-
net-snmp (5.9+dfsg-3ubuntu1.21.04.1) hirsute; urgency=medium
* Fix segmentation fault when certificate contains extension
longer than 512 bytes (LP: #1912389)
- d/p/lp1912389-libsnmp-Handle-certificate-loading-errors-gracefully.patch:
Skip certificate if loading fails.
- d/p/lp1912389-libsnmp-SSL-Increase-extension-buffer-size-to-preven.patch:
Make sure enough space is allocated for extensions longer than
512 bytes.
-- Sergio Durigan Junior <email address hidden> Tue, 25 May 2021 19:09:11 -0400
-
net-snmp (5.9+dfsg-3ubuntu1) hirsute; urgency=medium
* Merge with Debian unstable. Remaining changes:
- Add apport hook:
+ d/control: add dh-apport to Build-Depends
+ d/rules: install the apport hook via debhelper
+ d/source.apport: apport hook
* Dropped:
- d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch:
Link libnetsnmptrapd against MYSQL_LIBS. Thanks to Adam
Williamson <email address hidden>.
(Closes #886221, LP #1814254)
[ Incorporated by Debian. ]
- Fix build with mysql-8 (LP #1814270):
+ d/p/mysql8-replace-bool.patch: newer mysql dropped my_bool, use
char instead.
[ Incorporated by upstream. ]
- Skip autofs entries when calling statfs to prevent autofs
being mounted on snmpd startup (LP #1835818):
+ d/p/autofs-fix-a-recently-introduced-bug.patch
+ d/p/autofs-skip-autofs-entries.patch
[ Incorporated by upstream. ]
- d/p/fix-check-hr-filesys-autofs.patch:
+ On Linux getmntent() is available but getfsstat() not.
Hence remove #if HAVE_GETFSSTAT from around the HRFS_type
check.
[ Incorporated by upstream. ]
* Added changes:
- d/libsnmp-dev.install: Don't install archive (.a) files.
The archive files are just temporary files generated in order to
create the final shared objects (.so), and we don't need to ship
them in the package.
-- Sergio Durigan Junior <email address hidden> Tue, 05 Jan 2021 14:54:24 -0500
-
net-snmp (5.8+dfsg-5ubuntu2) hirsute; urgency=medium
* No-change rebuild for the perl update.
-- Matthias Klose <email address hidden> Mon, 09 Nov 2020 10:50:26 +0100
-
net-snmp (5.8+dfsg-5ubuntu1) groovy; urgency=medium
* Merge with Debian unstable (LP: #1880724). Remaining changes:
- Add apport hook:
+ d/control: add dh-apport to Build-Depends
+ d/rules: install the apport hook via debhelper
+ d/source.apport: apport hook
- d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch:
Link libnetsnmptrapd against MYSQL_LIBS. Thanks to Adam
Williamson <email address hidden>.
(Closes #886221, LP #1814254)
- Fix build with mysql-8 (LP #1814270):
+ d/p/mysql8-replace-bool.patch: newer mysql dropped my_bool, use
char instead.
- Skip autofs entries when calling statfs to prevent autofs
being mounted on snmpd startup (LP #1835818):
+ d/p/autofs-fix-a-recently-introduced-bug.patch
+ d/p/autofs-skip-autofs-entries.patch
- d/p/fix-check-hr-filesys-autofs.patch:
+ On Linux getmntent() is available but getfsstat() not.
Hence remove #if HAVE_GETFSSTAT from around the HRFS_type
check.
* Dropped changes, incorporated by Debian:
- d/p/lp1871307-log-once-proc-net-if_inet6-failure.patch (LP #1871307):
+ MIB-II: Only log once that opening /proc/net/if_inet6 failed
- SECURITY UPDATE: Fix segmentation fault that happens when using the
snmpv3 protocol with snmpbulkget. (LP #1877027)
+ d/p/move-securityStateRef-into-free_securityStateRef.patch:
Consolidate the check of the securityStateRef pointer into the
free_securityStateRef function.
+ d/p/prevent-snmpv3-bulkget-errors-double-free.patch:
Prevent snmpv3 bulkget errors from becoming resulting in a
double free.
+ d/p/fix-usmStateReference-free.patch:
Fix typo on usm_free_usmStateReference from last patch.
+ d/p/unexport-struct-usmStateReference.patch:
Unexport struct usmStateReference and to prevent ABI breakages,
since it will be necessary to add a reference count to it.
+ d/p/introduce-refcount-usmStateReference.patch:
Introduce refcount in the struct usmStateReference, and adjust
code to properly use the field.
+ CVE-2019-20892
-- Sergio Durigan Junior <email address hidden> Thu, 06 Aug 2020 11:42:13 -0400