Changelog for snmptt-1.4.2-3.85.noarch.rpm :

* Mon Aug 17 2020 Lars Vogdt - Update to 1.4.2 (fixing CVE-2020-24361; boo#1175371): + Removed the daemon_gid option and enhanced the daemon_uid option so that it retreives the group membership for daemon_uid from the OS. This fixes a bug in 1.4.1 where it was not possible to define multiple group members with daemon_gid. + Fixed a security issue with EXEC / PREXEC / unknown_trap_exec that could allow malicious shell code to be executed. + Fixed a bug with EXEC / PREXEC / unknown_trap_exec that caused commands to be run as root instead of the user defined in daemon_uid. + Added the snmptt.ini option daemon_gid to allow the gid to be set in addition to the uid. Defaults to \'nobody\' if not defined. + Fixed bug with unknown_trap_exec_format which resulted in duplicate text when a custom format is used. + Fixed bug with snmptt hanging if the log message sent to syslog contained a %% symbol. All %%\'s are now escaped before sending to syslog + Fixed bug with LOGONLY severity (3567744). EXEC was being executed even if the trap had a severity of LOGONLY. + Fixed bug with not being able to write to the debug log file when running snmptt as non-root if the debug file didn\'t already exist with the correct permissions at startup. The ownership of snmptt.debug is now set to daemon_uid before switching to the new uid. + Installation documentation updates + Fixed bug with MATCH where number ranges were not working + Fixed bug with syslog logging. Function was not being called properly + Fixed bug where if the spool directory is not defined, files may be deleted from the wrong folder + Fixed possible bug with MySQL. Put CONNECT string on one line. + Fixed bug where the hostname is not detected properly when snmptrapd is configured to not use DNS. + Fixed bug with syslog (2980512). Log entries were supposed to be logged with snmptt[pid] but instad of the pid it was actually the effective user ID. + Fixed bug with multi-line traps (2915658). + Added snmptt.ini option net_snmp_perl_cache_enable to enable caching of Net-SNMP Perl module OID and ENUM translations. This may speed up translations and reduce CPU load when net_snmp_perl_enable and translate_
* options are enabled. + Fixed bug with MATCH. The PREEXEC $p variable could not be used with MATCH. PREEXEC is now executed first if MATCH contains $p. + Fixed bug with snmptthandler-embedded where IP addresses and OIDs were not being detected properly because they contained \'OID:\', \'IpAddress:\' etc. + Added patch 2943209 from Ricardo Duarte for snmpttconvertmib to add new format option 4 for trap name and variables similar to FORMAT $+
*.- add snmptt.service and tmpfile file and switch to systemd service on newer distributions- prepent system user and group with a \'_\': _snmptt and _snmptt + add snmptt_default_user_and_pidfile.patch
* Thu Sep 27 2018 roAATTsuse.de- buildrequire insserv-compat for suse-version ge 1500 for now- drop the \"-o\" flag from the useradd call
* Sun Feb 09 2014 larsAATTlinux-schulserver.de- compress the logfiles during logrotate run- add \'su\' option to logrotate file
* Sun May 05 2013 larsAATTlinux-schulserver.de- added snmptt.sql as base for new users- added $remote_fs dependency in init script- rpmlint cleanup
* Wed Apr 11 2012 jcnengelAATTgmail.com- Fix build for openSUSE >= 12.3 with help2man
* Wed Feb 22 2012 larsAATTlinux-schulserver.de- recommend perl(DBD::mysql) to get at least a database connection to the currently most popular database
* Wed Aug 10 2011 larsAATTlinux-schulserver.de- add /etc/snmp/snmptt directory to store translated snmp mib configs there
* Tue Jun 07 2011 larsAATTlinux-schulserver.de- fix init script: + do not require snmp - recommend snmptrapd + do not use /var/lock/subsys/snmptt, use /var/run/snmptt.pid instead for probing + run snmptt with --ini option
* Mon Jun 06 2011 larsAATTlinux-schulserver.de- introduce snmptt user and snmptt group for more security- create manpages out of the --help options of the scripts- added rpmlintrc- use snmptt.conf.generic as snmptt.conf
* Tue Feb 01 2011 larsAATTlinux-schulserver.de- initial package version 1.3