_stmt_sqlstate (/usr/lib/
This doesn't seem to cause immediate problems in ubuntu at least, since snmptrapd (the daemon) is linked with mysql.
The other "consumer" of libnetsnmptrapd is libsnmp-perl, but that also doesn't seem to have problems loading the library.
Still, there are bugs in Fedora and Debian about this, and one was filed upstream too, and it seems correct to add the proper linking, as libnetsnmptrapd is not just a plugin that is dlopen()ed at runtime.
CVE References
Changed in net-snmp (Debian): | |
status: | Unknown → New |
Changed in net-snmp (Debian): | |
status: | New → Fix Released |
Debian added an attempted fix for this in commit https:/ /salsa. debian. org/debian/ net-snmp/ commit/ 8b0dce0557add80 9a9b42e7f37c8d0 bb36ec35ee, piggy backing on another unrelated fix.
I think Ubuntu should adopt the better fix proposed in https:/ /sourceforge. net/p/net- snmp/bugs/ 2792/. Since the first part of the debian patch is a noop for ubuntu (we use mysql, not mariadb), and carrying a delta which drops or replaces just a part of a debian patch, we should probably drop the patch from the debian commit above entirely, and add a new ubuntu patch for the linking problem.