patch for NMU to be uploaded shortly attached.
diff -ruN ../orig/ucd-snmp-4.2.5/debian/changelog ucd-snmp-4.2.5/debian/changelog --- ../orig/ucd-snmp-4.2.5/debian/changelog 2006-02-20 05:06:46.000000000 +0000 +++ ucd-snmp-4.2.5/debian/changelog 2006-02-20 05:18:39.000000000 +0000 @@ -1,3 +1,10 @@ +ucd-snmp (4.2.5-5.1) unstable; urgency=low + + * Non-maintainer upload. + * Fix packet length check (closes: #337394) + + -- Blars Blarson <[EMAIL PROTECTED]> Mon, 20 Feb 2006 05:11:16 +0000 + ucd-snmp (4.2.5-5) unstable; urgency=medium * Build-Conflicts automake -> automake1.4 (fix build on arm) diff -ruN ../orig/ucd-snmp-4.2.5/snmplib/snmp_api.c ucd-snmp-4.2.5/snmplib/snmp_api.c --- ../orig/ucd-snmp-4.2.5/snmplib/snmp_api.c 2002-05-06 23:13:47.000000000 +0000 +++ ucd-snmp-4.2.5/snmplib/snmp_api.c 2006-02-20 05:11:09.000000000 +0000 @@ -4120,7 +4120,7 @@ else isp->proper_len = asn_check_packet(isp->packet, isp->packet_len); - if (isp->proper_len > MAX_PACKET_LENGTH) { + if (isp->proper_len > MAX_PACKET_LENGTH || isp->proper_len < 0) { /* illegal length, drop the connection */ snmp_log(LOG_ERR,"Maximum packet size exceeded in a request.\n"); isp->sd = -1;