** Description changed: - Scheduled-For: 23.01 - Upstream: tbd - Debian: 5.9.1+dfsg-1 + Upstream: 5.9.1 + Debian: 5.9.1+dfsg-1 Ubuntu: 5.9+dfsg-3ubuntu2 - Debian does new releases regularly, so it's likely there will be newer versions available before FF that we can pick up if this merge is done later in the cycle. - ### New Debian Changes ### net-snmp (5.9.1+dfsg-1) unstable; urgency=medium - [ Owen Evans ] - * Enable Blumenthal AES-192 and AES-256 encryption Closes: #972985 + [ Owen Evans ] + * Enable Blumenthal AES-192 and AES-256 encryption Closes: #972985 - [ Ferenc Wágner ] - * Enable systemd integration and UDP socket activation - Closes: #985369 + [ Ferenc Wágner ] + * Enable systemd integration and UDP socket activation + Closes: #985369 - [ Sergio Durigan Junior ] - * d/libsnmp-dev.install: Don't install archive (.a) files. - The archive files are just temporary files generated in order to - create the final shared objects (.so), and we don't need to ship them - in the package. + [ Sergio Durigan Junior ] + * d/libsnmp-dev.install: Don't install archive (.a) files. + The archive files are just temporary files generated in order to + create the final shared objects (.so), and we don't need to ship them + in the package. - [ Debian Janitor ] - * Trim trailing whitespace. + [ Debian Janitor ] + * Trim trailing whitespace. - [ Vagrant Cascadian ] - * Embed path to ps and uname. Closes: #978598 + [ Vagrant Cascadian ] + * Embed path to ps and uname. Closes: #978598 - [ Craig Small ] - * Make the perl agent code more tolerant of perl types, thanks - to Guillem Jover for the patch Closes: #977573 - * Make CI files use correct libmariadb-dev package names - Closes: #975477 - * mib2c: Add recommends and fix error message Closes: #990706 + [ Craig Small ] + * Make the perl agent code more tolerant of perl types, thanks + to Guillem Jover for the patch Closes: #977573 + * Make CI files use correct libmariadb-dev package names + Closes: #975477 + * mib2c: Add recommends and fix error message Closes: #990706 - * Add configuration directory for snmpd - * New upstream release - * Add Recommends: procps for snmpd Closes: #993997 + * Add configuration directory for snmpd + * New upstream release + * Add Recommends: procps for snmpd Closes: #993997 - -- Craig Small <csm...@debian.org> Mon, 20 Sep 2021 21:35:58 +1000 + -- Craig Small <csm...@debian.org> Mon, 20 Sep 2021 21:35:58 +1000 net-snmp (5.9+dfsg-3) unstable; urgency=medium - * Source only upload - no changes Closes: #970798 + * Source only upload - no changes Closes: #970798 - -- Craig Small <csm...@debian.org> Fri, 25 Sep 2020 09:10:00 +1000 + -- Craig Small <csm...@debian.org> Fri, 25 Sep 2020 09:10:00 +1000 net-snmp (5.9+dfsg-2) unstable; urgency=medium - * Move SNMP.3pm back to perl package Closes: #969436 - * Moved snmptrapd library into its own package to not pull in mysql - dependencies for snmp/snmpd Closes: #953948 + * Move SNMP.3pm back to perl package Closes: #969436 + * Moved snmptrapd library into its own package to not pull in mysql + dependencies for snmp/snmpd Closes: #953948 - -- Craig Small <csm...@debian.org> Sun, 06 Sep 2020 21:52:58 +1000 + -- Craig Small <csm...@debian.org> Sun, 06 Sep 2020 21:52:58 +1000 net-snmp (5.9+dfsg-1) unstable; urgency=medium - [ Sergio Durigan Junior ] - * Link libnetsnmptrapd against MYSQL_LIBS - - d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch: When building - with MySQL (MariaDB) support, this library must be linked against the - MySQL client library, or else it will have unresolved symbols. - (Closes: #886221) + [ Sergio Durigan Junior ] + * Link libnetsnmptrapd against MYSQL_LIBS + - d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch: When building + with MySQL (MariaDB) support, this library must be linked against the + MySQL client library, or else it will have unresolved symbols. + (Closes: #886221) - [ Craig Small ] - * New upstream release - * Removed patches included in upstream - * Library soname changed to 40 - * Remove dbg packages, no need to migrate as new soname + [ Craig Small ] + * New upstream release + * Removed patches included in upstream + * Library soname changed to 40 + * Remove dbg packages, no need to migrate as new soname - -- Craig Small <csm...@debian.org> Sat, 22 Aug 2020 17:11:17 +1000 + -- Craig Small <csm...@debian.org> Sat, 22 Aug 2020 17:11:17 +1000 net-snmp (5.8+dfsg-5) unstable; urgency=medium - * Allow extend to be read-only Closes: #966544 - * Stop using mib_index files CVE-2020-15861 Closes: 966599 + * Allow extend to be read-only Closes: #966544 + * Stop using mib_index files CVE-2020-15861 Closes: 966599 - -- Craig Small <csm...@debian.org> Fri, 31 Jul 2020 20:29:41 +1000 + -- Craig Small <csm...@debian.org> Fri, 31 Jul 2020 20:29:41 +1000 net-snmp (5.8+dfsg-4) unstable; urgency=high - [ Sergio Durigan Junior ] - * Fix segmentation fault that happens when using the snmpv3 - protocol with snmpbulkget. (LP #1877027) (Debian Bug #963713) - This is a rework of the patches introduced in the last release, - to fix CVE-2019-20892. - - d/p/move-securityStateRef-into-free_securityStateRef.patch: - Consolidate the check of the securityStateRef pointer into the - free_securityStateRef function. - - d/p/prevent-snmpv3-bulkget-errors-double-free.patch: - Prevent snmpv3 bulkget errors from becoming resulting in a - double free. - - d/p/fix-usmStateReference-free.patch: - Fix typo on usm_free_usmStateReference from last patch. - - d/p/unexport-struct-usmStateReference.patch: - Unexport struct usmStateReference and to prevent ABI breakages, - since it will be necessary to add a reference count to it. - - d/p/introduce-refcount-usmStateReference.patch: - Introduce refcount in the struct usmStateReference, and adjust - code to properly use the field. - - d/p/libsnmp-securitystateref: Rename to - d/p/move-securityStateRef-into-free_securityStateRef. - - d/p/doublefree_snmpusm: Rename to - d/p/prevent-snmpv3-bulkget-errors-double-free.patch. + [ Sergio Durigan Junior ] + * Fix segmentation fault that happens when using the snmpv3 + protocol with snmpbulkget. (LP #1877027) (Debian Bug #963713) + This is a rework of the patches introduced in the last release, + to fix CVE-2019-20892. + - d/p/move-securityStateRef-into-free_securityStateRef.patch: + Consolidate the check of the securityStateRef pointer into the + free_securityStateRef function. + - d/p/prevent-snmpv3-bulkget-errors-double-free.patch: + Prevent snmpv3 bulkget errors from becoming resulting in a + double free. + - d/p/fix-usmStateReference-free.patch: + Fix typo on usm_free_usmStateReference from last patch. + - d/p/unexport-struct-usmStateReference.patch: + Unexport struct usmStateReference and to prevent ABI breakages, + since it will be necessary to add a reference count to it. + - d/p/introduce-refcount-usmStateReference.patch: + Introduce refcount in the struct usmStateReference, and adjust + code to properly use the field. + - d/p/libsnmp-securitystateref: Rename to + d/p/move-securityStateRef-into-free_securityStateRef. + - d/p/doublefree_snmpusm: Rename to + d/p/prevent-snmpv3-bulkget-errors-double-free.patch. - [ Debian Janitor ] - * Trim trailing whitespace. - + [ Debian Janitor ] + * Trim trailing whitespace. ### Old Ubuntu Delta ### net-snmp (5.9+dfsg-3ubuntu2) impish; urgency=medium - * Fix segmentation fault when certificate contains extension - longer than 512 bytes (LP: #1912389) - - d/p/lp1912389-libsnmp-Handle-certificate-loading-errors-gracefully.patch: - Skip certificate if loading fails. - - d/p/lp1912389-libsnmp-SSL-Increase-extension-buffer-size-to-preven.patch: - Make sure enough space is allocated for extensions longer than - 512 bytes. + * Fix segmentation fault when certificate contains extension + longer than 512 bytes (LP: #1912389) + - d/p/lp1912389-libsnmp-Handle-certificate-loading-errors-gracefully.patch: + Skip certificate if loading fails. + - d/p/lp1912389-libsnmp-SSL-Increase-extension-buffer-size-to-preven.patch: + Make sure enough space is allocated for extensions longer than + 512 bytes. - -- Sergio Durigan Junior <sergio.duri...@canonical.com> Tue, 25 May + -- Sergio Durigan Junior <sergio.duri...@canonical.com> Tue, 25 May 2021 19:03:31 -0400 net-snmp (5.9+dfsg-3ubuntu1) hirsute; urgency=medium - * Merge with Debian unstable. Remaining changes: - - Add apport hook: - + d/control: add dh-apport to Build-Depends - + d/rules: install the apport hook via debhelper - + d/source.apport: apport hook - * Dropped: - - d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch: - Link libnetsnmptrapd against MYSQL_LIBS. Thanks to Adam - Williamson <awill...@redhat.com>. - (Closes #886221, LP #1814254) - [ Incorporated by Debian. ] - - Fix build with mysql-8 (LP #1814270): - + d/p/mysql8-replace-bool.patch: newer mysql dropped my_bool, use - char instead. - [ Incorporated by upstream. ] - - Skip autofs entries when calling statfs to prevent autofs - being mounted on snmpd startup (LP #1835818): - + d/p/autofs-fix-a-recently-introduced-bug.patch - + d/p/autofs-skip-autofs-entries.patch - [ Incorporated by upstream. ] - - d/p/fix-check-hr-filesys-autofs.patch: - + On Linux getmntent() is available but getfsstat() not. - Hence remove #if HAVE_GETFSSTAT from around the HRFS_type - check. - [ Incorporated by upstream. ] - * Added changes: - - d/libsnmp-dev.install: Don't install archive (.a) files. - The archive files are just temporary files generated in order to - create the final shared objects (.so), and we don't need to ship - them in the package. + * Merge with Debian unstable. Remaining changes: + - Add apport hook: + + d/control: add dh-apport to Build-Depends + + d/rules: install the apport hook via debhelper + + d/source.apport: apport hook + * Dropped: + - d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch: + Link libnetsnmptrapd against MYSQL_LIBS. Thanks to Adam + Williamson <awill...@redhat.com>. + (Closes #886221, LP #1814254) + [ Incorporated by Debian. ] + - Fix build with mysql-8 (LP #1814270): + + d/p/mysql8-replace-bool.patch: newer mysql dropped my_bool, use + char instead. + [ Incorporated by upstream. ] + - Skip autofs entries when calling statfs to prevent autofs + being mounted on snmpd startup (LP #1835818): + + d/p/autofs-fix-a-recently-introduced-bug.patch + + d/p/autofs-skip-autofs-entries.patch + [ Incorporated by upstream. ] + - d/p/fix-check-hr-filesys-autofs.patch: + + On Linux getmntent() is available but getfsstat() not. + Hence remove #if HAVE_GETFSSTAT from around the HRFS_type + check. + [ Incorporated by upstream. ] + * Added changes: + - d/libsnmp-dev.install: Don't install archive (.a) files. + The archive files are just temporary files generated in order to + create the final shared objects (.so), and we don't need to ship + them in the package. - -- Sergio Durigan Junior <sergio.duri...@canonical.com> Tue, 05 Jan + -- Sergio Durigan Junior <sergio.duri...@canonical.com> Tue, 05 Jan 2021 14:54:24 -0500
** Changed in: net-snmp (Ubuntu) Milestone: None => ubuntu-22.01 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1946877 Title: Merge net-snmp from Debian unstable for 22.04 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1946877/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs