Merge ~sergiodj/ubuntu/+source/net-snmp:merge-5.9.1-jammy into ubuntu/+source/net-snmp:debian/sid

Proposed by Sergio Durigan Junior
Status: Merged
Merge reported by: Sergio Durigan Junior
Merged at revision: cb289636f03c6bbb4dabac250ecb0ba87ce25072
Proposed branch: ~sergiodj/ubuntu/+source/net-snmp:merge-5.9.1-jammy
Merge into: ubuntu/+source/net-snmp:debian/sid
Diff against target: 1374 lines (+1132/-4)
7 files modified
debian/changelog (+986/-0)
debian/control (+4/-3)
debian/patches/lp1945960-Fix-the-build-against-OpenSSL-3.0.patch (+33/-0)
debian/patches/lp1945960-configure-static-linking-Fix-SSL-checks.patch (+66/-0)
debian/patches/series (+2/-0)
debian/rules (+5/-1)
debian/source.apport (+36/-0)
Reviewer Review Type Date Requested Status
Andreas Hasenack Approve
Canonical Server Pending
Review via email: mp+413995@code.launchpad.net

Description of the change

This is the merge of net-snmp 5.9.1 from Debian unstable.

This merge is relatively straightforward; we currently have net-snmp 5.9 in Ubuntu. Fortunately, it allows us to drop two changes from our delta: one which was a backport from an upstream patch that is now present on 5.9.1, and another which was incorporated in the Debian package.

Another good thing is that bug #1912390 is also fixed with this merge (kudos to Bryce for leaving a reminder in the merge bug).

We still have to carry the OpenSSL 3 patches because they haven't been included in this release. They will become redundant in the next one, though.

There's a PPA with the proposed changes here:

https://launchpad.net/~sergiodj/+archive/ubuntu/net-snmp-merge/+packages

autopkgtest is still OK:

autopkgtest [21:04:04]: @@@@@@@@@@@@@@@@@@@@ summary
command1 PASS (superficial)
trap PASS

To post a comment you must log in.
Revision history for this message
Andreas Hasenack (ahasenack) wrote :

Looks good, +1

review: Approve
Revision history for this message
Andreas Hasenack (ahasenack) wrote (last edit ):

Actually, one thing to check. This change introduced in the new debian version:

@@ -121,6 +122,7 @@ Depends: libc6-dev, libsnmp40 (=${binary:Version}), libnetsnmptrapd40 (=${binary
          libwrap0-dev, libssl-dev, procps,
          libkvm-dev [kfreebsd-any], libsensors-dev [linux-any], ${misc:Depends},
          libpci-dev
+Recommends: libsnmp-perl
 Description: SNMP (Simple Network Management Protocol) development files
  The Simple Network Management Protocol (SNMP) provides a framework
  for the exchange of management information between agents (servers)

git diff -U10 sergiodj/lp1946877/old/debian..sergiodj/lp1946877/new/debian -- debian/control

That's adding Recommends: libsnmp-perl to libsnmp-dev. libsnmp-perl is in universe, and libsnmp-dev is in main. I don't think that's allowed, we will have to change that to Suggests afaik, can you confirm? I'll flip this to "needs fixing" until you analyze it.

Revision history for this message
Andreas Hasenack (ahasenack) :
review: Needs Fixing
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

So the new dependency is
 libsnmp-dev | 5.9+dfsg-3ubuntu4 | jammy | amd64, arm64, armhf, i386, ppc64el, riscv64, s390x
to
 libsnmp-perl | 5.9+dfsg-3ubuntu4 | jammy/universe | amd64, arm64, armhf, i386, ppc64el, riscv64, s390x

But the only reason to have libsnmp-dev:

$ reverse-depends --release jammy libsnmp-dev
Reverse-Depends
* libgvm-dev
* libifstat-dev

Is because -dev and -doc are auto-included by germinate unless you do something about it.

See
https://people.canonical.com/~ubuntu-archive/germinate-output/ubuntu.jammy/all

libsnmp-dev | net-snmp | Rescued from net-snmp | Ubuntu Developers <email address hidden> | 205104 | 1282

Whenever you see rescued that is due to the auto-inclusion.
We can handle that without delta on the package by adding an extra-exclude to

https://git.launchpad.net/~ubuntu-core-dev/ubuntu-seeds/+git/ubuntu/tree/supported#n124
We can review that change in the team and push it (core-dev) then this won't be a problem on upload.

Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

On Wednesday, January 12 2022, Christian Ehrhardt  wrote:

> So the new dependency is
> libsnmp-dev | 5.9+dfsg-3ubuntu4 | jammy | amd64, arm64, armhf, i386, ppc64el, riscv64, s390x
> to
> libsnmp-perl | 5.9+dfsg-3ubuntu4 | jammy/universe | amd64, arm64, armhf, i386, ppc64el, riscv64, s390x

Thank you for catching this, Andreas. And thank you Christian for the
further explanation.

> But the only reason to have libsnmp-dev:
>
> $ reverse-depends --release jammy libsnmp-dev
> Reverse-Depends
> * libgvm-dev
> * libifstat-dev
>
> Is because -dev and -doc are auto-included by germinate unless you do something about it.
>
> See
> https://people.canonical.com/~ubuntu-archive/germinate-output/ubuntu.jammy/all
>
> libsnmp-dev | net-snmp | Rescued from net-snmp | Ubuntu Developers
> <email address hidden> | 205104 | 1282
>
> Whenever you see rescued that is due to the auto-inclusion.
> We can handle that without delta on the package by adding an extra-exclude to
>
> https://git.launchpad.net/~ubuntu-core-dev/ubuntu-seeds/+git/ubuntu/tree/supported#n124
> We can review that change in the team and push it (core-dev) then this won't be a problem on upload.

Ah, got it. I will file an MP against the ubuntu-seeds/+git/ubuntu repo
and mark you guys to review it.

Thanks,

--
Sergio
GPG key ID: E92F D0B3 6B14 F1F4 D8E0 EB2F 106D A1C8 C3CB BF14

Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

On Wednesday, January 12 2022, Sergio Durigan Junior wrote:

> Ah, got it. I will file an MP against the ubuntu-seeds/+git/ubuntu repo
> and mark you guys to review it.

MP filed: https://code.launchpad.net/~sergiodj/ubuntu-seeds/+git/ubuntu/+merge/414063

--
Sergio
GPG key ID: E92F D0B3 6B14 F1F4 D8E0 EB2F 106D A1C8 C3CB BF14

Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

Alright, now that the ubuntu-seeds MP has been merged, I think it is OK to proceed with this one.

Andreas, I talked to Christian during standup and he's happy with the MP. Judging from your comments, I understand that you were a +1 modulo the libsnmp-perl thing, which has since been resolved. Therefore, I'm going to go ahead and upload the package. Thanks both of you for the reviews.

$ dput net-snmp_5.9.1+dfsg-1ubuntu1_source.changes
Trying to upload package to ubuntu
Checking signature on .changes
gpg: /home/sergio/work/net-snmp/net-snmp_5.9.1+dfsg-1ubuntu1_source.changes: Valid signature from 106DA1C8C3CBBF14
Checking signature on .dsc
gpg: /home/sergio/work/net-snmp/net-snmp_5.9.1+dfsg-1ubuntu1.dsc: Valid signature from 106DA1C8C3CBBF14
Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading net-snmp_5.9.1+dfsg-1ubuntu1.dsc: done.
  Uploading net-snmp_5.9.1+dfsg.orig.tar.xz: done.
  Uploading net-snmp_5.9.1+dfsg-1ubuntu1.debian.tar.xz: done.
  Uploading net-snmp_5.9.1+dfsg-1ubuntu1_source.buildinfo: done.
  Uploading net-snmp_5.9.1+dfsg-1ubuntu1_source.changes: done.
Successfully uploaded packages.

Revision history for this message
Andreas Hasenack (ahasenack) wrote :

yes, should be good

review: Approve
Revision history for this message
Andreas Hasenack (ahasenack) wrote :

This migrated a long time ago, could you please set the MP status to "merged"?

Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

On Monday, March 07 2022, Andreas Hasenack wrote:

> This migrated a long time ago, could you please set the MP status to "merged"?

Done, thanks.

--
Sergio
GPG key ID: E92F D0B3 6B14 F1F4 D8E0 EB2F 106D A1C8 C3CB BF14

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/debian/changelog b/debian/changelog
2index 7b90f06..7d2874b 100644
3--- a/debian/changelog
4+++ b/debian/changelog
5@@ -1,3 +1,28 @@
6+net-snmp (5.9.1+dfsg-1ubuntu1) jammy; urgency=medium
7+
8+ * Merge with Debian unstable (LP: #1946877, #1912390). Remaining changes:
9+ - Add apport hook:
10+ + d/control: add dh-apport to Build-Depends
11+ + d/rules: install the apport hook via debhelper
12+ + d/source.apport: apport hook
13+ - d/p/lp1945960-*: backport patches for the OpenSSL3 transition
14+ (LP #1945960)
15+ * Dropped changes, incorporated by Debian:
16+ - d/libsnmp-dev.install: Don't install archive (.a) files.
17+ The archive files are just temporary files generated in order to
18+ create the final shared objects (.so), and we don't need to ship
19+ them in the package.
20+ * Dropped changes, incorporated upstream:
21+ - Fix segmentation fault when certificate contains extension
22+ longer than 512 bytes (LP #1912389)
23+ + d/p/lp1912389-libsnmp-Handle-certificate-loading-errors-gracefully.patch:
24+ Skip certificate if loading fails.
25+ + d/p/lp1912389-libsnmp-SSL-Increase-extension-buffer-size-to-preven.patch:
26+ Make sure enough space is allocated for extensions longer than
27+ 512 bytes.
28+
29+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Tue, 11 Jan 2022 20:39:24 -0500
30+
31 net-snmp (5.9.1+dfsg-1) unstable; urgency=medium
32
33 [ Owen Evans ]
34@@ -32,6 +57,66 @@ net-snmp (5.9.1+dfsg-1) unstable; urgency=medium
35
36 -- Craig Small <csmall@debian.org> Mon, 20 Sep 2021 21:35:58 +1000
37
38+net-snmp (5.9+dfsg-3ubuntu4) jammy; urgency=medium
39+
40+ * d/p/lp1945960-*: backport patches for the OpenSSL3 transition
41+ (LP: #1945960)
42+
43+ -- Simon Chopin <simon.chopin@canonical.com> Wed, 17 Nov 2021 14:58:54 +0100
44+
45+net-snmp (5.9+dfsg-3ubuntu3) impish; urgency=medium
46+
47+ * No-change rebuild to build packages with zstd compression.
48+
49+ -- Matthias Klose <doko@ubuntu.com> Thu, 07 Oct 2021 12:21:20 +0200
50+
51+net-snmp (5.9+dfsg-3ubuntu2) impish; urgency=medium
52+
53+ * Fix segmentation fault when certificate contains extension
54+ longer than 512 bytes (LP: #1912389)
55+ - d/p/lp1912389-libsnmp-Handle-certificate-loading-errors-gracefully.patch:
56+ Skip certificate if loading fails.
57+ - d/p/lp1912389-libsnmp-SSL-Increase-extension-buffer-size-to-preven.patch:
58+ Make sure enough space is allocated for extensions longer than
59+ 512 bytes.
60+
61+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Tue, 25 May 2021 19:03:31 -0400
62+
63+net-snmp (5.9+dfsg-3ubuntu1) hirsute; urgency=medium
64+
65+ * Merge with Debian unstable. Remaining changes:
66+ - Add apport hook:
67+ + d/control: add dh-apport to Build-Depends
68+ + d/rules: install the apport hook via debhelper
69+ + d/source.apport: apport hook
70+ * Dropped:
71+ - d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch:
72+ Link libnetsnmptrapd against MYSQL_LIBS. Thanks to Adam
73+ Williamson <awilliam@redhat.com>.
74+ (Closes #886221, LP #1814254)
75+ [ Incorporated by Debian. ]
76+ - Fix build with mysql-8 (LP #1814270):
77+ + d/p/mysql8-replace-bool.patch: newer mysql dropped my_bool, use
78+ char instead.
79+ [ Incorporated by upstream. ]
80+ - Skip autofs entries when calling statfs to prevent autofs
81+ being mounted on snmpd startup (LP #1835818):
82+ + d/p/autofs-fix-a-recently-introduced-bug.patch
83+ + d/p/autofs-skip-autofs-entries.patch
84+ [ Incorporated by upstream. ]
85+ - d/p/fix-check-hr-filesys-autofs.patch:
86+ + On Linux getmntent() is available but getfsstat() not.
87+ Hence remove #if HAVE_GETFSSTAT from around the HRFS_type
88+ check.
89+ [ Incorporated by upstream. ]
90+ * Added changes:
91+ - d/libsnmp-dev.install: Don't install archive (.a) files.
92+ The archive files are just temporary files generated in order to
93+ create the final shared objects (.so), and we don't need to ship
94+ them in the package.
95+
96+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Tue, 05 Jan 2021 14:54:24 -0500
97+
98 net-snmp (5.9+dfsg-3) unstable; urgency=medium
99
100 * Source only upload - no changes Closes: #970798
101@@ -63,6 +148,57 @@ net-snmp (5.9+dfsg-1) unstable; urgency=medium
102
103 -- Craig Small <csmall@debian.org> Sat, 22 Aug 2020 17:11:17 +1000
104
105+net-snmp (5.8+dfsg-5ubuntu2) hirsute; urgency=medium
106+
107+ * No-change rebuild for the perl update.
108+
109+ -- Matthias Klose <doko@ubuntu.com> Mon, 09 Nov 2020 10:50:26 +0100
110+
111+net-snmp (5.8+dfsg-5ubuntu1) groovy; urgency=medium
112+
113+ * Merge with Debian unstable (LP: #1880724). Remaining changes:
114+ - Add apport hook:
115+ + d/control: add dh-apport to Build-Depends
116+ + d/rules: install the apport hook via debhelper
117+ + d/source.apport: apport hook
118+ - d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch:
119+ Link libnetsnmptrapd against MYSQL_LIBS. Thanks to Adam
120+ Williamson <awilliam@redhat.com>.
121+ (Closes #886221, LP #1814254)
122+ - Fix build with mysql-8 (LP #1814270):
123+ + d/p/mysql8-replace-bool.patch: newer mysql dropped my_bool, use
124+ char instead.
125+ - Skip autofs entries when calling statfs to prevent autofs
126+ being mounted on snmpd startup (LP #1835818):
127+ + d/p/autofs-fix-a-recently-introduced-bug.patch
128+ + d/p/autofs-skip-autofs-entries.patch
129+ - d/p/fix-check-hr-filesys-autofs.patch:
130+ + On Linux getmntent() is available but getfsstat() not.
131+ Hence remove #if HAVE_GETFSSTAT from around the HRFS_type
132+ check.
133+ * Dropped changes, incorporated by Debian:
134+ - d/p/lp1871307-log-once-proc-net-if_inet6-failure.patch (LP #1871307):
135+ + MIB-II: Only log once that opening /proc/net/if_inet6 failed
136+ - SECURITY UPDATE: Fix segmentation fault that happens when using the
137+ snmpv3 protocol with snmpbulkget. (LP #1877027)
138+ + d/p/move-securityStateRef-into-free_securityStateRef.patch:
139+ Consolidate the check of the securityStateRef pointer into the
140+ free_securityStateRef function.
141+ + d/p/prevent-snmpv3-bulkget-errors-double-free.patch:
142+ Prevent snmpv3 bulkget errors from becoming resulting in a
143+ double free.
144+ + d/p/fix-usmStateReference-free.patch:
145+ Fix typo on usm_free_usmStateReference from last patch.
146+ + d/p/unexport-struct-usmStateReference.patch:
147+ Unexport struct usmStateReference and to prevent ABI breakages,
148+ since it will be necessary to add a reference count to it.
149+ + d/p/introduce-refcount-usmStateReference.patch:
150+ Introduce refcount in the struct usmStateReference, and adjust
151+ code to properly use the field.
152+ + CVE-2019-20892
153+
154+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Thu, 06 Aug 2020 11:42:13 -0400
155+
156 net-snmp (5.8+dfsg-5) unstable; urgency=medium
157
158 * Allow extend to be read-only Closes: #966544
159@@ -128,6 +264,68 @@ net-snmp (5.8+dfsg-3) unstable; urgency=medium
160
161 -- Craig Small <csmall@debian.org> Thu, 02 Jul 2020 13:38:58 +1000
162
163+net-snmp (5.8+dfsg-2ubuntu3) groovy; urgency=medium
164+
165+ * SECURITY UPDATE: Fix segmentation fault that happens when using the
166+ snmpv3 protocol with snmpbulkget. (LP: #1877027)
167+ - d/p/move-securityStateRef-into-free_securityStateRef.patch:
168+ Consolidate the check of the securityStateRef pointer into the
169+ free_securityStateRef function.
170+ - d/p/prevent-snmpv3-bulkget-errors-double-free.patch:
171+ Prevent snmpv3 bulkget errors from becoming resulting in a
172+ double free.
173+ - d/p/fix-usmStateReference-free.patch:
174+ Fix typo on usm_free_usmStateReference from last patch.
175+ - d/p/unexport-struct-usmStateReference.patch:
176+ Unexport struct usmStateReference and to prevent ABI breakages,
177+ since it will be necessary to add a reference count to it.
178+ - d/p/introduce-refcount-usmStateReference.patch:
179+ Introduce refcount in the struct usmStateReference, and adjust
180+ code to properly use the field.
181+ - CVE-2019-20892
182+
183+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Tue, 23 Jun 2020 14:37:42 -0400
184+
185+net-snmp (5.8+dfsg-2ubuntu2) focal; urgency=medium
186+
187+ * d/p/lp1871307-log-once-proc-net-if_inet6-failure.patch (LP: #1871307):
188+ - MIB-II: Only log once that opening /proc/net/if_inet6 failed
189+
190+ -- Rafael David Tinoco <rafaeldtinoco@ubuntu.com> Thu, 09 Apr 2020 12:30:45 +0000
191+
192+net-snmp (5.8+dfsg-2ubuntu1) focal; urgency=medium
193+
194+ * Merge with Debian unstable (LP: #1855943). Remaining changes:
195+ - d/p/fix-check-hr-filesys-autofs.patch (LP #1843036)
196+ - Skip autofs entries when calling statfs (LP #1835818):
197+ - d/p/autofs-skip-autofs-entries.patch
198+ - d/p/autofs-fix-a-recently-introduced-bug.patch
199+ [Replaced former Non-upstream patches with clean cherry-pick)
200+ - d/p/mysql8-replace-bool.patch: fix build with mysql-8 (LP 1814270)
201+ - d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch: Link
202+ libnetsnmptrapd against MYSQL_LIBS.
203+ - Add apport hook.
204+ - d/control: add dh-apport to Build-Depends
205+ - d/rules: install the apport hook via debhelper
206+ - d/source.apport: apport hook
207+ * Dropped patches that are upstream and in Debian 5.8+dfsg-2:
208+ - d/p/put-paranthesis-around-macros-which-are-expressions.patch
209+ (LP #1843036)
210+ - Fix build with mysql-8 (LP #1814270):
211+ - d/p/mysql-options.patch: use mysql_options if no {my_,}load_defaults
212+ was found.
213+ - d/p/mysql-init.patch: handle the various mysql init functions.
214+ - d/p/mysql8-headers.patch: detect if my_global.h and my_sys.h are
215+ available.
216+ - d/p/my-load-defaults.patch: properly detect (and use)
217+ my_load_defaults().
218+ - d/p/snmptrapd_mysql_init: no need to drop this patch anymore
219+ (LP #1814254)
220+ - d/p/0001-swinst_apt.c-Fix-indexing-of-hrSWInstalledTable-to-s.patch
221+ (LP #1314760)
222+
223+ -- Rafael David Tinoco <rafaeldtinoco@ubuntu.com> Fri, 13 Dec 2019 03:27:52 +0000
224+
225 net-snmp (5.8+dfsg-2) unstable; urgency=medium
226
227 * All MIB directory values removed and just use the default compile-time
228@@ -160,6 +358,87 @@ net-snmp (5.8+dfsg-1) unstable; urgency=medium
229
230 -- Craig Small <csmall@debian.org> Thu, 10 Oct 2019 22:37:15 +1100
231
232+net-snmp (5.7.3+dfsg-5ubuntu6) focal; urgency=medium
233+
234+ * No-change rebuild for the perl update.
235+
236+ -- Matthias Klose <doko@ubuntu.com> Fri, 18 Oct 2019 19:37:07 +0000
237+
238+net-snmp (5.7.3+dfsg-5ubuntu5) eoan; urgency=medium
239+
240+ * d/p/fix-check-hr-filesys-autofs.patch:
241+ - On Linux getmntent() is available but getfsstat() not.
242+ Hence remove #if HAVE_GETFSSTAT from around the HRFS_type
243+ check.
244+
245+ -- Eric Desrochers <eric.desrochers@canonical.com> Sat, 07 Sep 2019 16:30:53 +0000
246+
247+net-snmp (5.7.3+dfsg-5ubuntu4) eoan; urgency=medium
248+
249+ * d/p/put-paranthesis-around-macros-which-are-expressions.patch:
250+ - put paranthesis around macros which are expressions.
251+ (LP: #1843036)
252+
253+ -- Eric Desrochers <eric.desrochers@canonical.com> Fri, 06 Sep 2019 23:15:43 +0000
254+
255+net-snmp (5.7.3+dfsg-5ubuntu3) eoan; urgency=medium
256+
257+ * Skip autofs entries when calling statfs to prevent autofs being mounted on
258+ snmpd startup (LP: #1835818):
259+ - d/p/autofs-skip-autofs-entries.patch
260+ - d/p/autofs-fix-a-recently-introduced-bug.patch
261+
262+ -- Ioanna Alifieraki <ioanna-maria.alifieraki@canonical.com> Wed, 21 Aug 2019 12:22:37 +0100
263+
264+net-snmp (5.7.3+dfsg-5ubuntu2) eoan; urgency=medium
265+
266+ * No change rebuild for libmysqlclient21.
267+
268+ -- Robie Basak <robie.basak@ubuntu.com> Mon, 12 Aug 2019 11:32:18 +0000
269+
270+net-snmp (5.7.3+dfsg-5ubuntu1) disco; urgency=medium
271+
272+ * Merge with Debian unstable. Remaining changes:
273+ - Add apport hook.
274+ + d/control: add dh-apport to Build-Depends
275+ + d/rules: install the apport hook via debhelper
276+ + d/source.apport: apport hook
277+ - d/p/0001-swinst_apt.c-Fix-indexing-of-hrSWInstalledTable-to-s.patch:
278+ set first hrSWInstalledIndex to 1 to follow RFC 2790 (LP #1314760)
279+ * Drop:
280+ - SECURITY UPDATE: DoS via NULL pointer exception
281+ + debian/patches/CVE-2018-18065.patch: fix logic in
282+ agent/helpers/table.c.
283+ + CVE-2018-18065
284+ [Fixed in 5.7.3+dfsg-4]
285+ - d/p/my_load_defaults: use my_load_defaults instead of the
286+ libmysqlclient-internal load_defaults (LP #1565003). Thanks to Lars
287+ Tangvald.
288+ [Replaced by a more complete patch]
289+ - debian/rules: Fix calculation of UPSTREAM_VERSION and COMPAT_VERSION.
290+ [No more needed since 5.7.3+dfsg-5]
291+ * Added:
292+ - d/p/snmptrapd_mysql_init: drop this patch. The first part fixes builds
293+ with newer mariadb, which Ubuntu doesn't use, and the second part is
294+ an unrelated change which we are fixing in another patch (see #1814254
295+ for details).
296+ - d/p/0001-Link-libnetsnmptrapd-against-MYSQL_LIBS.patch: Link
297+ libnetsnmptrapd against MYSQL_LIBS. Thanks to Adam
298+ Williamson <awilliam@redhat.com>. (Closes: #886221, LP: #1814254)
299+ - Fix build with mysql-8 (LP: #1814270):
300+ + d/p/mysql8-replace-bool.patch: newer mysql dropped my_bool, use char
301+ instead.
302+ + d/p/my-load-defaults.patch: properly detect (and use)
303+ my_load_defaults(). This replaces the previous
304+ my_load_defaults patch.
305+ + d/p/mysql8-headers.patch: detect if my_global.h and my_sys.h are
306+ available
307+ + d/p/mysql-init.patch: handle the various mysql init functions
308+ + d/p/mysql-options.patch: use mysql_options if no {my_,}load_defaults
309+ was found.
310+
311+ -- Andreas Hasenack <andreas@canonical.com> Tue, 05 Feb 2019 16:00:35 -0200
312+
313 net-snmp (5.7.3+dfsg-5) unstable; urgency=medium
314
315 * Use debhelper macros for shlibs Closes: #912685
316@@ -223,6 +502,60 @@ net-snmp (5.7.3+dfsg-2) unstable; urgency=medium
317
318 -- Craig Small <csmall@debian.org> Sat, 31 Mar 2018 20:00:51 +1100
319
320+net-snmp (5.7.3+dfsg-1.8ubuntu5) disco; urgency=medium
321+
322+ * No-change rebuild against latest lm-sensors
323+
324+ -- Jeremy Bicha <jbicha@ubuntu.com> Wed, 02 Jan 2019 17:37:45 -0500
325+
326+net-snmp (5.7.3+dfsg-1.8ubuntu4) disco; urgency=medium
327+
328+ * debian/rules: Fix calculation of UPSTREAM_VERSION and COMPAT_VERSION.
329+
330+ -- Adam Conrad <adconrad@ubuntu.com> Mon, 05 Nov 2018 13:22:39 -0700
331+
332+net-snmp (5.7.3+dfsg-1.8ubuntu3.18.10.1) cosmic-security; urgency=medium
333+
334+ * SECURITY UPDATE: DoS via NULL pointer exception
335+ - debian/patches/CVE-2018-18065.patch: fix logic in
336+ agent/helpers/table.c.
337+ - CVE-2018-18065
338+
339+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 22 Oct 2018 08:03:49 -0400
340+
341+net-snmp (5.7.3+dfsg-1.8ubuntu3) bionic; urgency=medium
342+
343+ * d/p/0001-swinst_apt.c-Fix-indexing-of-hrSWInstalledTable-to-s.patch:
344+ set first hrSWInstalledIndex to 1 to follow RFC 2790 (LP: #1314760)
345+
346+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Tue, 20 Feb 2018 15:24:41 +0100
347+
348+net-snmp (5.7.3+dfsg-1.8ubuntu2) bionic; urgency=high
349+
350+ * No change rebuild against openssl1.1.
351+
352+ -- Dimitri John Ledkov <xnox@ubuntu.com> Tue, 06 Feb 2018 17:54:39 +0000
353+
354+net-snmp (5.7.3+dfsg-1.8ubuntu1) bionic; urgency=medium
355+
356+ * Merge with Debian unstable (LP: #1742518). Remaining changes:
357+ - Add apport hook.
358+ + d/control: add dh-apport to Build-Depends
359+ + d/rules: install the apport hook via debhelper
360+ + d/source.apport: apport hook
361+ - d/p/my_load_defaults: use my_load_defaults instead of the
362+ libmysqlclient-internal load_defaults (LP #1565003). Thanks to Lars
363+ Tangvald.
364+ * Dropped:
365+ - Avoid installing links in rc[06].d.
366+ [It's not clear what it was trying to solve (no details or bug
367+ number), but update-rc.d no longer takes start/stop arguments and
368+ this delta was actually resulting in warnings during the installation.
369+ Also, Ubuntu is using systemd now and this package has systemd service
370+ files.]
371+
372+ -- Andreas Hasenack <andreas@canonical.com> Thu, 11 Jan 2018 16:07:07 -0200
373+
374 net-snmp (5.7.3+dfsg-1.8) unstable; urgency=medium
375
376 * Non-maintainer upload.
377@@ -234,6 +567,43 @@ net-snmp (5.7.3+dfsg-1.8) unstable; urgency=medium
378
379 -- Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Sat, 23 Dec 2017 23:48:23 +0100
380
381+net-snmp (5.7.3+dfsg-1.7ubuntu1) artful; urgency=medium
382+
383+ * Merge with Debian unstable (LP: #1712569). Remaining changes:
384+ - Add apport hook.
385+ + d/control: add dh-apport to Build-Depends
386+ + d/rules: install the apport hook via debhelper
387+ + d/source.apport: apport hook
388+ - Avoid installing links in rc[06].d.
389+ - d/p/my_load_defaults: use my_load_defaults instead of the
390+ libmysqlclient-internal load_defaults (LP #1565003). Thanks to Lars
391+ Tangvald.
392+ * Drop:
393+ - SECURITY UPDATE: denial of service and possible code execution via
394+ incompletely parsed varBind variables
395+ + debian/patches/CVE-2015-5621.patch: don't return incorrectly parsed
396+ varbinds in snmplib/snmp_api.c.
397+ + CVE-2015-5621
398+ [Added by Debian as 0025-Bug-788964-net-snmp-snmp_pdu_parse-DoS.patch
399+ in 5.7.3+dfsg-1.1]
400+ - debian/snmp.preinst:
401+ It turns out that the original motivation why killall was added is gone.
402+ So we can just remove the killall introduced by Ubuntu LP #573391
403+ (Closes: #781257, LP #1245604)
404+ [Fixed in Debian 5.7.3+dfsg-1.1]
405+ - Fix "FTBFS with Perl 5.24: error: conflicting types for 'U64'":
406+ add patch from upstream git which removes the U64 typedef from the
407+ Net-SNMP header files.
408+ Thanks to Niky Tyni for extracting the patch.
409+ (Closes: #825014)
410+ [Fixed in Debian 5.7.3+dfsg-1.5]
411+ - Additionally add another patch from upstream git which fixes
412+ perl/*/Makefile.PL to fix build failures with Perl 5.24.
413+ Cf. https://sourceforge.net/p/net-snmp/bugs/2712/
414+ [Fixed in Debian 5.7.3+dfsg-1.5]
415+
416+ -- Andreas Hasenack <andreas@canonical.com> Wed, 23 Aug 2017 10:29:35 -0300
417+
418 net-snmp (5.7.3+dfsg-1.7) unstable; urgency=medium
419
420 [ Niels Thykier ]
421@@ -357,6 +727,68 @@ net-snmp (5.7.3+dfsg-1.1) unstable; urgency=medium
422
423 -- Steinar H. Gunderson <sesse@debian.org> Tue, 29 Mar 2016 10:30:24 +0200
424
425+net-snmp (5.7.3+dfsg-1ubuntu6) artful; urgency=medium
426+
427+ * No-change rebuild for perl 5.26.0.
428+
429+ -- Matthias Klose <doko@ubuntu.com> Wed, 26 Jul 2017 20:11:36 +0000
430+
431+net-snmp (5.7.3+dfsg-1ubuntu5) zesty; urgency=medium
432+
433+ * Cherry-pick two patches from Debian's 5.7.3+dfsg-1.5:
434+ * Fix "FTBFS with Perl 5.24: error: conflicting types for 'U64'":
435+ add patch from upstream git which removes the U64 typedef from the
436+ Net-SNMP header files.
437+ Thanks to Niky Tyni for extracting the patch.
438+ (Closes: #825014)
439+ * Additionally add another patch from upstream git which fixes
440+ perl/*/Makefile.PL to fix build failures with Perl 5.24.
441+ Cf. https://sourceforge.net/p/net-snmp/bugs/2712/
442+
443+ -- Iain Lane <iain@orangesquash.org.uk> Tue, 25 Oct 2016 10:28:38 +0100
444+
445+net-snmp (5.7.3+dfsg-1ubuntu4) xenial; urgency=medium
446+
447+ * Rebuild against libmysqlclient20.
448+ * d/p/my_load_defaults: use my_load_defaults instead of the
449+ libmysqlclient-internal load_defaults (LP: #1565003). Thanks to Lars
450+ Tangvald.
451+
452+ -- Robie Basak <robie.basak@ubuntu.com> Tue, 05 Apr 2016 15:17:35 +0000
453+
454+net-snmp (5.7.3+dfsg-1ubuntu3) xenial; urgency=medium
455+
456+ * Rebuild for Perl 5.22.1.
457+
458+ -- Colin Watson <cjwatson@ubuntu.com> Fri, 18 Dec 2015 01:20:38 +0000
459+
460+net-snmp (5.7.3+dfsg-1ubuntu2) wily; urgency=medium
461+
462+ * debian/snmp.preinst:
463+ It turns out that the original motivation why killall was added is gone.
464+ So we can just remove the killall introduced by Ubuntu LP #573391
465+ (Closes: #781257, LP: #1245604)
466+
467+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Fri, 09 Oct 2015 13:18:25 +0200
468+
469+net-snmp (5.7.3+dfsg-1ubuntu1) wily; urgency=medium
470+
471+ * Resynchronise with Debian. Remaining changes:
472+ - Add apport hook.
473+ - Avoid installing links in rc[06].d.
474+ * Dropped patches included in new version:
475+ - debian/patches/00upstream-btrfs.patch
476+ - debian/patches/CVE-2012-6151.patch
477+ - debian/patches/CVE-2014-2284.patch
478+ - debian/patches/CVE-2014-2285.patch
479+ * SECURITY UPDATE: denial of service and possible code execution via
480+ incompletely parsed varBind variables
481+ - debian/patches/CVE-2015-5621.patch: don't return incorrectly parsed
482+ varbinds in snmplib/snmp_api.c.
483+ - CVE-2015-5621
484+
485+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 17 Aug 2015 12:58:43 -0400
486+
487 net-snmp (5.7.3+dfsg-1) unstable; urgency=medium
488
489 * Imported Upstream version 5.7.3+dfsg
490@@ -488,6 +920,56 @@ net-snmp (5.7.2.1~dfsg-1) experimental; urgency=medium
491
492 -- Hideki Yamane <henrich@debian.org> Sun, 30 Mar 2014 19:58:39 +0900
493
494+net-snmp (5.7.2~dfsg-8.1ubuntu5) utopic; urgency=medium
495+
496+ * Backport from 5.7.2.1~dfsg-6.1:
497+ - Fix "hardcodes /usr/lib/perl5":
498+ Make debian/libsnmp-perl.install executable and use
499+ $Config{vendorarch} to get the perl library directory. Patch from Niko
500+ Tyni.
501+ (Closes: #751918)
502+
503+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 20 Aug 2014 11:16:35 +0100
504+
505+net-snmp (5.7.2~dfsg-8.1ubuntu4) utopic; urgency=medium
506+
507+ * Rebuild for Perl 5.20.0.
508+
509+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 20 Aug 2014 00:21:26 +0100
510+
511+net-snmp (5.7.2~dfsg-8.1ubuntu3) trusty; urgency=medium
512+
513+ * SECURITY UPDATE: denial of service via AgentX subagent timeout
514+ - debian/patches/CVE-2012-6151.patch: track cancelled sessions in
515+ agent/mibgroup/agentx/{master.c,master_admin.c}, agent/snmp_agent.c,
516+ include/net-snmp/agent/snmp_agent.h.
517+ - CVE-2012-6151
518+ * SECURITY UPDATE: denial of service when ICMP-MIB is in use
519+ - debian/patches/CVE-2014-2284.patch: fix ICMP mib table handling in
520+ agent/mibgroup/mibII/icmp.c, agent/mibgroup/mibII/kernel_linux.*.
521+ - CVE-2014-2284
522+ * SECURITY UPDATE: denial of service in perl trap handler
523+ - debian/patches/CVE-2014-2285.patch: handle empty community string in
524+ perl/TrapReceiver/TrapReceiver.xs.
525+ - CVE-2014-2285
526+
527+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 08 Apr 2014 08:17:14 -0400
528+
529+net-snmp (5.7.2~dfsg-8.1ubuntu2) trusty; urgency=medium
530+
531+ * Add 00upstream-btrfs.patch: Add btrfs support to hrFSTable. Cherrypicked
532+ from upstream, by way of Nafallo Bjälevik. Thanks! (LP: #1289503)
533+
534+ -- Martin Pitt <martin.pitt@ubuntu.com> Wed, 12 Mar 2014 13:24:18 +0100
535+
536+net-snmp (5.7.2~dfsg-8.1ubuntu1) trusty; urgency=low
537+
538+ * Resynchronise with Debian. Remaining changes:
539+ - Add apport hook.
540+ - Avoid installing links in rc[06].d.
541+
542+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 29 Oct 2013 06:29:46 -0700
543+
544 net-snmp (5.7.2~dfsg-8.1) unstable; urgency=low
545
546 * Non-maintainer upload.
547@@ -497,6 +979,25 @@ net-snmp (5.7.2~dfsg-8.1) unstable; urgency=low
548
549 -- Laurent Bigonville <bigon@debian.org> Sat, 13 Jul 2013 17:13:09 +0200
550
551+net-snmp (5.7.2~dfsg-8ubuntu2) trusty; urgency=low
552+
553+ * Rebuild for Perl 5.18.
554+
555+ -- Colin Watson <cjwatson@ubuntu.com> Mon, 21 Oct 2013 12:30:05 +0100
556+
557+net-snmp (5.7.2~dfsg-8ubuntu1) saucy; urgency=low
558+
559+ * Merge from Debian unstable (LP: #1200516). Remaining changes:
560+ + Add apport hook (LP: #533603):
561+ - debian/source.apport: apport hook
562+ - debian/control: Build-depends on dh-apport.
563+ - debian/rules:
564+ + Add --with apport.
565+ + override_dh_apport to install hook on snmpd package only.
566+ * Call dh_installinit correctly to avoid installing links in rc[06].d
567+
568+ -- Yolanda Robla <yolanda.robla@canonical.com> Fri, 12 Jul 2013 09:47:12 +0200
569+
570 net-snmp (5.7.2~dfsg-8) unstable; urgency=low
571
572 * add libsnmp-perl.preinst to deal with empty directory by libsnmp15
573@@ -545,6 +1046,18 @@ net-snmp (5.7.2~dfsg-5) unstable; urgency=low
574
575 -- Hideki Yamane <henrich@debian.org> Sun, 19 May 2013 23:09:52 +0900
576
577+net-snmp (5.7.2~dfsg-4ubuntu1) saucy; urgency=low
578+
579+ * Merge from Debian unstable. Remaining changes:
580+ - debian/rules: Don't stop service in runlevels 0 and 6.
581+ - debian/snmpd.init: LSBify the init script.
582+ - debian/snmp.preinst, debian/snmp.prerm: Kill any/all processes owned
583+ by snmp user before install/uninstall.
584+ - Add apport hook.
585+ * debian/patches/ubuntu-fix-lp-587828.patch: Drop. Fixed upstream.
586+
587+ -- Andres Rodriguez <andreserl@ubuntu.com> Thu, 16 May 2013 21:01:27 -0400
588+
589 net-snmp (5.7.2~dfsg-4) unstable; urgency=low
590
591 * debian/snmpd.{init,default,postinst}
592@@ -725,6 +1238,20 @@ net-snmp (5.7.2~dfsg-1~0.1) experimental; urgency=low
593
594 -- Hideki Yamane <henrich@debian.org> Sun, 27 Jan 2013 11:57:29 +0900
595
596+net-snmp (5.4.3~dfsg-2.7ubuntu1) raring; urgency=low
597+
598+ * Merge from Debian unstable. Remaining changes:
599+ - debian/rules: Don't stop service in runlevels 0 and 6.
600+ - debian/snmpd.init: LSBify the init script.
601+ - debian/snmp.preinst, debian/snmp.prerm: Kill any/all processes owned
602+ by snmp user before install/uninstall.
603+ - Add apport hook.
604+ - debian/patches/ubuntu-fix-lp-587828.patch: Fix row creation for 64bit
605+ arches
606+ - debian/{control,rules}: Use dh_python2
607+
608+ -- Logan Rosen <logatronico@gmail.com> Tue, 04 Dec 2012 16:57:00 -0500
609+
610 net-snmp (5.4.3~dfsg-2.7) unstable; urgency=low
611
612 * Non-maintainer upload.
613@@ -741,6 +1268,35 @@ net-snmp (5.4.3~dfsg-2.6) unstable; urgency=low
614
615 -- David Prévot <taffit@debian.org> Sun, 18 Nov 2012 09:24:30 -0400
616
617+net-snmp (5.4.3~dfsg-2.5ubuntu1) quantal; urgency=low
618+
619+ * Merge from Debian unstable. Remaining changes:
620+ - debian/rules: Don't stop service in runlevels 0 and 6.
621+ - debian/snmpd.init: LSBify the init script.
622+ - debian/snmp.preinst, debian/snmp.prerm: Kill any/all processes owned
623+ by snmp user before install/uninstall.
624+ - Add apport hook.
625+ - debian/patches/ubuntu-fix-lp-587828.patch: Fix row creation for 64bit
626+ arches
627+ - debian/{control,rules}: Use dh_python2
628+ * Dropped changes:
629+ - debian/patches/50_use_bash.patch: Patch wasn't actually being
630+ applied, and upstream apparently fixed this in 5.4.2.
631+ - debian/patches/52_fix_snmpcmd_1_typo.patch: Patch wasn't actually
632+ being applied, and fix is included in 56_manpage.patch.
633+ - debian/snmpd.postinst: Source debconf before doing work: included in
634+ debian package now.
635+ - debian/patches/99-fix-ubuntu-div0.patch: wasn't applied.
636+ - debian/patches/CVE-2008-6123.*: wasn't applied.
637+ - debian/patches/CVE-2012-2141.patch: use debian's patch.
638+ - debian/README.Debian-source: this change is irrelevant since we
639+ use the debian tarball as-is.
640+ - debian/rules: removed misc irrelevant and undocumented changes.
641+ - debian/snmpd.postinst: no longer need to remove shutdown and reboot
642+ links since this is from Maverick-era.
643+
644+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 20 Jun 2012 09:45:11 -0400
645+
646 net-snmp (5.4.3~dfsg-2.5) unstable; urgency=medium
647
648 * Non-maintainer upload by the Security Team.
649@@ -756,6 +1312,34 @@ net-snmp (5.4.3~dfsg-2.5) unstable; urgency=medium
650
651 -- Luk Claes <luk@debian.org> Sun, 27 May 2012 17:22:01 +0200
652
653+net-snmp (5.4.3~dfsg-2.4ubuntu2) quantal; urgency=low
654+
655+ * SECURITY UPDATE: denial of service via SNMP GET with non-existent
656+ extension table entry
657+ - debian/patches/CVE-2012-2141.patch: validate line_idx in
658+ agent/mibgroup/agent/extend.c.
659+ - CVE-2012-2141
660+
661+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 22 May 2012 16:30:48 -0400
662+
663+net-snmp (5.4.3~dfsg-2.4ubuntu1) precise; urgency=low
664+
665+ * Merge from Debian testing. Remaining changes:
666+ - net-snmp-config: Use bash.
667+ - Removed multiuser option when calling update-rc.d.
668+ - debian/snmpd.init: LSBify the init script.
669+ - debian/patches/52_fix_snmpcmd_1_typo.patch: Adjust a typo in
670+ snmpcmd.1.
671+ - debian/snmpd.postinst: Source debconf before doing work.
672+ - debian/snmp.preinst, debian/snmp.prerm: Kill any/all processes owned
673+ by snmp user before install/uninstall.
674+ - Add apport hook.
675+ - debian/patches/ubuntu-fix-lp-587828.patch: Fix row creation for 64bit
676+ arches
677+ - debian/rules: Use dh_python2
678+
679+ -- Chuck Short <zulcss@ubuntu.com> Mon, 23 Jan 2012 09:44:25 -0500
680+
681 net-snmp (5.4.3~dfsg-2.4) unstable; urgency=low
682
683 * Non-maintainer upload.
684@@ -769,6 +1353,35 @@ net-snmp (5.4.3~dfsg-2.4) unstable; urgency=low
685
686 -- Christian Perrier <bubulle@debian.org> Mon, 19 Dec 2011 07:34:31 +0100
687
688+net-snmp (5.4.3~dfsg-2.3ubuntu3) precise; urgency=low
689+
690+ * Build using dh_python2.
691+
692+ -- Matthias Klose <doko@ubuntu.com> Wed, 14 Dec 2011 15:48:05 +0100
693+
694+net-snmp (5.4.3~dfsg-2.3ubuntu2) precise; urgency=low
695+
696+ * Rebuild for Perl 5.14.
697+
698+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 15 Nov 2011 20:49:15 +0000
699+
700+net-snmp (5.4.3~dfsg-2.3ubuntu1) precise; urgency=low
701+
702+ * Merge from debian unstable. Remaining changes:
703+ - net-snmp-config: Use bash.
704+ - Removed multiuser option when calling update-rc.d.
705+ - debian/snmpd.init: LSBify the init script.
706+ - debian/patches/52_fix_snmpcmd_1_typo.patch: Adjust a typo in
707+ snmpcmd.1.
708+ - debian/snmpd.postinst: Source debconf before doing work.
709+ - debian/snmp.preinst, debian/snmp.prerm: Kill any/all processes owned
710+ by snmp user before install/uninstall.
711+ - Add apport hook.
712+ - debian/patches/ubuntu-fix-lp-587828.patch: Fix row creation for 64bit
713+ arches.
714+
715+ -- Chuck Short <zulcss@ubuntu.com> Sat, 27 Aug 2011 18:10:55 +0000
716+
717 net-snmp (5.4.3~dfsg-2.3) unstable; urgency=low
718
719 * Non-maintainer upload.
720@@ -778,6 +1391,23 @@ net-snmp (5.4.3~dfsg-2.3) unstable; urgency=low
721
722 -- Stephen Gran <sgran@debian.org> Sat, 27 Aug 2011 09:10:09 +0000
723
724+net-snmp (5.4.3~dfsg-2.2ubuntu1) oneiric; urgency=low
725+
726+ * Resynchronise with Debian (LP: #780149). Remaining changes:
727+ - net-snmp-config: Use bash.
728+ - Removed multiuser option when calling update-rc.d.
729+ - debian/snmpd.init: LSBify the init script.
730+ - debian/patches/52_fix_snmpcmd_1_typo.patch: Adjust a typo in
731+ snmpcmd.1.
732+ - debian/snmpd.postinst: Source debconf before doing work.
733+ - debian/snmp.preinst, debian/snmp.prerm: Kill any/all processes owned
734+ by snmp user before install/uninstall.
735+ - Add apport hook.
736+ - debian/patches/ubuntu-fix-lp-587828.patch: Fix row creation for 64bit
737+ arches.
738+
739+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 10 May 2011 06:14:05 +0100
740+
741 net-snmp (5.4.3~dfsg-2.2) unstable; urgency=high
742
743 * Non-maintainer upload.
744@@ -802,6 +1432,35 @@ net-snmp (5.4.3~dfsg-2.1) unstable; urgency=high
745
746 -- Cyril Brulebois <kibi@debian.org> Sat, 07 May 2011 12:14:26 +0200
747
748+net-snmp (5.4.3~dfsg-2ubuntu2) oneiric; urgency=low
749+
750+ * Rebuild for Perl 5.12.
751+
752+ -- Colin Watson <cjwatson@ubuntu.com> Sat, 07 May 2011 23:29:06 +0100
753+
754+net-snmp (5.4.3~dfsg-2ubuntu1) natty; urgency=low
755+
756+ * Merge from debian unstable. Remaining changes:
757+ - Set Ubuntu maintainer address.
758+ - net-snmp-config: Use bash (LP: #104738)
759+ - Removed multiuser option when calling update-rc.d (LP: #254261)
760+ - debian/snmpd.init: LSBify the init script.
761+ - debian/patches/52_fix_snmpcmd_1_typo.patch: Adjust a typo in snmpcmd.1
762+ (LP: #250459)
763+ - debian/snmpd.postinst: source debconf before doing work. (LP: #589056)
764+ - debian/snmp.preinst, debian/snmp.prerm: kill any/all processes owned by
765+ snmp user before install/uninstall (LP: #573391)
766+ - Add apport hook (LP: #533603):
767+ - debian/control: Build-depends on dh-apport.
768+ - debian/rules:
769+ + Add --with apport.
770+ + override_dh_apport to install hook on snmpd package only.
771+ - debian/patches/ubntu-fix-lp-58728.patch: Fix row creation for 64bit
772+ arches. (LP: #587828)
773+ - Fix build failures with ld --no-add-needed.
774+
775+ -- Chuck Short <zulcss@ubuntu.com> Thu, 06 Jan 2011 00:35:28 +0000
776+
777 net-snmp (5.4.3~dfsg-2) unstable; urgency=high
778
779 * Add libperl-dev to libsnmp-dev dependencies (Closes: #608794)
780@@ -811,6 +1470,55 @@ net-snmp (5.4.3~dfsg-2) unstable; urgency=high
781
782 -- Jochen Friedrich <jochen@scram.de> Wed, 05 Jan 2011 13:03:32 +0100
783
784+net-snmp (5.4.3~dfsg-1ubuntu5) natty; urgency=low
785+
786+ * Fix build failure with ld --no-add-needed.
787+
788+ -- Matthias Klose <doko@ubuntu.com> Fri, 03 Dec 2010 23:45:33 +0000
789+
790+net-snmp (5.4.3~dfsg-1ubuntu4) natty; urgency=low
791+
792+ * Rebuild to add support for python 2.7.
793+
794+ -- Matthias Klose <doko@ubuntu.com> Fri, 03 Dec 2010 00:05:05 +0000
795+
796+net-snmp (5.4.3~dfsg-1ubuntu3) maverick; urgency=low
797+
798+ * debian/patches/ubuntu-fix-lp-587828.patch: Fix row creation for 64bit arches.
799+ (LP: #587828)
800+
801+ -- Chuck Short <zulcss@ubuntu.com> Wed, 25 Aug 2010 10:18:45 -0400
802+
803+net-snmp (5.4.3~dfsg-1ubuntu2) maverick; urgency=low
804+
805+ * No-change rebuild against current debhelper to drop sizable upstream
806+ changelog.
807+
808+ -- Martin Pitt <martin.pitt@ubuntu.com> Mon, 02 Aug 2010 08:34:07 +0200
809+
810+net-snmp (5.4.3~dfsg-1ubuntu1) maverick; urgency=low
811+
812+ * Merge from debian unstable. Remaining changes:
813+ - Set Ubuntu maintainer address.
814+ - net-snmp-config: Use bash. (LP: #104738)
815+ - Removed multiuser option when calling update-rc.d. (LP: #254261)
816+ - debian/snmpd.init: LSBify the init script.
817+ - debian/patches/52_fix_snmpcmd_1_typo.patch: Adjust a typo in snmpcmd.1
818+ (LP: #250459)
819+ - debian/snmpd.postinst: source debconf before doing work, LP: #589056
820+ - debian/snmp.preinst, debian/snmp.prerm: kill any/all processes owned by
821+ snmp user before install/uninstall, LP: #573391
822+ - Add apport hook (LP: #533603):
823+ - debian/{snmp,snmpd}.apport: Added.
824+ - debian/control: Build-depends on dh-apport.
825+ - debian/rules:
826+ + Add --with apport.
827+ + override_dh_apport to install hook on snmpd package only.
828+ * Dropped patches:
829+ - debian/patches/99-fix-ubuntu-div0.patch: Fix dvision by zero..
830+
831+ -- Chuck Short <zulcss@ubuntu.com> Mon, 28 Jun 2010 14:59:36 -0400
832+
833 net-snmp (5.4.3~dfsg-1) unstable; urgency=low
834
835 * New upstream version (Closes: #559109)
836@@ -868,6 +1576,73 @@ net-snmp (5.4.2.1~dfsg-4) unstable; urgency=low
837
838 -- Jochen Friedrich <jochen@scram.de> Tue, 01 Dec 2009 18:40:38 +0100
839
840+net-snmp (5.4.2.1~dfsg0ubuntu1-0ubuntu4) maverick; urgency=low
841+
842+ * debian/snmpd.postinst: source debconf before doing work, LP: #589056
843+ * debian/snmp.preinst, debian/snmp.prerm: kill any/all processes owned by
844+ snmp user before install/uninstall, LP: #573391
845+
846+ -- Dustin Kirkland <kirkland@ubuntu.com> Tue, 22 Jun 2010 14:04:48 -0500
847+
848+net-snmp (5.4.2.1~dfsg0ubuntu1-0ubuntu3) maverick; urgency=low
849+
850+ * SECURITY UPDATE: access restriction bypass
851+ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=516801
852+ - http://net-snmp.svn.sourceforge.net/viewvc/net-snmp?view=rev&revision=17367
853+ - CVE-2008-6123
854+
855+ -- Corey Wright <undefined@pobox.com> Mon, 31 May 2010 00:00:29 -0500
856+
857+net-snmp (5.4.2.1~dfsg0ubuntu1-0ubuntu2) lucid; urgency=low
858+
859+ * Add apport hook (LP: #533603):
860+ - debian/{snmp,snmpd}.apport: Added.
861+ - debian/control: Build-depends on dh-apport.
862+ - debian/rules:
863+ + Add --with apport.
864+ + override_dh_apport to install hook on snmpd package only.
865+
866+ -- Andres Rodriguez <andreserl@ubuntu.com> Sun, 28 Mar 2010 00:25:13 -0400
867+
868+net-snmp (5.4.2.1~dfsg0ubuntu1-0ubuntu1) lucid; urgency=low
869+
870+ * Repackage upstream tarball to re-add the MIBs: even if they are not
871+ modifiable (which is questionable), this is not a reason to keep them
872+ out of Ubuntu main.
873+ * Revert the changes to prompt about MIB downloads.
874+ * Call dh_installinit correctly to avoid installing links in rc[06].d
875+ * Temporarily re-add postinst snippet to clean up rc[06].d links left by
876+ the previous upload.
877+ * Fix egg name listed in debian/rules, apparently needed to fix another
878+ build failure.
879+
880+ -- Steve Langasek <steve.langasek@ubuntu.com> Sat, 12 Dec 2009 00:05:34 -0800
881+
882+net-snmp (5.4.2.1~dfsg-3ubuntu2) lucid; urgency=low
883+
884+ * Fix FTBFS.
885+
886+ -- Chuck Short <zulcss@ubuntu.com> Thu, 26 Nov 2009 13:20:26 -0500
887+
888+net-snmp (5.4.2.1~dfsg-3ubuntu1) lucid; urgency=low
889+
890+ * Merge from debian testing. Remaining changes:
891+ - Set Ubuntu maintainer address.
892+ - net-snmp-config: Use bash. (LP: #104738)
893+ - Removed multiuser option when calling update-rc.d. (LP: #254261)
894+ - debian/snmpd.init: LSBify the init script.
895+ - debian/patches/52_fix_snmpcmd_1_typo.patch: Adjust a typo in snmpcmd.1
896+ (LP: #250459)
897+ - debian/patches/99-fix-ubuntu-div0.patch: Fix dvision by zero.
898+ (LP: #426813).
899+ * Dropped patches:
900+ - debian/patches/101-fix-ipalias.patch: Applied upstream.
901+ - debian/patches/99-fix-net-snmp-syslog.patch: Applied upstream.
902+ - debian/patches/99-fix-perl-counter-in-subagent.patch: Applied upstream.
903+ - ebian/patches/103-fix-ubuntu-lmsensors.patch: No longer needed.
904+
905+ -- Chuck Short <zulcss@ubuntu.com> Thu, 26 Nov 2009 01:27:00 +0000
906+
907 net-snmp (5.4.2.1~dfsg-3) unstable; urgency=low
908
909 * Fix typo in NEWS.
910@@ -932,6 +1707,67 @@ net-snmp (5.4.2.1~dfsg-1) unstable; urgency=low
911
912 -- Jochen Friedrich <jochen@scram.de> Mon, 09 Nov 2009 18:29:10 +0100
913
914+net-snmp (5.4.1~dfsg-12ubuntu7) karmic; urgency=low
915+
916+ * debian/patches/99-fix-ubuntu-div0.patch: Fix division by zero.
917+ (LP: #426813).
918+
919+ -- Chuck Short <zulcss@ubuntu.com> Mon, 28 Sep 2009 14:02:16 -0400
920+
921+net-snmp (5.4.1~dfsg-12ubuntu6) karmic; urgency=low
922+
923+ * debian/patches/101-fix-ipalias.patch : Fix flooding syslog -
924+ Syslog fills with hundreds of these errors if you have a network
925+ interface, e.g. eth2, with no IP address, but you have an alias,
926+ e.g. eth2:1, that does have an IP address (and netmask).
927+ (LP: #270713)
928+ * debian/patches/103-fix-ubuntu-lmsensors.patch: Point to the right
929+ place for /etc/sensors3.conf. (LP: #192745)
930+
931+ -- Chuck Short <zulcss@ubuntu.com> Mon, 14 Sep 2009 12:19:41 -0400
932+
933+net-snmp (5.4.1~dfsg-12ubuntu5) karmic; urgency=low
934+
935+ * debian/patches/99-fix-perl-counter-in-subagent.patch: Fix for Counter64 in
936+ perl subagent. (LP: #406171)
937+
938+ -- Chuck Short <zulcss@ubuntu.com> Fri, 04 Sep 2009 12:10:01 -0500
939+
940+net-snmp (5.4.1~dfsg-12ubuntu4) karmic; urgency=low
941+
942+ * debian/patches/99-fix-net-snmp-syslog.patch: Fixes "invalid syslog facility".
943+ (LP: #369577)
944+
945+ -- Chuck Short <zulcss@ubuntu.com> Wed, 24 Jun 2009 14:44:51 -0400
946+
947+net-snmp (5.4.1~dfsg-12ubuntu3) jaunty; urgency=low
948+
949+ * No-change rebuild to fix lpia shared library dependencies.
950+
951+ -- Colin Watson <cjwatson@ubuntu.com> Thu, 19 Mar 2009 13:00:18 +0000
952+
953+net-snmp (5.4.1~dfsg-12ubuntu2) jaunty; urgency=low
954+
955+ * Python 2.6 transition, debian/rules (LP: #338556):
956+ - Include /usr/share/python/python.mk.
957+ - Use py_sitename and py_setup_install_args macros to install all python
958+ stuffs in the right places (/usr/lib/python*/*-packages/) and rebuild.
959+
960+ -- Alessio Treglia <quadrispro@ubuntu.com> Thu, 12 Mar 2009 00:38:57 +0100
961+
962+net-snmp (5.4.1~dfsg-12ubuntu1) jaunty; urgency=low
963+
964+ * Merge from debian unstable, remaining changes:
965+ - Set Ubuntu maintainer address.
966+ - net-snmp-config: Use bash. LP: #104738)
967+ * Removed multiuser option when calling update-rc.d (LP: #254261).
968+ * debian/patches/52_fix_snmpcmd_1_typo.patch: Adjust a typo in snmpcd.1
969+ (LP: #250459)
970+ * debian/snmp.init: LSBify the snmpd.init script. Add status notification,
971+ based on initial patch by Gary Coady. (LP: #43575)
972+
973+ -- Chuck Short <zulcss@ubuntu.com> Wed, 17 Dec 2008 00:58:14 +0000
974+
975 net-snmp (5.4.1~dfsg-12) unstable; urgency=high
976
977 * Urgency high because of RC bug fix.
978@@ -942,6 +1778,21 @@ net-snmp (5.4.1~dfsg-12) unstable; urgency=high
979
980 -- Jochen Friedrich <jochen@scram.de> Tue, 16 Dec 2008 15:29:28 +0100
981
982+net-snmp (5.4.1~dfsg-11ubuntu1) jaunty; urgency=low
983+
984+ * Merge from debian unstable, remaining changes:
985+ - Set Ubuntu maintainer address.
986+ - net-snmp-config. Use bash (LP: #104738)
987+ * Removed multiuser option when calling update-rc.d (LP: #254261).
988+ * debian/patches/52_fix_snmpcmd_1_typo.patch: Adjust a typo in snmpcd.1
989+ (LP: #250459)
990+ * debian/snmp.init: LSBify the snmpd.init script. Add status notification,
991+ based on inital patch by Gary Coady. (LP: #43575)
992+ * Dropped debian/patches/51_CVE-2008-0960.patch: Use debian's instead.
993+ * Dropped debian/patches/54_fix_registration_error.patch: Use debian's instead.
994+
995+ -- Chuck Short <zulcss@ubuntu.com> Wed, 05 Nov 2008 02:59:05 +0000
996+
997 net-snmp (5.4.1~dfsg-11) unstable; urgency=high
998
999 * This update fixes the following security issue:
1000@@ -989,6 +1840,69 @@ net-snmp (5.4.1~dfsg-8) unstable; urgency=low
1001
1002 -- Jochen Friedrich <jochen@scram.de> Tue, 03 Jun 2008 13:06:57 +0200
1003
1004+net-snmp (5.4.1~dfsg-7.1ubuntu6) intrepid; urgency=low
1005+
1006+ * debian/snmpd.init: Fix snmpd script error. (LP: #270961)
1007+
1008+ -- Chuck Short <zulcss@ubuntu.com> Mon, 22 Sep 2008 14:18:08 -0400
1009+
1010+net-snmp (5.4.1~dfsg-7.1ubuntu5) intrepid; urgency=low
1011+
1012+ * debian/snmpd.init: LSBify the snmpd.init script. And add status
1013+ notification, based on inital patch by Gary Coady. (LP: #43575)
1014+ * debian/patches/54_fix_registration_error.patch: Surpresses annoying
1015+ registrations in startup. (LP: #200614)
1016+
1017+ -- Chuck Short <zulcss@ubuntu.com> Fri, 12 Sep 2008 13:21:40 -0400
1018+
1019+net-snmp (5.4.1~dfsg-7.1ubuntu4) intrepid; urgency=low
1020+
1021+ * Fix lsb headers in init script: stop in single user mode
1022+ (LP: #254261).
1023+
1024+ -- Mathias Gug <mathiaz@ubuntu.com> Thu, 21 Aug 2008 23:07:59 -0400
1025+
1026+net-snmp (5.4.1~dfsg-7.1ubuntu3) intrepid; urgency=low
1027+
1028+ [ Salvatore Palma ]
1029+ * Add 52_fix_snmpcmd_1_typo.patch patch to adjust a typo in
1030+ snmpcmd.1 (LP: #250459).
1031+
1032+ [ Mathias Gug ]
1033+ * Remove multiuser option when calling update-rc.d. (LP: #254261).
1034+
1035+ -- Mathias Gug <mathiaz@ubuntu.com> Tue, 12 Aug 2008 23:03:05 -0400
1036+
1037+net-snmp (5.4.1~dfsg-7.1ubuntu2) intrepid; urgency=low
1038+
1039+ * SECURITY UPDATE: HMAC authentication spoofing.
1040+ * debian/patches/51_CVE-2008-0960.patch: fixes HMAC authentication spoofing.
1041+ * debian/patches/52_use_right_config_file.patch: Use the right configuration
1042+ file for lmsensors. (LP: #192745)
1043+
1044+ -- Chuck Short <zulcss@ubuntu.com> Mon, 16 Jun 2008 15:47:18 +0000
1045+
1046+net-snmp (5.4.1~dfsg-7.1ubuntu1) intrepid; urgency=low
1047+
1048+ * Merge from debian unstable, remaining changes:
1049+ - Set Ubuntu maintainer address.
1050+ - net-snmp-config: Use bash. LP: #104738.
1051+ - Add missing Replaces: libsnmp9-dev (<< 5.4~dfsg) to
1052+ libsnmp-base to avoid file confict on dapper->hardy upgrades.
1053+ (LP: #203610)
1054+
1055+ -- Chuck Short <zulcss@ubuntu.com> Tue, 27 May 2008 13:06:56 -0500
1056+
1057+net-snmp (5.4.1~dfsg-7.1) unstable; urgency=high
1058+
1059+ * Non-maintainer upload by the Security Team.
1060+ * Fix buffer overflow in the python and perl module (__snprint_value
1061+ function)that can be exploited via large OCTETSTRING in an
1062+ attribute value pair (AVP) leading to arbitrary code
1063+ execution (CVE-2008-2292; Closes: #482333).
1064+
1065+ -- Nico Golde <nion@debian.org> Sat, 24 May 2008 13:12:16 +0200
1066+
1067 net-snmp (5.4.1~dfsg-7) unstable; urgency=low
1068
1069 * Add some more Conflicts: and Replaces: magic to allow moving
1070@@ -1024,6 +1938,41 @@ net-snmp (5.4.1~dfsg-5) unstable; urgency=low
1071
1072 -- Jochen Friedrich <jochen@scram.de> Fri, 28 Dec 2007 12:43:21 +0100
1073
1074+net-snmp (5.4.1~dfsg-4ubuntu4) hardy; urgency=low
1075+
1076+ * Add missing Replaces: libsnmp9-dev (<< 5.4~dfsg) to
1077+ libsnmp-base to avoid file confict on dapper->hardy upgrades
1078+ (LP: #203610)
1079+
1080+ -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 18 Mar 2008 17:47:13 +0100
1081+
1082+net-snmp (5.4.1~dfsg-4ubuntu3) hardy; urgency=low
1083+
1084+ * Rebuild with recent python-central.
1085+ * Set Ubuntu maintainer address.
1086+
1087+ -- Matthias Klose <doko@ubuntu.com> Mon, 10 Mar 2008 12:46:06 +0000
1088+
1089+net-snmp (5.4.1~dfsg-4ubuntu2) hardy; urgency=low
1090+
1091+ * net-snmp-config: Use bash. LP: #104738.
1092+
1093+ -- Matthias Klose <doko@ubuntu.com> Wed, 06 Feb 2008 14:45:12 +0000
1094+
1095+net-snmp (5.4.1~dfsg-4ubuntu1) hardy; urgency=low
1096+
1097+ * Merge from debian unstable.
1098+ * Remaining Ubuntu changes:
1099+ - Remove stop links from rc0 and rc6
1100+ - Munge Maintainer field as per spec.
1101+ * Ubuntu changes dropped:
1102+ - Symlink common files between the packages, CDBS ought to handle that
1103+ for us automatically.
1104+ * The latest Debian changes has dropped history from the changelog. Slot in
1105+ the Ubuntu changes as best I can.
1106+
1107+ -- Steve Kowalik <stevenk@ubuntu.com> Sat, 08 Dec 2007 14:59:50 +1100
1108+
1109 net-snmp (5.4.1~dfsg-4) unstable; urgency=low
1110
1111 * Do it right this time.
1112@@ -1111,6 +2060,30 @@ net-snmp (5.4~dfsg-1) experimental; urgency=low
1113
1114 -- Jochen Friedrich <jochen@scram.de> Fri, 13 Apr 2007 16:16:02 +0200
1115
1116+net-snmp (5.3.1-6ubuntu2) gutsy; urgency=low
1117+
1118+ * Do not install the upstream changelog in libsnmp10 and libsnmp-base.
1119+ * Symlink files common in libsnmp10 and libsnmp-base.
1120+
1121+ -- Matthias Klose <doko@ubuntu.com> Fri, 05 Oct 2007 14:55:58 +0200
1122+
1123+net-snmp (5.3.1-6ubuntu1) gutsy; urgency=low
1124+
1125+ * Merge from Debian unstable.
1126+ * Remaining Ubuntu changes:
1127+ - Remove stop links from rc0 and rc6
1128+ - Munge Maintainer field as per spec.
1129+
1130+ -- Steve Kowalik <stevenk@ubuntu.com> Wed, 23 May 2007 08:58:46 +1000
1131+
1132+net-snmp (5.3.1-5ubuntu1) gutsy; urgency=low
1133+
1134+ * Merge from Debian unstable.
1135+ * Remaining Ubuntu changes:
1136+ - Remove stop links from rc0 and rc6
1137+ * Munge Maintainer field as per spec.
1138+
1139+ -- Steve Kowalik <stevenk@ubuntu.com> Thu, 10 May 2007 22:20:23 +1000
1140
1141 net-snmp (5.3.1-3) unstable; urgency=low
1142
1143@@ -1167,6 +2140,19 @@ net-snmp (5.3.1-1) experimental; urgency=low
1144
1145 -- Jochen Friedrich <jochen@scram.de> Wed, 26 Jul 2006 12:08:46 +0200
1146
1147+net-snmp (5.2.3-4ubuntu1) feisty; urgency=low
1148+
1149+ * Merge from debian unstable, remaining changes:
1150+ - remove stop links from rc0 and rc6
1151+
1152+ -- Scott James Remnant <scott@ubuntu.com> Tue, 28 Nov 2006 12:29:34 +0000
1153+
1154+net-snmp (5.2.2-5ubuntu1) edgy; urgency=low
1155+
1156+ * Remove stop script symlinks from rc0 and rc6.
1157+
1158+ -- Scott James Remnant <scott@ubuntu.com> Fri, 15 Sep 2006 17:32:44 +0100
1159+
1160 net-snmp (5.2.2-4) unstable; urgency=low
1161
1162 * Add French translation. Thanks to Thomas Huriaux
1163diff --git a/debian/control b/debian/control
1164index 4dbbd59..b746bbc 100644
1165--- a/debian/control
1166+++ b/debian/control
1167@@ -1,7 +1,8 @@
1168 Source: net-snmp
1169 Section: net
1170 Priority: optional
1171-Maintainer: Debian SNMP Team <team+snmp@tracker.debian.org>
1172+Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
1173+XSBC-Original-Maintainer: Debian SNMP Team <team+snmp@tracker.debian.org>
1174 Uploaders: Craig Small <csmall@debian.org>,
1175 Thomas Anders <tanders@users.sourceforge.net>,
1176 Noah Meyerhans <noahm@debian.org>
1177@@ -12,8 +13,8 @@ Build-Depends: debhelper-compat (= 12),
1178 pkg-config,
1179 libbsd-dev [kfreebsd-i386 kfreebsd-amd64],
1180 libkvm-dev [kfreebsd-i386 kfreebsd-amd64],
1181- libsensors-dev [!hurd-i386 !kfreebsd-i386 !kfreebsd-amd64],
1182- default-libmysqlclient-dev, libpci-dev
1183+ libsensors4-dev [!hurd-i386 !kfreebsd-i386 !kfreebsd-amd64],
1184+ default-libmysqlclient-dev, libpci-dev, dh-apport
1185 Build-Conflicts: libsnmp-dev
1186 Standards-Version: 4.6.0
1187 Vcs-Git: https://salsa.debian.org/debian/net-snmp.git
1188diff --git a/debian/patches/lp1945960-Fix-the-build-against-OpenSSL-3.0.patch b/debian/patches/lp1945960-Fix-the-build-against-OpenSSL-3.0.patch
1189new file mode 100644
1190index 0000000..4afd89b
1191--- /dev/null
1192+++ b/debian/patches/lp1945960-Fix-the-build-against-OpenSSL-3.0.patch
1193@@ -0,0 +1,33 @@
1194+From 19e75743173cb8d49d49fd685b8e0249e83cc820 Mon Sep 17 00:00:00 2001
1195+From: Bart Van Assche <bvanassche@acm.org>
1196+Date: Wed, 8 Sep 2021 20:39:42 -0700
1197+Subject: [PATCH] libsnmp: Fix the build against OpenSSL 3.0
1198+Origin: https://github.com/net-snmp/net-snmp/commit/19e75743173cb8d49d49fd685b8e0249e83cc820
1199+
1200+Fixes: https://github.com/net-snmp/net-snmp/issues/343
1201+
1202+Bug: https://github.com/net-snmp/net-snmp/issues/343
1203+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1945960
1204+---
1205+ snmplib/snmp_openssl.c | 5 +++++
1206+ 1 file changed, 5 insertions(+)
1207+
1208+diff --git a/snmplib/snmp_openssl.c b/snmplib/snmp_openssl.c
1209+index c092a007a..eb4856c57 100644
1210+--- a/snmplib/snmp_openssl.c
1211++++ b/snmplib/snmp_openssl.c
1212+@@ -899,6 +899,11 @@ netsnmp_openssl_cert_issued_by(X509 *issuer, X509 *cert)
1213+
1214+
1215+ #ifndef NETSNMP_FEATURE_REMOVE_OPENSSL_ERR_LOG
1216++#ifndef ERR_GET_FUNC
1217++/* removed in OpenSSL 3.0 */
1218++#define ERR_GET_FUNC(e) -1
1219++#endif
1220++
1221+ void
1222+ netsnmp_openssl_err_log(const char *prefix)
1223+ {
1224+--
1225+2.32.0
1226+
1227diff --git a/debian/patches/lp1945960-configure-static-linking-Fix-SSL-checks.patch b/debian/patches/lp1945960-configure-static-linking-Fix-SSL-checks.patch
1228new file mode 100644
1229index 0000000..3002611
1230--- /dev/null
1231+++ b/debian/patches/lp1945960-configure-static-linking-Fix-SSL-checks.patch
1232@@ -0,0 +1,66 @@
1233+From bd59be8e4e339870a1400f6866a7b73ca11f6460 Mon Sep 17 00:00:00 2001
1234+From: Giulio Benetti <giulio.benetti@micronovasrl.com>
1235+Date: Wed, 12 Sep 2018 20:16:39 +0200
1236+Subject: [PATCH] configure, static linking: Fix SSL checks
1237+Origin: https://github.com/net-snmp/net-snmp/commit/bd59be8e4e339870a1400f6866a7b73ca11f6460
1238+
1239+During checking of DTLS_method, the stub program is linked only with -ssl
1240+libssl.a lacks some function from -lcrypto:
1241+RAND_*()
1242+ERR_*()
1243+BUF_MEM_*()
1244+etc.
1245+and -lz:
1246+- inflate()
1247+- deflate()
1248+
1249+Append -lcrypto and -lz to LIBS variable when checking DTLS_method.
1250+
1251+See also https://sourceforge.net/p/net-snmp/patches/1374/.
1252+
1253+Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com>
1254+[bvanassche: Edited subject / rewrote this patch]
1255+
1256+schopin: Dropped the configure part of the patch as Debian/Ubuntu build
1257+as it didn't apply cleanly and the packaging uses autoreconf anyway.
1258+
1259+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1945960
1260+---
1261+ configure | 52 ++++++++++++++++++++++++++++++++++---
1262+ configure.d/config_os_libs2 | 14 +++++++---
1263+ 2 files changed, 58 insertions(+), 8 deletions(-)
1264+
1265+--- a/configure.d/config_os_libs2
1266++++ b/configure.d/config_os_libs2
1267+@@ -302,13 +302,19 @@
1268+ LIBS="$netsnmp_save_LIBS"
1269+
1270+ if test x$CRYPTO = x; then
1271+- AC_CHECK_LIB([crypto], [EVP_md5], [CRYPTO="crypto"])
1272+- fi
1273++ AC_CHECK_LIB([crypto], [EVP_md5],
1274++ [CRYPTO="crypto"; LIBCRYPTO="-lcrypto"], [
1275++ AC_CHECK_LIB([crypto], [EVP_md5],
1276++ [CRYPTO="crypto"; LIBCRYPTO="-lcrypto -lz"], [],
1277++ [-lz])
1278++ ])
1279++ else
1280++ LIBCRYPTO="-l${CRYPTO}"
1281++ fi
1282+
1283+ if test x$CRYPTO != x; then
1284+ AC_DEFINE(HAVE_LIBCRYPTO, 1,
1285+ [Define to 1 if you have the OpenSSL library (-lcrypto or -leay32).])
1286+- LIBCRYPTO="-l${CRYPTO}"
1287+ netsnmp_save_LIBS="$LIBS"
1288+ LIBS="$LIBCRYPTO"
1289+ AC_CHECK_FUNCS([AES_cfb128_encrypt]dnl
1290+@@ -338,7 +344,7 @@
1291+ LIBS="$netsnmp_save_LIBS"
1292+ fi
1293+ netsnmp_save_LIBS="$LIBS"
1294+- LIBS="-lssl"
1295++ LIBS="-lssl $LIBCRYPTO"
1296+ AC_CHECK_FUNCS([TLS_method TLSv1_method DTLS_method DTLSv1_method]dnl
1297+ [SSL_library_init SSL_load_error_strings]dnl
1298+ [ERR_get_error_all])
1299diff --git a/debian/patches/series b/debian/patches/series
1300index 1898fb2..ebf2173 100644
1301--- a/debian/patches/series
1302+++ b/debian/patches/series
1303@@ -37,3 +37,5 @@ Link-libnetsnmptrapd-against-MYSQL_LIBS.patch
1304 perl_makefile_man3pods
1305 ci_libmariadb-dev
1306 mib2c_perl_error
1307+lp1945960-configure-static-linking-Fix-SSL-checks.patch
1308+lp1945960-Fix-the-build-against-OpenSSL-3.0.patch
1309diff --git a/debian/rules b/debian/rules
1310index c04ba0e..d182038 100755
1311--- a/debian/rules
1312+++ b/debian/rules
1313@@ -28,7 +28,7 @@ MIB_MODULES += host
1314 endif
1315
1316 %:
1317- dh $@
1318+ dh $@ --with apport
1319
1320 # The net-snmp Makefiles cannot handle parallel builds
1321 override_dh_auto_build:
1322@@ -89,6 +89,10 @@ override_dh_fixperms-arch:
1323 chmod -x debian/libsnmp-dev/etc/snmp/*.conf
1324 chmod 600 debian/snmpd/etc/snmp/snmp*d.conf
1325
1326+.PHONY: override_dh_apport
1327+override_dh_apport:
1328+ dh_apport -psnmpd
1329+
1330 override_dh_auto_test:
1331 # prevent test since it fails with network configuration under pbuilder/etc.
1332 true
1333diff --git a/debian/source.apport b/debian/source.apport
1334new file mode 100644
1335index 0000000..867fe9e
1336--- /dev/null
1337+++ b/debian/source.apport
1338@@ -0,0 +1,36 @@
1339+#!/usr/bin/python
1340+
1341+'''apport hook for net-snmp
1342+
1343+(c) 2010 Andres Rodriguez
1344+Author: Andres Rodriguez <andreserl@ubuntu.com>
1345+
1346+This program is free software; you can redistribute it and/or modify it
1347+under the terms of the GNU General Public License as published by the
1348+Free Software Foundation; either version 2 of the License, or (at your
1349+option) any later version. See http://www.gnu.org/copyleft/gpl.html for
1350+the full text of the license.
1351+'''
1352+
1353+from apport.hookutils import *
1354+import re
1355+
1356+def add_info(report, ui):
1357+ response = ui.yesno("The contents of your /etc/snmp/snmpd.conf and "
1358+ "your /etc/snmp/snmptrapd.conf files may help "
1359+ "developers diagnose your bug more quickly. "
1360+ "However, it may contain sensitive information. "
1361+ "Do you want to include it in your bug report?")
1362+
1363+ if response == None: # user cancelled
1364+ raise StopIteration
1365+
1366+ elif response == True:
1367+ attach_conffiles(report, 'snmpd')
1368+
1369+ # get version
1370+ report['SNMPVersion'] = root_command_output(['/usr/sbin/snmpd', '-v'])
1371+
1372+ # get syslog stuff
1373+ report['SyslogSnmpd'] = recent_syslog(re.compile('snmpd\['))
1374+ report['SyslogSnmptrapd'] = recent_syslog(re.compile('snmptrapd\['))

Subscribers

People subscribed via source and target branches