baserev update by copy to link target

• Files Changed
• Browse Source

- net-snmp-5.9.4-systemd-no-utmp.patch: prefer systemd-logind over
  utmp to count number of logged in users, utmp is not reliable for
  this and has a Y2038 problem (jsc#PED-3144)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Changes file clean up.

Fixing the renaming of several patch files.

• Files Changed
• Browse Source

  rename:
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
  delete:
  * net-snmp-5.9.1-velocity-mib.patch
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
  add:
  * net-snmp-5.9.4-add-netgroups-functionality.patch
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  rename:
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch

• Files Changed
• Browse Source

- Update to net-snmp-5.9.4 (bsc#1214364).
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).
- Use new MFD rewrites of mib modules, where available.
- Disable legacy DES encryption and MD5 authentication protocols.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

boo#1203096

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 5.9.3:
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.

• Files Changed
• Browse Source

- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Rename libsnmp40 subpackage to libsnmp39: the libraries are all
  having soversion 39.

Fixes rpmlint errors:
[  460s] libsnmp40.x86_64: E: shlib-policy-name-error (Badness: 10000) SONAME: libnetsnmp.so.39 (/usr/lib64/libnetsnmp.so.39.2.0), expected package suffix: 39
[  460s] libsnmp40.x86_64: E: shlib-policy-name-error (Badness: 10000) SONAME: libnetsnmpagent.so.39 (/usr/lib64/libnetsnmpagent.so.39.2.0), expected package suffix: 39
[  460s] libsnmp40.x86_64: E: shlib-policy-name-error (Badness: 10000) SONAME: libnetsnmphelpers.so.39 (/usr/lib64/libnetsnmphelpers.so.39.2.0), expected package suffix: 39
[  460s] libsnmp40.x86_64: E: shlib-policy-name-error (Badness: 10000) SONAME: libnetsnmpmibs.so.39 (/usr/lib64/libnetsnmpmibs.so.39.2.0), expected package suffix: 39
[  460s] libsnmp40.x86_64: E: shlib-policy-name-error (Badness: 10000) SONAME: libnetsnmptrapd.so.39 (/usr/lib64/libnetsnmptrapd.so.39.2.0), expected package suffix: 39
[  460s] libsnmp40.x86_64: E: shlib-policy-name-error (Badness: 10000) SONAME: libsnmp.so.39 (/usr/lib64/libsnmp.so.39.2.0), expected package suffix: 39

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 5.9.2 (bsc#1201103):
  - security:
    - These two CVEs can be exploited by a user with read-only credentials:
      - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
        NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
      - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
        can cause a NULL pointer dereference.
    - These CVEs can be exploited by a user with read-write credentials:
      - CVE-2022-24806 Improper Input Validation when SETing malformed
        OIDs in master agent and subagent simultaneously
      - CVE-2022-24807 A malformed OID in a SET request to
        SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
        out-of-bounds memory access.
      - CVE-2022-24808 A malformed OID in a SET request to
        NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
      - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
        can cause a NULL pointer dereference.
- Refactor two patches to work with version number 5.9.2:
  delete:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  add:
  * net-snmp-5.9.2-pie.patch
  * net-snmp-5.9.2-fix-create-v3-user-outfile.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source