Changelog for
libsnmp40-5.9.4-86.1.x86_64.rpm :
* Fri Oct 20 2023 kukukAATTsuse.com- net-snmp-5.9.4-systemd-no-utmp.patch: prefer systemd-logind over utmp to count number of logged in users, utmp is not reliable for this and has a Y2038 problem (jsc#PED-3144)
* Tue Oct 17 2023 abergmannAATTsuse.com- Update to net-snmp-5.9.4 (bsc#1214364). add (rename):
* net-snmp-5.9.4-add-lustre-fs-support.patch
* net-snmp-5.9.4-fix-create-v3-user-outfile.patch
* net-snmp-5.9.4-fixed-python2-bindings.patch
* net-snmp-5.9.4-fix-Makefile.PL.patch
* net-snmp-5.9.4-modern-rpm-api.patch
* net-snmp-5.9.4-net-snmp-config-headercheck.patch
* net-snmp-5.9.4-perl-tk-warning.patch
* net-snmp-5.9.4-pie.patch
* net-snmp-5.9.4-snmpstatus-suppress-output.patch
* net-snmp-5.9.4-socket-path.patch
* net-snmp-5.9.4-subagent-set-response.patch
* net-snmp-5.9.4-suse-systemd-service-files.patch
* net-snmp-5.9.4-testing-empty-arptable.patch delete (now part of v5.9.4):
* net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
* net-snmp-5.9.3-grep.patch delete (rename):
* net-snmp-5.9.1-add-lustre-fs-support.patch
* net-snmp-5.9.2-fix-create-v3-user-outfile.patch
* net-snmp-5.9.3-fixed-python2-bindings.patch
* net-snmp-5.9.1-fix-Makefile.PL.patch
* net-snmp-5.9.1-modern-rpm-api.patch
* net-snmp-5.9.1-net-snmp-config-headercheck.patch
* net-snmp-5.9.1-perl-tk-warning.patch
* net-snmp-5.9.2-pie.patch
* net-snmp-5.9.1-snmpstatus-suppress-output.patch
* net-snmp-5.9.1-socket-path.patch
* net-snmp-5.9.1-subagent-set-response.patch
* net-snmp-5.9.1-suse-systemd-service-files.patch
* net-snmp-5.9.1-testing-empty-arptable.patch- Removing legacy MIBs used by Velocity Software (jira#PED-6416). delete:
* net-snmp-5.9.1-velocity-mib.patch- Re-add support for hostname netgroups that was removed accidentally and previously added with FATE#316305 (bsc#1207697). \'AATThostgroup\' can be specified for multiple hosts add:
* net-snmp-5.9.4-add-netgroups-functionality.patch- Hardening systemd services setting \"ProtectHome=true\" caused home directory size and allocation to be listed incorrectly (bsc#1206044). add (rename):
* net-snmp-5.9.4-harden_snmpd.service.patch
* net-snmp-5.9.4-harden_snmptrapd.service.patch delete (rename):
* net-snmp-5.9.1-harden_snmpd.service.patch
* net-snmp-5.9.1-harden_snmptrapd.service.patch
* Thu Jan 05 2023 abergmannAATTsuse.com- Fixed NULL pointer exception issue when handling ipDefaultTTL or pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792). add:
* net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).- Use new MFD rewrites of mib modules, where available.- Disable legacy DES encryption and MD5 authentication protocols.
* Mon Oct 03 2022 andreas.stiegerAATTgmx.de- change egrep/fgrep to grep -E/-F to avoid warnings boo#1203096 add net-snmp-5.9.3-grep.patch
* Tue Sep 27 2022 abergmannAATTsuse.com- Fixed python2 backward compability. add:
* net-snmp-5.9.3-fixed-python2-bindings.patch
* Wed Sep 21 2022 abergmannAATTsuse.com- update to 5.9.3: - Fixed library versioning bug found in 5.9.2. - Library version change to libsnmp40.
* Thu Sep 01 2022 schubiAATTsuse.com- Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update.
* Tue Jul 12 2022 dimstarAATTopensuse.org- Rename libsnmp40 subpackage to libsnmp39: the libraries are all having soversion 39.
* Mon Jul 04 2022 abergmannAATTsuse.com- update to 5.9.2 (bsc#1201103): - security: - These two CVEs can be exploited by a user with read-only credentials: - CVE-2022-24805 A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. - These CVEs can be exploited by a user with read-write credentials: - CVE-2022-24806 Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously - CVE-2022-24807 A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. - CVE-2022-24808 A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.- Refactor two patches to work with version number 5.9.2: delete:
* net-snmp-5.9.1-pie.patch
* net-snmp-5.9.1-fix-create-v3-user-outfile.patch add:
* net-snmp-5.9.2-pie.patch
* net-snmp-5.9.2-fix-create-v3-user-outfile.patch
* Wed Jun 29 2022 schubiAATTsuse.com- Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d.
* Wed Mar 30 2022 abergmannAATTsuse.com- Decouple snmp-mibs from net-snmp version to allow major version upgrade (bsc#1196955).- Fix LFH violation during v3 user creation (bsc#1181591). Add net-snmp-5.9.1-fix-create-v3-user-outfile.patch- Fix subagent crash at save_set_var() (bsc#1178021). Add net-snmp-5.9.1-subagent-set-response.patch- Fix missing sysconfig files creation (bsc#1108471).- Rename patches to version number 5.9.1: delete:
* net-snmp-5.8-socket-path.patch
* net-snmp-5.8-testing-empty-arptable.patch
* net-snmp-5.8-pie.patch
* net-snmp-5.8-net-snmp-config-headercheck.patch
* net-snmp-5.8-perl-tk-warning.patch
* net-snmp-5.8-velocity-mib.patch
* net-snmp-5.8-snmpstatus-suppress-output.patch
* net-snmp-5.8-fix-Makefile.PL.patch
* net-snmp-5.8-modern-rpm-api.patch add:
* net-snmp-5.9.1-socket-path.patch
* net-snmp-5.9.1-testing-empty-arptable.patch
* net-snmp-5.9.1-pie.patch
* net-snmp-5.9.1-net-snmp-config-headercheck.patch
* net-snmp-5.9.1-perl-tk-warning.patch
* net-snmp-5.9.1-velocity-mib.patch
* net-snmp-5.9.1-snmpstatus-suppress-output.patch
* net-snmp-5.9.1-fix-Makefile.PL.patch
* net-snmp-5.9.1-modern-rpm-api.patch
* Mon Jan 24 2022 dmuellerAATTsuse.com- update net-snmp-5.8-socket-path.patch: use %_rundir for agentx
* Sat Oct 23 2021 andreas.stiegerAATTgmx.de- fix shlib-policy-name-error for SLPP boo#1191774
* Mon Oct 18 2021 abergmannAATTsuse.com- update to 5.9.1: - General: Many bug fixes- Change to use systemd service files directly from net-snmp package. Patch clean-up and renaming. Add:
* net-snmp-5.9.1-suse-systemd-service-files.patch
* net-snmp-5.9.1-harden_snmpd.service.patch
* net-snmp-5.9.1-harden_snmptrapd.service.patch
* net-snmp-5.9.1-add-lustre-fs-support.patch Remove:
* snmpd.service
* snmptrapd.service
* harden_snmpd.service.patch
* harden_snmptrapd.service.patch
* net-snmp-5.8-add-lustre-fs-support.patch
* Fri Oct 15 2021 jsegitzAATTsuse.com- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_snmpd.service.patch
* harden_snmptrapd.service.patch Modified:
* snmpd.service
* snmptrapd.service
* Sun Sep 19 2021 andreas.stiegerAATTgmx.de- add upstream signing keyring and validate source signature
* Thu Mar 25 2021 codeAATTbnavigator.de- Can\'t assume non-existence of python38 macros in Leap. gh#openSUSE/python-rpm-macros#107 Test for suse_version instead. Only Tumbleweed has and needs the python_subpackage_only support.
* Mon Jan 18 2021 dmuellerAATTsuse.com- update to 5.9: snmplib: - Add IPv6 support to DTLSUDP transport CHANGES: snmplib: use new netsnmp_sockaddr_storage in netsnmp_addr_pair CHANGES: snmplib: add base_transport ptr for tunneled transports snmpd: - Security vulnerabilty in the ping MIB reported by Christopher Ertl from Microsoft fixed - Changing to a different uid/gid can only be done once - The extend mib is now read-only by default snmptrap: - BUG: 2899: Patch from Drew Roedersheimer to set library engineboots/time values before sending unspecified: - Add pkg-config support for building applications and sub-agents Use the netsnmp package when building Net-SNMP applications. Use the netsnmp-agent package when building Net-SNMP subagents.- drop net-snmp-5.8-fix-python3.patch, net-snmp-5.8-netgroups.patch: obsolete
* Sun Dec 13 2020 d_wernerAATTgmx.net- Update the tmpfiles.d/ drop-in file - remove legacy directory Fixes boo#1137761 and boo#1176997
* Sun Nov 22 2020 codeAATTbnavigator.de- Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79
* Thu Nov 19 2020 codeAATTbnavigator.de- Support multiple python 3 flavors in the python subpackage gh#openSUSE/python-rpm-macros#66
* Mon Jun 29 2020 alexvkaamAATTgmail.com- Change /etc/logrotate.d/net-snmp from init.d to systemd fix boo#1173487.
* Tue Mar 31 2020 mliskaAATTsuse.cz- Add -fcommon in order to fix boo#1160404.
* Thu Jul 04 2019 abergmannAATTsuse.com- Add Lustre filesystem support (bsc#1140341). Add net-snmp-5.8-add-lustre-fs-support.patch
* Wed Mar 06 2019 abergmannAATTsuse.com- Remove FIRST_ARG usage from spec file (bsc#1126426).
* Wed Oct 10 2018 abergmannAATTsuse.com- Update to net-snmp-5.8. Fixes included:
* Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
* Fix agentx freezing on timeout (bsc#1027353)
* swintst_rpm: Protect against unspecified Group name (bsc#1102775)- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)- Rename and refactor patches and remove those that are already included inside the new version. Added:
* net-snmp-5.8-socket-path.patch
* net-snmp-5.8-testing-empty-arptable.patch
* net-snmp-5.8-pie.patch
* net-snmp-5.8-net-snmp-config-headercheck.patch
* net-snmp-5.8-perl-tk-warning.patch
* net-snmp-5.8-velocity-mib.patch
* net-snmp-5.8-netgroups.patch
* net-snmp-5.8-snmpstatus-suppress-output.patch
* net-snmp-5.8-fix-Makefile.PL.patch
* net-snmp-5.8-modern-rpm-api.patch
* net-snmp-5.8-fix-python3.patch Removed:
* net-snmp-5.7.3-socket-path.patch
* net-snmp-5.7.3-testing-empty-arptable.patch
* net-snmp-5.7.3-pie.patch
* net-snmp-5.7.3-net-snmp-config-headercheck.patch
* net-snmp-5.7.3-perl-tk-warning.patch
* net-snmp-5.7.3-velocity-mib.patch
* net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
* net-snmp-5.7.3-netgroups.patch
* net-snmp-5.7.3-snmpstatus-suppress-output.patch
* net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
* net-snmp-5.7.3-Remove-U64-typedef.patch
* net-snmp-5.7.3-Fix-Makefile.PL.patch
* net-snmp-5.7.3-build-with-openssl-1.1.patch
* net-snmp-5.7.3-modern-rpm-api.patch
* net-snmp-python3.patch
* net-snmp-5.7.2-systemd.patch
* net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
* Mon Oct 08 2018 abergmannAATTsuse.com- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
* Mon Jun 18 2018 kukukAATTsuse.de- Create /var/agentx via systemd tmpfiles in case of rollback, snapshots and transactional updates [bsc#1098032]
* Wed Apr 18 2018 tchvatalAATTsuse.com- Fix permissions on unit files wrt bsc#1087977- Use %license (boo#1082318)
* Mon Apr 16 2018 abergmannAATTsuse.com- Remove executable flags from systemd service files (bsc#1089295).
* Thu Feb 01 2018 jengelhAATTinai.de- Fix RPM group for shlib subpackage.
* Wed Jan 24 2018 tchvatalAATTsuse.com- Properly conditionalize the py2 build
* Wed Jan 24 2018 tchvatalAATTsuse.com- Add patch from Fedora to support natively systemd:
* net-snmp-5.7.2-systemd.patch- Drop the check phase as whole 90% of the tests fail it makes more sense to run them somewhere localy
* Mon Jan 22 2018 tchvatalAATTsuse.com- Take systemd service files from fedora to replace sysV scripts- Also convert the sysconfig files to match fedora ones, they get bit more terse but it works seamlessly with systemd
* Fri Jan 19 2018 tchvatalAATTsuse.com- Format with spec-cleaner- Drop sle11 support as it fails to build anyway for ages- Rename python packages to be python-%{name} with obsoletes
* Use new singlespec macros
* Add patch converting the py files to python3/2 compat mode net-snmp-python3.patch- Run full autoreconf instead of partial- Build with threads by building few targets first
* Mon Dec 11 2017 dimstarAATTopensuse.org- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (>= 4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being removed.
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Tue Jun 13 2017 daniel.molkentinAATTsuse.com- Fix build with OpenSSL 1.1 (bsc#1042664): + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated squash-patch from the following upstream commits: bbed6b86e70b5a3c54f14992696f2308a8d79511 14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8 9641b472ef01208f92631016e91b0a4a518163f0 e4c6937483d4a680570cec05388d2e4b291868a6 b906c60c8a436d7360267a6d242526b33a9aaac8
* Sat May 21 2016 dimstarAATTopensuse.org- Fix build with perl 5.24.0: + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system recursiely loading Makefile.Pl and destroying its internas. See https://rt.perl.org/Public/Bug/Display.html?id=125907 + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef conflicts with a typedef in a Perl header file. Hence remove the U64 typedef from the Net-SNMP header files. Backported from upstream commit 477b4307ef1.
* Tue Mar 15 2016 abergmannAATTsuse.com- make snmpd and snmptrapd log message destination configurable for syslog or a dedicated log file. (bsc#695677)- make snmpd and snmptrapd listening address(es) configurable via the sysconfig file.
* Mon Feb 15 2016 astiegerAATTsuse.com- fix build with GNU grep 2.23, use grep -a to force text matching
* Thu Sep 03 2015 meissnerAATTsuse.com- reenabled md5 and des, as some tools build against it and need the methods :(
* Thu Aug 13 2015 abergmannAATTsuse.com- added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621)
* Mon Aug 03 2015 meissnerAATTsuse.com- Disable MD5 authentication method, disable DES support (if something breaks, tell me)
* Wed Jul 22 2015 jengelhAATTinai.de- Request pkgconfig(libssl) instead of openssl-devel to support using LibreSSL as well.
* Tue Jul 14 2015 abergmannAATTsuse.com- update to upstream version 5.7.3- remove patch that is now present in the upstream release:
* net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch- rename patches to new version number 5.7.3: delete:
* net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch
* net-snmp-5.7.2-net-snmp-config-headercheck.patch
* net-snmp-5.7.2-perl-tk-warning.patch
* net-snmp-5.7.2-pie.patch
* net-snmp-5.7.2-socket-path.patch
* net-snmp-5.7.2-testing-empty-arptable.patch
* net-snmp-5.7.2-velocity-mib.patch add:
* net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
* net-snmp-5.7.3-net-snmp-config-headercheck.patch
* net-snmp-5.7.3-perl-tk-warning.patch
* net-snmp-5.7.3-pie.patch
* net-snmp-5.7.3-socket-path.patch
* net-snmp-5.7.3-testing-empty-arptable.patch
* net-snmp-5.7.3-velocity-mib.patch- add build requirement \'procps\' to fix a net-snmp-config error (bsc#935863)- enable DTLS and TLS support (FATE#318789) new binary \'snmptls\' was added- add support for hostname netgroups (FATE#316305) \'AATThostgroup\' can be specified for multiple hosts
* net-snmp-5.7.3-netgroups.patch- suppress network statistics output in snmpstatus (FATE#316289) \'-Sn\' don\'t print any info about the network \'-Si\' don\'t print the operational status of network interfaces
* net-snmp-5.7.3-snmpstatus-suppress-output.patch
* Sun Nov 30 2014 cobexerAATTgmail.com- also stop snmptrapd on removal
