Changelog for
net-snmp-debuginfo-5.9.4-4.1.x86_64.rpm :
* Wed Jan 22 2025 Dominique Leuenberger
- Drop rcFOO symlinks for CODE16 (PED-266).
* Fri Nov 15 2024 Alexander Bergmann - logrotate should use reload instead of restart (bsc#1232030)
* Fri Oct 20 2023 Thorsten Kukuk - net-snmp-5.9.4-systemd-no-utmp.patch: prefer systemd-logind over utmp to count number of logged in users, utmp is not reliable for this and has a Y2038 problem (jsc#PED-3144)
* Tue Oct 17 2023 Alexander Bergmann - Update to net-snmp-5.9.4 (bsc#1214364). add (rename):
* net-snmp-5.9.4-add-lustre-fs-support.patch
* net-snmp-5.9.4-fix-create-v3-user-outfile.patch
* net-snmp-5.9.4-fixed-python2-bindings.patch
* net-snmp-5.9.4-fix-Makefile.PL.patch
* net-snmp-5.9.4-modern-rpm-api.patch
* net-snmp-5.9.4-net-snmp-config-headercheck.patch
* net-snmp-5.9.4-perl-tk-warning.patch
* net-snmp-5.9.4-pie.patch
* net-snmp-5.9.4-snmpstatus-suppress-output.patch
* net-snmp-5.9.4-socket-path.patch
* net-snmp-5.9.4-subagent-set-response.patch
* net-snmp-5.9.4-suse-systemd-service-files.patch
* net-snmp-5.9.4-testing-empty-arptable.patch delete (now part of v5.9.4):
* net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
* net-snmp-5.9.3-grep.patch delete (rename):
* net-snmp-5.9.1-add-lustre-fs-support.patch
* net-snmp-5.9.2-fix-create-v3-user-outfile.patch
* net-snmp-5.9.3-fixed-python2-bindings.patch
* net-snmp-5.9.1-fix-Makefile.PL.patch
* net-snmp-5.9.1-modern-rpm-api.patch
* net-snmp-5.9.1-net-snmp-config-headercheck.patch
* net-snmp-5.9.1-perl-tk-warning.patch
* net-snmp-5.9.2-pie.patch
* net-snmp-5.9.1-snmpstatus-suppress-output.patch
* net-snmp-5.9.1-socket-path.patch
* net-snmp-5.9.1-subagent-set-response.patch
* net-snmp-5.9.1-suse-systemd-service-files.patch
* net-snmp-5.9.1-testing-empty-arptable.patch- Removing legacy MIBs used by Velocity Software (jira#PED-6416). delete:
* net-snmp-5.9.1-velocity-mib.patch- Re-add support for hostname netgroups that was removed accidentally and previously added with FATE#316305 (bsc#1207697). \'AATThostgroup\' can be specified for multiple hosts add:
* net-snmp-5.9.4-add-netgroups-functionality.patch- Hardening systemd services setting \"ProtectHome=true\" caused home directory size and allocation to be listed incorrectly (bsc#1206044). add (rename):
* net-snmp-5.9.4-harden_snmpd.service.patch
* net-snmp-5.9.4-harden_snmptrapd.service.patch delete (rename):
* net-snmp-5.9.1-harden_snmpd.service.patch
* net-snmp-5.9.1-harden_snmptrapd.service.patch
* Thu Jan 05 2023 Alexander Bergmann - Fixed NULL pointer exception issue when handling ipDefaultTTL or pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792). add:
* net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).- Use new MFD rewrites of mib modules, where available.- Disable legacy DES encryption and MD5 authentication protocols.
* Mon Oct 03 2022 Andreas Stieger - change egrep/fgrep to grep -E/-F to avoid warnings boo#1203096 add net-snmp-5.9.3-grep.patch
* Tue Sep 27 2022 Alexander Bergmann - Fixed python2 backward compability. add:
* net-snmp-5.9.3-fixed-python2-bindings.patch
* Wed Sep 21 2022 Alexander Bergmann - update to 5.9.3: - Fixed library versioning bug found in 5.9.2. - Library version change to libsnmp40.
* Thu Sep 01 2022 Stefan Schubert - Migration to /usr/etc: Saving user changed configuration files in /etc and restoring them while an RPM update.
* Tue Jul 12 2022 Dominique Leuenberger - Rename libsnmp40 subpackage to libsnmp39: the libraries are all having soversion 39.
* Mon Jul 04 2022 Alexander Bergmann - update to 5.9.2 (bsc#1201103): - security: - These two CVEs can be exploited by a user with read-only credentials: - CVE-2022-24805 A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. - These CVEs can be exploited by a user with read-write credentials: - CVE-2022-24806 Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously - CVE-2022-24807 A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. - CVE-2022-24808 A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.- Refactor two patches to work with version number 5.9.2: delete:
* net-snmp-5.9.1-pie.patch
* net-snmp-5.9.1-fix-create-v3-user-outfile.patch add:
* net-snmp-5.9.2-pie.patch
* net-snmp-5.9.2-fix-create-v3-user-outfile.patch
* Wed Jun 29 2022 Stefan Schubert - Moved logrotate files from user specific directory /etc/logrotate.d to vendor specific directory /usr/etc/logrotate.d.
* Wed Mar 30 2022 Alexander Bergmann - Decouple snmp-mibs from net-snmp version to allow major version upgrade (bsc#1196955).- Fix LFH violation during v3 user creation (bsc#1181591). Add net-snmp-5.9.1-fix-create-v3-user-outfile.patch- Fix subagent crash at save_set_var() (bsc#1178021). Add net-snmp-5.9.1-subagent-set-response.patch- Fix missing sysconfig files creation (bsc#1108471).- Rename patches to version number 5.9.1: delete:
* net-snmp-5.8-socket-path.patch
* net-snmp-5.8-testing-empty-arptable.patch
* net-snmp-5.8-pie.patch
* net-snmp-5.8-net-snmp-config-headercheck.patch
* net-snmp-5.8-perl-tk-warning.patch
* net-snmp-5.8-velocity-mib.patch
* net-snmp-5.8-snmpstatus-suppress-output.patch
* net-snmp-5.8-fix-Makefile.PL.patch
* net-snmp-5.8-modern-rpm-api.patch add:
* net-snmp-5.9.1-socket-path.patch
* net-snmp-5.9.1-testing-empty-arptable.patch
* net-snmp-5.9.1-pie.patch
* net-snmp-5.9.1-net-snmp-config-headercheck.patch
* net-snmp-5.9.1-perl-tk-warning.patch
* net-snmp-5.9.1-velocity-mib.patch
* net-snmp-5.9.1-snmpstatus-suppress-output.patch
* net-snmp-5.9.1-fix-Makefile.PL.patch
* net-snmp-5.9.1-modern-rpm-api.patch
* Mon Jan 24 2022 Dirk Müller - update net-snmp-5.8-socket-path.patch: use %_rundir for agentx
