* [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
@ 2022-10-03 6:27 Narpat Mali
2022-10-03 6:59 ` [oe] " Khem Raj
0 siblings, 1 reply; 6+ messages in thread
From: Narpat Mali @ 2022-10-03 6:27 UTC (permalink / raw)
To: openembedded-devel
Cc: narpat.mali, archana.polampalli, yogita.urade, hari.gpillai
Issue: LIN1022-1131, LIN1022-1132, LIN1022-1133, LIN1022-1134, LIN1022-1135
Issue: LIN1022-1136
Upgrade summary:
----------------
- drop 0002-configure-fix-a-cc-check-issue.patch, as it was replaced with
upstream commit https://github.com/net-snmp/net-snmp/commit/dbb49acfa2af
- drop 0001-snmpd-always-exit-after-displaying-usage.patch backport
- rebase net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch manually
- refresh patches with devtool to get rid of fuzz
Changelog:
----------
*5.9.3*:
security:
- These two CVEs can be exploited by a user with read-only credentials:
- CVE-2022-24805 A buffer overflow in the handling of the INDEX of
NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
- CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
can cause a NULL pointer dereference.
- These CVEs can be exploited by a user with read-write credentials:
- CVE-2022-24806 Improper Input Validation when SETing malformed
OIDs in master agent and subagent simultaneously
- CVE-2022-24807 A malformed OID in a SET request to
SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
out-of-bounds memory access.
- CVE-2022-24808 A malformed OID in a SET request to
NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
- CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
can cause a NULL pointer dereference.
- To avoid these flaws, use strong SNMPv3 credentials and do not share them.
If you must use SNMPv1 or SNMPv2c, use a complex community string
and enhance the protection by restricting access to a given IP address
range.
- Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for
reporting the following CVEs that have been fixed in this release, and
to Arista Networks for providing fixes.
Windows:
- WinExtDLL: Fix multiple compiler warnings
- WinExtDLL: Make long strings occupy a single line Make it easier to
look up error messages in the source code by making long strings
occupy a single source code line.
- WinExtDLL: Restore MIB-II support Make winExtDLL work on 64-bit
Windows systems") caused snmpd to skip MIB-II on 64-bit systems.
IF-MIB: Update ifTable entries even if the interface name has changed
At least on Linux a network interface index may be reused for a
network interface with a different name. Hence this patch that
enables replacing network interface information even if the network
interface name has changed.
unspecified:
- Moved transport code into a separate subdirectory in snmplib
- Snmplib: remove inline versions of container funcs".
misc:
- snmp-create-v3-user: Fix the snmpd.conf path @datadir@ is
expanded in ${datarootdir} so datarootdir must be set before
@datadir@ is used.
*5.9.2*:
skipped due to a last minute library versioning found bug -- use 5.9.3 instead
(master rev: bf4a826c7de51dcdac87f81fa2bd2301629d50db) -- backport
Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
---
...ath.m4-keep-consistent-between-32bit.patch | 8 ++-
| 4 +-
...1-get_pid_from_inode-Include-limit.h.patch | 6 +-
...d-always-exit-after-displaying-usage.patch | 55 -------------------
....c-Don-t-check-for-return-from-EVP_M.patch | 4 +-
.../0002-configure-fix-a-cc-check-issue.patch | 28 ----------
...004-configure-fix-incorrect-variable.patch | 6 +-
.../net-snmp/fix-libtool-finish.patch | 6 +-
....7.2-fix-engineBoots-value-on-SIGHUP.patch | 22 ++++----
...add-knob-whether-nlist.h-are-checked.patch | 4 +-
.../net-snmp-fix-for-disable-des.patch | 4 +-
...ting-add-the-output-format-for-ptest.patch | 2 +-
.../reproducibility-have-printcap.patch | 4 +-
.../{net-snmp_5.9.1.bb => net-snmp_5.9.3.bb} | 4 +-
14 files changed, 37 insertions(+), 120 deletions(-)
delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
rename meta-networking/recipes-protocols/net-snmp/{net-snmp_5.9.1.bb => net-snmp_5.9.3.bb} (98%)
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
index 4cd729044..ed2ebc6d7 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
@@ -1,7 +1,8 @@
-From 6f8ea2e841ad45eed193310b599d3f3b410ae91d Mon Sep 17 00:00:00 2001
+From 98c62e24fdd05d7e8bd8149840bad8eb0feb3fb1 Mon Sep 17 00:00:00 2001
From: Mingli Yu <mingli.yu@windriver.com>
Date: Fri, 29 Jan 2021 08:49:15 +0000
-Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and 64bit
+Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and
+ 64bit
With configure option "--with-openssl=${STAGING_EXECPREFIXDIR}", it behaves
differently between 32bit and 64bit system as the openssl lib resides under
@@ -15,12 +16,13 @@ So add the patch to fix the gap between 32bit and 64bit system.
Upstream-Status: Inappropriate [configuration specific]
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
+
---
m4/ac_add_search_path.m4 | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/m4/ac_add_search_path.m4 b/m4/ac_add_search_path.m4
-index 8e0a819..961f587 100644
+index 8e0a819..e9585bc 100644
--- a/m4/ac_add_search_path.m4
+++ b/m4/ac_add_search_path.m4
@@ -3,8 +3,8 @@ dnl Add a search path to the LIBS and CPPFLAGS variables
--git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
index 05a47f61c..f8a52a63f 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
@@ -1,4 +1,4 @@
-From 69d4c517c07f55c505090e48d96ace8cd599fb26 Mon Sep 17 00:00:00 2001
+From e86d5fd52f19b85da0b7cce660c6e65ec4c0f9bb Mon Sep 17 00:00:00 2001
From: Li xin <lixin.fnst@cn.fujitsu.com>
Date: Fri, 21 Aug 2015 18:23:13 +0900
Subject: [PATCH] config_os_headers: Error Fix
@@ -19,7 +19,7 @@ Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
-index f07d512..2363b42 100644
+index 01c3376..6edd85f 100644
--- a/configure.d/config_os_headers
+++ b/configure.d/config_os_headers
@@ -395,8 +395,8 @@ then
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
index 22e591556..a7881a871 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
@@ -1,4 +1,4 @@
-From 2bf1bbe1d428ed06d57aa76b03e394b72ff2216d Mon Sep 17 00:00:00 2001
+From 8097734b27fd146f358a4edd0d1a0d28309bd9a4 Mon Sep 17 00:00:00 2001
From: Khem Raj <raj.khem@gmail.com>
Date: Fri, 22 Jul 2016 18:34:39 +0000
Subject: [PATCH] get_pid_from_inode: Include limit.h
@@ -14,7 +14,7 @@ Signed-off-by: Khem Raj <raj.khem@gmail.com>
1 file changed, 1 insertion(+)
diff --git a/agent/mibgroup/util_funcs/get_pid_from_inode.c b/agent/mibgroup/util_funcs/get_pid_from_inode.c
-index aee907d..7abaec2 100644
+index 5788e1d..ea380a6 100644
--- a/agent/mibgroup/util_funcs/get_pid_from_inode.c
+++ b/agent/mibgroup/util_funcs/get_pid_from_inode.c
@@ -6,6 +6,7 @@
@@ -23,5 +23,5 @@ index aee907d..7abaec2 100644
#include <ctype.h>
+#include <limits.h>
#include <stdio.h>
- #if HAVE_STDLIB_H
+ #ifdef HAVE_STDLIB_H
#include <stdlib.h>
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
deleted file mode 100644
index 4fc9e54b4..000000000
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
+++ /dev/null
@@ -1,55 +0,0 @@
-From 94ca941e06bef157bf0e13251f8ca1471daa9393 Mon Sep 17 00:00:00 2001
-From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
-Date: Fri, 27 Aug 2021 14:21:45 +0300
-Subject: [PATCH] snmpd: always exit after displaying usage
-
-Currently, viewing the help text with -h results in snmpd being started
-in the background, whereas this does not happen with --help. Similarly,
-when an error is detected in command line syntax, the help text is
-displayed but sometimes snmpd gets started anyway, depending on the
-execution path.
-
-This patch makes snmpd consistently terminate whenever the usage
-function gets called. It also removes the goto statements no longer
-needed.
-
-Upstream-Status: Backport
-[https://github.com/net-snmp/net-snmp/commit/94ca941e06bef157bf0e13251f8ca1471daa9393]
-
-Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
----
- agent/snmpd.c | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/agent/snmpd.c b/agent/snmpd.c
-index f5aab0af8..90de12d99 100644
---- a/agent/snmpd.c
-+++ b/agent/snmpd.c
-@@ -289,6 +289,8 @@ usage(char *prog)
- " -S d|i|0-7\t\tuse -Ls <facility> instead\n"
- "\n"
- );
-+ SOCK_CLEANUP;
-+ exit(1);
- }
-
- static void
-@@ -494,7 +496,6 @@ main(int argc, char *argv[])
- case '-':
- if (strcasecmp(optarg, "help") == 0) {
- usage(argv[0]);
-- goto out;
- }
- if (strcasecmp(optarg, "version") == 0) {
- version();
-@@ -783,7 +784,6 @@ main(int argc, char *argv[])
- fprintf(stderr, "%s: Illegal argument -X:"
- "AgentX support not compiled in.\n", argv[0]);
- usage(argv[0]);
-- goto out;
- #endif
- break;
-
---
-2.25.1
-
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
index 42352a6b0..af6334f72 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
@@ -1,4 +1,4 @@
-From f3ff99736b8cccbba77349b0d10a3cee366a4c87 Mon Sep 17 00:00:00 2001
+From f4e1acd4f509dd26cf88da872bd5adcf884f4a5f Mon Sep 17 00:00:00 2001
From: Khem Raj <raj.khem@gmail.com>
Date: Fri, 18 Sep 2015 00:28:45 -0400
Subject: [PATCH] snmplib/keytools.c: Don't check for return from
@@ -17,7 +17,7 @@ Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
1 file changed, 1 insertion(+), 4 deletions(-)
diff --git a/snmplib/keytools.c b/snmplib/keytools.c
-index 129a7c0..2fc1efc 100644
+index 14a452a..fb1694b 100644
--- a/snmplib/keytools.c
+++ b/snmplib/keytools.c
@@ -183,10 +183,7 @@ generate_Ku(const oid * hashtype, u_int hashtype_len,
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
deleted file mode 100644
index c973bde72..000000000
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
+++ /dev/null
@@ -1,28 +0,0 @@
-From 0a02ac779c51a2b4af3b58cb96967bf3eff80367 Mon Sep 17 00:00:00 2001
-From: Wenlin Kang <wenlin.kang@windriver.com>
-Date: Wed, 24 May 2017 16:45:34 +0800
-Subject: [PATCH] configure: fix a cc check issue.
-
-When has "." in cc value, the expression
-$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'
-can't get corretly the cc's value.
-
-Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
-
----
- configure.d/config_project_perl_python | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/configure.d/config_project_perl_python b/configure.d/config_project_perl_python
-index 475c843..22d2ad3 100644
---- a/configure.d/config_project_perl_python
-+++ b/configure.d/config_project_perl_python
-@@ -87,7 +87,7 @@ if test "x$install_perl" != "xno" ; then
- if test "x$enable_perl_cc_checks" != "xno" ; then
- AC_MSG_CHECKING([for Perl cc])
- changequote(, )
-- PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'`
-+ PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\.\w\s\/]+).;\s*/$1/);'`
- changequote([, ])
- if test "x$PERLCC" != "x" ; then
- AC_MSG_RESULT([$PERLCC])
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
index bfddc63dd..6e224188a 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
@@ -1,4 +1,4 @@
-From 011bdcd07f2a289d0cfc1b411c03c0cc7c42dad1 Mon Sep 17 00:00:00 2001
+From 6d655ba677563ac9d62d4d8eee59fdb39d486c02 Mon Sep 17 00:00:00 2001
From: Wenlin Kang <wenlin.kang@windriver.com>
Date: Wed, 24 May 2017 17:10:20 +0800
Subject: [PATCH] configure: fix incorrect variable
@@ -14,10 +14,10 @@ Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Makefile.in b/Makefile.in
-index 912f6b2..a53d1b2 100644
+index f1cbbf5..1545be3 100644
--- a/Makefile.in
+++ b/Makefile.in
-@@ -174,7 +174,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
+@@ -173,7 +173,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
#
# override LD_RUN_PATH to avoid dependencies on the build directory
perlmodules: perlmakefiles subdirs
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
index 26dd014ce..409c1e03c 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
@@ -1,4 +1,4 @@
-From 27444fbf8323679ea0551a3bd5f04c365143d8c0 Mon Sep 17 00:00:00 2001
+From ab1d77c52e84746e75506a2870783806bc77f396 Mon Sep 17 00:00:00 2001
From: "Roy.Li" <rongqing.li@windriver.com>
Date: Fri, 16 Jan 2015 14:14:01 +0800
Subject: [PATCH] net-snmp: fix "libtool --finish"
@@ -20,11 +20,11 @@ Signed-off-by: Roy.Li <rongqing.li@windriver.com>
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Makefile.top b/Makefile.top
-index 6315401..fc0ee06 100644
+index a962c54..1ba5607 100644
--- a/Makefile.top
+++ b/Makefile.top
@@ -89,7 +89,7 @@ LIBREVISION = 0
- LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) -o
+ LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) @LD_NO_UNDEFINED@ -o
LIB_EXTENSION = la
LIB_VERSION =
-LIB_LDCONFIG_CMD = $(LIBTOOL) --mode=finish $(INSTALL_PREFIX)$(libdir)
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
index 022eb958f..87f192e5b 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
@@ -1,4 +1,4 @@
-From 1e3178835217ba89aa355e2b6b88e490f17be16d Mon Sep 17 00:00:00 2001
+From 5ad4eab43c1ea63ff343bba64d576440e8783e75 Mon Sep 17 00:00:00 2001
From: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Date: Wed, 9 Jun 2021 15:47:30 +0900
Subject: [PATCH] net snmp: fix engineBoots value on SIGHUP
@@ -7,6 +7,7 @@ Upstream-Status: Pending
Signed-off-by: Marian Florea <marian.florea@windriver.com>
Signed-off-by: Li Zhou <li.zhou@windriver.com>
+Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
---
agent/snmpd.c | 1 +
@@ -14,19 +15,18 @@ Signed-off-by: Li Zhou <li.zhou@windriver.com>
2 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/agent/snmpd.c b/agent/snmpd.c
-index 1af439f..355b510 100644
+index 90de12d..1ccc4db 100644
--- a/agent/snmpd.c
+++ b/agent/snmpd.c
-@@ -1208,6 +1208,7 @@ receive(void)
- snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
- netsnmp_get_version());
- update_config();
-+ snmp_store(app_name);
- send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
- #if HAVE_SIGPROCMASK
- ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
+ snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
+ netsnmp_get_version());
+ update_config();
++ snmp_store(app_name);
+ send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
+ #ifdef HAVE_SIGPROCMASK
+ ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
diff --git a/snmplib/snmpv3.c b/snmplib/snmpv3.c
-index 29c2a0f..ada961c 100644
+index 7b1746b..4a17e0d 100644
--- a/snmplib/snmpv3.c
+++ b/snmplib/snmpv3.c
@@ -1059,9 +1059,9 @@ init_snmpv3_post_config(int majorid, int minorid, void *serverarg,
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
index f1ebe2bb6..c5a453abe 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
@@ -1,4 +1,4 @@
-From e507dcf8b29c55011f85d88bf05400d4717e4074 Mon Sep 17 00:00:00 2001
+From ad65b106d3cb3c6e595381be1c45a73c1ef6eb5e Mon Sep 17 00:00:00 2001
From: Chong Lu <Chong.Lu@windriver.com>
Date: Thu, 28 May 2020 09:46:34 -0500
Subject: [PATCH] net-snmp: add knob whether nlist.h are checked
@@ -15,7 +15,7 @@ Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
1 file changed, 2 insertions(+)
diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
-index 76ef58a..f07d512 100644
+index b9c8c31..01c3376 100644
--- a/configure.d/config_os_headers
+++ b/configure.d/config_os_headers
@@ -37,6 +37,7 @@ AC_CHECK_HEADERS([getopt.h pthread.h regex.h ] dnl
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
index 2941a3609..c382c02d8 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
@@ -1,4 +1,4 @@
-From 3ca4335ec1d6b7b384c134fc85d7a9e513c68376 Mon Sep 17 00:00:00 2001
+From b1b9980853b1083f0c8b9f628f8b4c3a484d4f91 Mon Sep 17 00:00:00 2001
From: Jackie Huang <jackie.huang@windriver.com>
Date: Thu, 22 Jun 2017 10:25:08 +0800
Subject: [PATCH] net-snmp: fix for --disable-des
@@ -15,7 +15,7 @@ Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
1 file changed, 2 insertions(+)
diff --git a/snmplib/scapi.c b/snmplib/scapi.c
-index 00c9174..c6875e1 100644
+index 54fdd5c..0f7e931 100644
--- a/snmplib/scapi.c
+++ b/snmplib/scapi.c
@@ -85,7 +85,9 @@ netsnmp_feature_child_of(usm_scapi, usm_support);
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
index 807983f61..09ca532a7 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
@@ -1,4 +1,4 @@
-From 972df16e9599dffddf5d714a4cbf43008c771122 Mon Sep 17 00:00:00 2001
+From 36a5656db7ea75dd15f35a6c1728937c6e2b901c Mon Sep 17 00:00:00 2001
From: Jackie Huang <jackie.huang@windriver.com>
Date: Wed, 14 Jan 2015 15:10:06 +0800
Subject: [PATCH] testing: add the output format for ptest
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
index bf1e7bedf..c0b51c51e 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
@@ -1,4 +1,4 @@
-From 84e362fe97f50fbad69f083bc2d8fe18f83eb2f7 Mon Sep 17 00:00:00 2001
+From b923cd38e2503b86aedf66b767fd7f51c9f25645 Mon Sep 17 00:00:00 2001
From: "douglas.royds" <douglas.royds@taitradio.com>
Date: Wed, 21 Nov 2018 13:52:18 +1300
Subject: [PATCH] net-snmp: Reproducibility: Don't check build host for
@@ -13,7 +13,7 @@ set in the environment to "yes" or "no" as appropriate for the target platform.
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/configure.d/config_os_misc4 b/configure.d/config_os_misc4
-index 6f23c8e..8cea75a 100644
+index b6864d9..07ca922 100644
--- a/configure.d/config_os_misc4
+++ b/configure.d/config_os_misc4
@@ -99,9 +99,9 @@ if test x$LPSTAT_PATH != x; then
diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
similarity index 98%
rename from meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb
rename to meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
index 30c0ce74c..7af514756 100644
--- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb
+++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
@@ -21,15 +21,13 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.tar.gz \
file://0001-config_os_headers-Error-Fix.patch \
file://0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch \
file://0001-get_pid_from_inode-Include-limit.h.patch \
- file://0002-configure-fix-a-cc-check-issue.patch \
file://0004-configure-fix-incorrect-variable.patch \
file://net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch \
file://net-snmp-fix-for-disable-des.patch \
file://reproducibility-have-printcap.patch \
file://0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch \
- file://0001-snmpd-always-exit-after-displaying-usage.patch \
"
-SRC_URI[sha256sum] = "eb7fd4a44de6cddbffd9a92a85ad1309e5c1054fb9d5a7dd93079c8953f48c3f"
+SRC_URI[sha256sum] = "2097f29b7e1bf3f1300b4bae52fa2308d0bb8d5d3998dbe02f9462a413a2ef0a"
UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/net-snmp/files/net-snmp/"
UPSTREAM_CHECK_REGEX = "/net-snmp/(?P<pver>\d+(\.\d+)+)/"
--
2.25.1
^ permalink raw reply related [flat|nested] 6+ messages in thread
* Re: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
2022-10-03 6:27 [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3 Narpat Mali
@ 2022-10-03 6:59 ` Khem Raj
2022-10-03 17:11 ` Mali, Narpat
0 siblings, 1 reply; 6+ messages in thread
From: Khem Raj @ 2022-10-03 6:59 UTC (permalink / raw)
To: Narpat Mali
Cc: openembedded-devel, archana.polampalli, yogita.urade, hari.gpillai
how different is this from
https://git.openembedded.org/meta-openembedded/commit/?id=bf4a826c7de51dcdac87f81fa2bd2301629d50db
On Sun, Oct 2, 2022 at 11:27 PM Narpat Mali <narpat.mali@windriver.com> wrote:
>
> Issue: LIN1022-1131, LIN1022-1132, LIN1022-1133, LIN1022-1134, LIN1022-1135
> Issue: LIN1022-1136
>
> Upgrade summary:
> ----------------
> - drop 0002-configure-fix-a-cc-check-issue.patch, as it was replaced with
> upstream commit https://github.com/net-snmp/net-snmp/commit/dbb49acfa2af
> - drop 0001-snmpd-always-exit-after-displaying-usage.patch backport
> - rebase net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch manually
> - refresh patches with devtool to get rid of fuzz
>
> Changelog:
> ----------
> *5.9.3*:
> security:
> - These two CVEs can be exploited by a user with read-only credentials:
> - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
> NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
> - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
> can cause a NULL pointer dereference.
> - These CVEs can be exploited by a user with read-write credentials:
> - CVE-2022-24806 Improper Input Validation when SETing malformed
> OIDs in master agent and subagent simultaneously
> - CVE-2022-24807 A malformed OID in a SET request to
> SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
> out-of-bounds memory access.
> - CVE-2022-24808 A malformed OID in a SET request to
> NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
> - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
> can cause a NULL pointer dereference.
> - To avoid these flaws, use strong SNMPv3 credentials and do not share them.
> If you must use SNMPv1 or SNMPv2c, use a complex community string
> and enhance the protection by restricting access to a given IP address
> range.
> - Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for
> reporting the following CVEs that have been fixed in this release, and
> to Arista Networks for providing fixes.
>
> Windows:
> - WinExtDLL: Fix multiple compiler warnings
> - WinExtDLL: Make long strings occupy a single line Make it easier to
> look up error messages in the source code by making long strings
> occupy a single source code line.
> - WinExtDLL: Restore MIB-II support Make winExtDLL work on 64-bit
> Windows systems") caused snmpd to skip MIB-II on 64-bit systems.
>
> IF-MIB: Update ifTable entries even if the interface name has changed
> At least on Linux a network interface index may be reused for a
> network interface with a different name. Hence this patch that
> enables replacing network interface information even if the network
> interface name has changed.
>
> unspecified:
> - Moved transport code into a separate subdirectory in snmplib
> - Snmplib: remove inline versions of container funcs".
>
> misc:
> - snmp-create-v3-user: Fix the snmpd.conf path @datadir@ is
> expanded in ${datarootdir} so datarootdir must be set before
> @datadir@ is used.
>
> *5.9.2*:
> skipped due to a last minute library versioning found bug -- use 5.9.3 instead
>
> (master rev: bf4a826c7de51dcdac87f81fa2bd2301629d50db) -- backport
>
> Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
> ---
> ...ath.m4-keep-consistent-between-32bit.patch | 8 ++-
> .../0001-config_os_headers-Error-Fix.patch | 4 +-
> ...1-get_pid_from_inode-Include-limit.h.patch | 6 +-
> ...d-always-exit-after-displaying-usage.patch | 55 -------------------
> ....c-Don-t-check-for-return-from-EVP_M.patch | 4 +-
> .../0002-configure-fix-a-cc-check-issue.patch | 28 ----------
> ...004-configure-fix-incorrect-variable.patch | 6 +-
> .../net-snmp/fix-libtool-finish.patch | 6 +-
> ....7.2-fix-engineBoots-value-on-SIGHUP.patch | 22 ++++----
> ...add-knob-whether-nlist.h-are-checked.patch | 4 +-
> .../net-snmp-fix-for-disable-des.patch | 4 +-
> ...ting-add-the-output-format-for-ptest.patch | 2 +-
> .../reproducibility-have-printcap.patch | 4 +-
> .../{net-snmp_5.9.1.bb => net-snmp_5.9.3.bb} | 4 +-
> 14 files changed, 37 insertions(+), 120 deletions(-)
> delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> rename meta-networking/recipes-protocols/net-snmp/{net-snmp_5.9.1.bb => net-snmp_5.9.3.bb} (98%)
>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> index 4cd729044..ed2ebc6d7 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> @@ -1,7 +1,8 @@
> -From 6f8ea2e841ad45eed193310b599d3f3b410ae91d Mon Sep 17 00:00:00 2001
> +From 98c62e24fdd05d7e8bd8149840bad8eb0feb3fb1 Mon Sep 17 00:00:00 2001
> From: Mingli Yu <mingli.yu@windriver.com>
> Date: Fri, 29 Jan 2021 08:49:15 +0000
> -Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and 64bit
> +Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and
> + 64bit
>
> With configure option "--with-openssl=${STAGING_EXECPREFIXDIR}", it behaves
> differently between 32bit and 64bit system as the openssl lib resides under
> @@ -15,12 +16,13 @@ So add the patch to fix the gap between 32bit and 64bit system.
> Upstream-Status: Inappropriate [configuration specific]
>
> Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
> +
> ---
> m4/ac_add_search_path.m4 | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/m4/ac_add_search_path.m4 b/m4/ac_add_search_path.m4
> -index 8e0a819..961f587 100644
> +index 8e0a819..e9585bc 100644
> --- a/m4/ac_add_search_path.m4
> +++ b/m4/ac_add_search_path.m4
> @@ -3,8 +3,8 @@ dnl Add a search path to the LIBS and CPPFLAGS variables
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> index 05a47f61c..f8a52a63f 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> @@ -1,4 +1,4 @@
> -From 69d4c517c07f55c505090e48d96ace8cd599fb26 Mon Sep 17 00:00:00 2001
> +From e86d5fd52f19b85da0b7cce660c6e65ec4c0f9bb Mon Sep 17 00:00:00 2001
> From: Li xin <lixin.fnst@cn.fujitsu.com>
> Date: Fri, 21 Aug 2015 18:23:13 +0900
> Subject: [PATCH] config_os_headers: Error Fix
> @@ -19,7 +19,7 @@ Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
> -index f07d512..2363b42 100644
> +index 01c3376..6edd85f 100644
> --- a/configure.d/config_os_headers
> +++ b/configure.d/config_os_headers
> @@ -395,8 +395,8 @@ then
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> index 22e591556..a7881a871 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> @@ -1,4 +1,4 @@
> -From 2bf1bbe1d428ed06d57aa76b03e394b72ff2216d Mon Sep 17 00:00:00 2001
> +From 8097734b27fd146f358a4edd0d1a0d28309bd9a4 Mon Sep 17 00:00:00 2001
> From: Khem Raj <raj.khem@gmail.com>
> Date: Fri, 22 Jul 2016 18:34:39 +0000
> Subject: [PATCH] get_pid_from_inode: Include limit.h
> @@ -14,7 +14,7 @@ Signed-off-by: Khem Raj <raj.khem@gmail.com>
> 1 file changed, 1 insertion(+)
>
> diff --git a/agent/mibgroup/util_funcs/get_pid_from_inode.c b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> -index aee907d..7abaec2 100644
> +index 5788e1d..ea380a6 100644
> --- a/agent/mibgroup/util_funcs/get_pid_from_inode.c
> +++ b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> @@ -6,6 +6,7 @@
> @@ -23,5 +23,5 @@ index aee907d..7abaec2 100644
> #include <ctype.h>
> +#include <limits.h>
> #include <stdio.h>
> - #if HAVE_STDLIB_H
> + #ifdef HAVE_STDLIB_H
> #include <stdlib.h>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> deleted file mode 100644
> index 4fc9e54b4..000000000
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> +++ /dev/null
> @@ -1,55 +0,0 @@
> -From 94ca941e06bef157bf0e13251f8ca1471daa9393 Mon Sep 17 00:00:00 2001
> -From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
> -Date: Fri, 27 Aug 2021 14:21:45 +0300
> -Subject: [PATCH] snmpd: always exit after displaying usage
> -
> -Currently, viewing the help text with -h results in snmpd being started
> -in the background, whereas this does not happen with --help. Similarly,
> -when an error is detected in command line syntax, the help text is
> -displayed but sometimes snmpd gets started anyway, depending on the
> -execution path.
> -
> -This patch makes snmpd consistently terminate whenever the usage
> -function gets called. It also removes the goto statements no longer
> -needed.
> -
> -Upstream-Status: Backport
> -[https://github.com/net-snmp/net-snmp/commit/94ca941e06bef157bf0e13251f8ca1471daa9393]
> -
> -Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
> ----
> - agent/snmpd.c | 4 ++--
> - 1 file changed, 2 insertions(+), 2 deletions(-)
> -
> -diff --git a/agent/snmpd.c b/agent/snmpd.c
> -index f5aab0af8..90de12d99 100644
> ---- a/agent/snmpd.c
> -+++ b/agent/snmpd.c
> -@@ -289,6 +289,8 @@ usage(char *prog)
> - " -S d|i|0-7\t\tuse -Ls <facility> instead\n"
> - "\n"
> - );
> -+ SOCK_CLEANUP;
> -+ exit(1);
> - }
> -
> - static void
> -@@ -494,7 +496,6 @@ main(int argc, char *argv[])
> - case '-':
> - if (strcasecmp(optarg, "help") == 0) {
> - usage(argv[0]);
> -- goto out;
> - }
> - if (strcasecmp(optarg, "version") == 0) {
> - version();
> -@@ -783,7 +784,6 @@ main(int argc, char *argv[])
> - fprintf(stderr, "%s: Illegal argument -X:"
> - "AgentX support not compiled in.\n", argv[0]);
> - usage(argv[0]);
> -- goto out;
> - #endif
> - break;
> -
> ---
> -2.25.1
> -
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> index 42352a6b0..af6334f72 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> @@ -1,4 +1,4 @@
> -From f3ff99736b8cccbba77349b0d10a3cee366a4c87 Mon Sep 17 00:00:00 2001
> +From f4e1acd4f509dd26cf88da872bd5adcf884f4a5f Mon Sep 17 00:00:00 2001
> From: Khem Raj <raj.khem@gmail.com>
> Date: Fri, 18 Sep 2015 00:28:45 -0400
> Subject: [PATCH] snmplib/keytools.c: Don't check for return from
> @@ -17,7 +17,7 @@ Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
> 1 file changed, 1 insertion(+), 4 deletions(-)
>
> diff --git a/snmplib/keytools.c b/snmplib/keytools.c
> -index 129a7c0..2fc1efc 100644
> +index 14a452a..fb1694b 100644
> --- a/snmplib/keytools.c
> +++ b/snmplib/keytools.c
> @@ -183,10 +183,7 @@ generate_Ku(const oid * hashtype, u_int hashtype_len,
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> deleted file mode 100644
> index c973bde72..000000000
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> +++ /dev/null
> @@ -1,28 +0,0 @@
> -From 0a02ac779c51a2b4af3b58cb96967bf3eff80367 Mon Sep 17 00:00:00 2001
> -From: Wenlin Kang <wenlin.kang@windriver.com>
> -Date: Wed, 24 May 2017 16:45:34 +0800
> -Subject: [PATCH] configure: fix a cc check issue.
> -
> -When has "." in cc value, the expression
> -$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'
> -can't get corretly the cc's value.
> -
> -Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
> -
> ----
> - configure.d/config_project_perl_python | 2 +-
> - 1 file changed, 1 insertion(+), 1 deletion(-)
> -
> -diff --git a/configure.d/config_project_perl_python b/configure.d/config_project_perl_python
> -index 475c843..22d2ad3 100644
> ---- a/configure.d/config_project_perl_python
> -+++ b/configure.d/config_project_perl_python
> -@@ -87,7 +87,7 @@ if test "x$install_perl" != "xno" ; then
> - if test "x$enable_perl_cc_checks" != "xno" ; then
> - AC_MSG_CHECKING([for Perl cc])
> - changequote(, )
> -- PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'`
> -+ PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\.\w\s\/]+).;\s*/$1/);'`
> - changequote([, ])
> - if test "x$PERLCC" != "x" ; then
> - AC_MSG_RESULT([$PERLCC])
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> index bfddc63dd..6e224188a 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> @@ -1,4 +1,4 @@
> -From 011bdcd07f2a289d0cfc1b411c03c0cc7c42dad1 Mon Sep 17 00:00:00 2001
> +From 6d655ba677563ac9d62d4d8eee59fdb39d486c02 Mon Sep 17 00:00:00 2001
> From: Wenlin Kang <wenlin.kang@windriver.com>
> Date: Wed, 24 May 2017 17:10:20 +0800
> Subject: [PATCH] configure: fix incorrect variable
> @@ -14,10 +14,10 @@ Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Makefile.in b/Makefile.in
> -index 912f6b2..a53d1b2 100644
> +index f1cbbf5..1545be3 100644
> --- a/Makefile.in
> +++ b/Makefile.in
> -@@ -174,7 +174,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
> +@@ -173,7 +173,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
> #
> # override LD_RUN_PATH to avoid dependencies on the build directory
> perlmodules: perlmakefiles subdirs
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> index 26dd014ce..409c1e03c 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> @@ -1,4 +1,4 @@
> -From 27444fbf8323679ea0551a3bd5f04c365143d8c0 Mon Sep 17 00:00:00 2001
> +From ab1d77c52e84746e75506a2870783806bc77f396 Mon Sep 17 00:00:00 2001
> From: "Roy.Li" <rongqing.li@windriver.com>
> Date: Fri, 16 Jan 2015 14:14:01 +0800
> Subject: [PATCH] net-snmp: fix "libtool --finish"
> @@ -20,11 +20,11 @@ Signed-off-by: Roy.Li <rongqing.li@windriver.com>
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Makefile.top b/Makefile.top
> -index 6315401..fc0ee06 100644
> +index a962c54..1ba5607 100644
> --- a/Makefile.top
> +++ b/Makefile.top
> @@ -89,7 +89,7 @@ LIBREVISION = 0
> - LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) -o
> + LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) @LD_NO_UNDEFINED@ -o
> LIB_EXTENSION = la
> LIB_VERSION =
> -LIB_LDCONFIG_CMD = $(LIBTOOL) --mode=finish $(INSTALL_PREFIX)$(libdir)
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> index 022eb958f..87f192e5b 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> @@ -1,4 +1,4 @@
> -From 1e3178835217ba89aa355e2b6b88e490f17be16d Mon Sep 17 00:00:00 2001
> +From 5ad4eab43c1ea63ff343bba64d576440e8783e75 Mon Sep 17 00:00:00 2001
> From: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
> Date: Wed, 9 Jun 2021 15:47:30 +0900
> Subject: [PATCH] net snmp: fix engineBoots value on SIGHUP
> @@ -7,6 +7,7 @@ Upstream-Status: Pending
>
> Signed-off-by: Marian Florea <marian.florea@windriver.com>
> Signed-off-by: Li Zhou <li.zhou@windriver.com>
> +Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
>
> ---
> agent/snmpd.c | 1 +
> @@ -14,19 +15,18 @@ Signed-off-by: Li Zhou <li.zhou@windriver.com>
> 2 files changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/agent/snmpd.c b/agent/snmpd.c
> -index 1af439f..355b510 100644
> +index 90de12d..1ccc4db 100644
> --- a/agent/snmpd.c
> +++ b/agent/snmpd.c
> -@@ -1208,6 +1208,7 @@ receive(void)
> - snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> - netsnmp_get_version());
> - update_config();
> -+ snmp_store(app_name);
> - send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> - #if HAVE_SIGPROCMASK
> - ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> + snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> + netsnmp_get_version());
> + update_config();
> ++ snmp_store(app_name);
> + send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> + #ifdef HAVE_SIGPROCMASK
> + ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> diff --git a/snmplib/snmpv3.c b/snmplib/snmpv3.c
> -index 29c2a0f..ada961c 100644
> +index 7b1746b..4a17e0d 100644
> --- a/snmplib/snmpv3.c
> +++ b/snmplib/snmpv3.c
> @@ -1059,9 +1059,9 @@ init_snmpv3_post_config(int majorid, int minorid, void *serverarg,
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> index f1ebe2bb6..c5a453abe 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> @@ -1,4 +1,4 @@
> -From e507dcf8b29c55011f85d88bf05400d4717e4074 Mon Sep 17 00:00:00 2001
> +From ad65b106d3cb3c6e595381be1c45a73c1ef6eb5e Mon Sep 17 00:00:00 2001
> From: Chong Lu <Chong.Lu@windriver.com>
> Date: Thu, 28 May 2020 09:46:34 -0500
> Subject: [PATCH] net-snmp: add knob whether nlist.h are checked
> @@ -15,7 +15,7 @@ Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
> 1 file changed, 2 insertions(+)
>
> diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
> -index 76ef58a..f07d512 100644
> +index b9c8c31..01c3376 100644
> --- a/configure.d/config_os_headers
> +++ b/configure.d/config_os_headers
> @@ -37,6 +37,7 @@ AC_CHECK_HEADERS([getopt.h pthread.h regex.h ] dnl
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> index 2941a3609..c382c02d8 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> @@ -1,4 +1,4 @@
> -From 3ca4335ec1d6b7b384c134fc85d7a9e513c68376 Mon Sep 17 00:00:00 2001
> +From b1b9980853b1083f0c8b9f628f8b4c3a484d4f91 Mon Sep 17 00:00:00 2001
> From: Jackie Huang <jackie.huang@windriver.com>
> Date: Thu, 22 Jun 2017 10:25:08 +0800
> Subject: [PATCH] net-snmp: fix for --disable-des
> @@ -15,7 +15,7 @@ Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
> 1 file changed, 2 insertions(+)
>
> diff --git a/snmplib/scapi.c b/snmplib/scapi.c
> -index 00c9174..c6875e1 100644
> +index 54fdd5c..0f7e931 100644
> --- a/snmplib/scapi.c
> +++ b/snmplib/scapi.c
> @@ -85,7 +85,9 @@ netsnmp_feature_child_of(usm_scapi, usm_support);
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> index 807983f61..09ca532a7 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> @@ -1,4 +1,4 @@
> -From 972df16e9599dffddf5d714a4cbf43008c771122 Mon Sep 17 00:00:00 2001
> +From 36a5656db7ea75dd15f35a6c1728937c6e2b901c Mon Sep 17 00:00:00 2001
> From: Jackie Huang <jackie.huang@windriver.com>
> Date: Wed, 14 Jan 2015 15:10:06 +0800
> Subject: [PATCH] testing: add the output format for ptest
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> index bf1e7bedf..c0b51c51e 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> @@ -1,4 +1,4 @@
> -From 84e362fe97f50fbad69f083bc2d8fe18f83eb2f7 Mon Sep 17 00:00:00 2001
> +From b923cd38e2503b86aedf66b767fd7f51c9f25645 Mon Sep 17 00:00:00 2001
> From: "douglas.royds" <douglas.royds@taitradio.com>
> Date: Wed, 21 Nov 2018 13:52:18 +1300
> Subject: [PATCH] net-snmp: Reproducibility: Don't check build host for
> @@ -13,7 +13,7 @@ set in the environment to "yes" or "no" as appropriate for the target platform.
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/configure.d/config_os_misc4 b/configure.d/config_os_misc4
> -index 6f23c8e..8cea75a 100644
> +index b6864d9..07ca922 100644
> --- a/configure.d/config_os_misc4
> +++ b/configure.d/config_os_misc4
> @@ -99,9 +99,9 @@ if test x$LPSTAT_PATH != x; then
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
> similarity index 98%
> rename from meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb
> rename to meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
> index 30c0ce74c..7af514756 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
> @@ -21,15 +21,13 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.tar.gz \
> file://0001-config_os_headers-Error-Fix.patch \
> file://0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch \
> file://0001-get_pid_from_inode-Include-limit.h.patch \
> - file://0002-configure-fix-a-cc-check-issue.patch \
> file://0004-configure-fix-incorrect-variable.patch \
> file://net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch \
> file://net-snmp-fix-for-disable-des.patch \
> file://reproducibility-have-printcap.patch \
> file://0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch \
> - file://0001-snmpd-always-exit-after-displaying-usage.patch \
> "
> -SRC_URI[sha256sum] = "eb7fd4a44de6cddbffd9a92a85ad1309e5c1054fb9d5a7dd93079c8953f48c3f"
> +SRC_URI[sha256sum] = "2097f29b7e1bf3f1300b4bae52fa2308d0bb8d5d3998dbe02f9462a413a2ef0a"
>
> UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/net-snmp/files/net-snmp/"
> UPSTREAM_CHECK_REGEX = "/net-snmp/(?P<pver>\d+(\.\d+)+)/"
> --
> 2.25.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#99037): https://lists.openembedded.org/g/openembedded-devel/message/99037
> Mute This Topic: https://lists.openembedded.org/mt/94085410/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
2022-10-03 6:59 ` [oe] " Khem Raj
@ 2022-10-03 17:11 ` Mali, Narpat
2022-10-03 19:41 ` Khem Raj
0 siblings, 1 reply; 6+ messages in thread
From: Mali, Narpat @ 2022-10-03 17:11 UTC (permalink / raw)
To: Khem Raj
Cc: openembedded-devel, Polampalli, Archana, Urade, Yogita, G Pillai, Hari
[-- Attachment #1: Type: text/plain, Size: 27299 bytes --]
Hi Khem Raj,
It is the same commit but, we need this patch commit for "kirkstone" branch of meta-openembedded.
We observed that the "master" branch has "net-snmp 5.9.3" version at https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp and the "kirkstone" branch has "net-snmp 5.9.1" at https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp?h=kirkstone
Since, our product is using "kirkstone" branch of meta-openembedded so, CVE-2022-24805 to CVE-2022-24810 are vulnerable for our product.
Could you please let us know, How to get net-snmp upgraded to 5.9.3 version in "kirkstone" branch ?
Best Regards,
Narpat Mali
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows
________________________________
From: Khem Raj <raj.khem@gmail.com>
Sent: Monday, October 3, 2022 12:29:18 PM
To: Mali, Narpat <Narpat.Mali@windriver.com>
Cc: openembedded-devel@lists.openembedded.org <openembedded-devel@lists.openembedded.org>; Polampalli, Archana <Archana.Polampalli@windriver.com>; Urade, Yogita <Yogita.Urade@windriver.com>; G Pillai, Hari <Hari.GPillai@windriver.com>
Subject: Re: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
[Please note: This e-mail is from an EXTERNAL e-mail address]
how different is this from
https://git.openembedded.org/meta-openembedded/commit/?id=bf4a826c7de51dcdac87f81fa2bd2301629d50db
On Sun, Oct 2, 2022 at 11:27 PM Narpat Mali <narpat.mali@windriver.com> wrote:
>
> Issue: LIN1022-1131, LIN1022-1132, LIN1022-1133, LIN1022-1134, LIN1022-1135
> Issue: LIN1022-1136
>
> Upgrade summary:
> ----------------
> - drop 0002-configure-fix-a-cc-check-issue.patch, as it was replaced with
> upstream commit https://github.com/net-snmp/net-snmp/commit/dbb49acfa2af
> - drop 0001-snmpd-always-exit-after-displaying-usage.patch backport
> - rebase net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch manually
> - refresh patches with devtool to get rid of fuzz
>
> Changelog:
> ----------
> *5.9.3*:
> security:
> - These two CVEs can be exploited by a user with read-only credentials:
> - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
> NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
> - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
> can cause a NULL pointer dereference.
> - These CVEs can be exploited by a user with read-write credentials:
> - CVE-2022-24806 Improper Input Validation when SETing malformed
> OIDs in master agent and subagent simultaneously
> - CVE-2022-24807 A malformed OID in a SET request to
> SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
> out-of-bounds memory access.
> - CVE-2022-24808 A malformed OID in a SET request to
> NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
> - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
> can cause a NULL pointer dereference.
> - To avoid these flaws, use strong SNMPv3 credentials and do not share them.
> If you must use SNMPv1 or SNMPv2c, use a complex community string
> and enhance the protection by restricting access to a given IP address
> range.
> - Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for
> reporting the following CVEs that have been fixed in this release, and
> to Arista Networks for providing fixes.
>
> Windows:
> - WinExtDLL: Fix multiple compiler warnings
> - WinExtDLL: Make long strings occupy a single line Make it easier to
> look up error messages in the source code by making long strings
> occupy a single source code line.
> - WinExtDLL: Restore MIB-II support Make winExtDLL work on 64-bit
> Windows systems") caused snmpd to skip MIB-II on 64-bit systems.
>
> IF-MIB: Update ifTable entries even if the interface name has changed
> At least on Linux a network interface index may be reused for a
> network interface with a different name. Hence this patch that
> enables replacing network interface information even if the network
> interface name has changed.
>
> unspecified:
> - Moved transport code into a separate subdirectory in snmplib
> - Snmplib: remove inline versions of container funcs".
>
> misc:
> - snmp-create-v3-user: Fix the snmpd.conf path @datadir@ is
> expanded in ${datarootdir} so datarootdir must be set before
> @datadir@ is used.
>
> *5.9.2*:
> skipped due to a last minute library versioning found bug -- use 5.9.3 instead
>
> (master rev: bf4a826c7de51dcdac87f81fa2bd2301629d50db) -- backport
>
> Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
> ---
> ...ath.m4-keep-consistent-between-32bit.patch | 8 ++-
> .../0001-config_os_headers-Error-Fix.patch | 4 +-
> ...1-get_pid_from_inode-Include-limit.h.patch | 6 +-
> ...d-always-exit-after-displaying-usage.patch | 55 -------------------
> ....c-Don-t-check-for-return-from-EVP_M.patch | 4 +-
> .../0002-configure-fix-a-cc-check-issue.patch | 28 ----------
> ...004-configure-fix-incorrect-variable.patch | 6 +-
> .../net-snmp/fix-libtool-finish.patch | 6 +-
> ....7.2-fix-engineBoots-value-on-SIGHUP.patch | 22 ++++----
> ...add-knob-whether-nlist.h-are-checked.patch | 4 +-
> .../net-snmp-fix-for-disable-des.patch | 4 +-
> ...ting-add-the-output-format-for-ptest.patch | 2 +-
> .../reproducibility-have-printcap.patch | 4 +-
> .../{net-snmp_5.9.1.bb => net-snmp_5.9.3.bb} | 4 +-
> 14 files changed, 37 insertions(+), 120 deletions(-)
> delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> rename meta-networking/recipes-protocols/net-snmp/{net-snmp_5.9.1.bb => net-snmp_5.9.3.bb} (98%)
>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> index 4cd729044..ed2ebc6d7 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> @@ -1,7 +1,8 @@
> -From 6f8ea2e841ad45eed193310b599d3f3b410ae91d Mon Sep 17 00:00:00 2001
> +From 98c62e24fdd05d7e8bd8149840bad8eb0feb3fb1 Mon Sep 17 00:00:00 2001
> From: Mingli Yu <mingli.yu@windriver.com>
> Date: Fri, 29 Jan 2021 08:49:15 +0000
> -Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and 64bit
> +Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and
> + 64bit
>
> With configure option "--with-openssl=${STAGING_EXECPREFIXDIR}", it behaves
> differently between 32bit and 64bit system as the openssl lib resides under
> @@ -15,12 +16,13 @@ So add the patch to fix the gap between 32bit and 64bit system.
> Upstream-Status: Inappropriate [configuration specific]
>
> Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
> +
> ---
> m4/ac_add_search_path.m4 | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/m4/ac_add_search_path.m4 b/m4/ac_add_search_path.m4
> -index 8e0a819..961f587 100644
> +index 8e0a819..e9585bc 100644
> --- a/m4/ac_add_search_path.m4
> +++ b/m4/ac_add_search_path.m4
> @@ -3,8 +3,8 @@ dnl Add a search path to the LIBS and CPPFLAGS variables
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> index 05a47f61c..f8a52a63f 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> @@ -1,4 +1,4 @@
> -From 69d4c517c07f55c505090e48d96ace8cd599fb26 Mon Sep 17 00:00:00 2001
> +From e86d5fd52f19b85da0b7cce660c6e65ec4c0f9bb Mon Sep 17 00:00:00 2001
> From: Li xin <lixin.fnst@cn.fujitsu.com>
> Date: Fri, 21 Aug 2015 18:23:13 +0900
> Subject: [PATCH] config_os_headers: Error Fix
> @@ -19,7 +19,7 @@ Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
> -index f07d512..2363b42 100644
> +index 01c3376..6edd85f 100644
> --- a/configure.d/config_os_headers
> +++ b/configure.d/config_os_headers
> @@ -395,8 +395,8 @@ then
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> index 22e591556..a7881a871 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> @@ -1,4 +1,4 @@
> -From 2bf1bbe1d428ed06d57aa76b03e394b72ff2216d Mon Sep 17 00:00:00 2001
> +From 8097734b27fd146f358a4edd0d1a0d28309bd9a4 Mon Sep 17 00:00:00 2001
> From: Khem Raj <raj.khem@gmail.com>
> Date: Fri, 22 Jul 2016 18:34:39 +0000
> Subject: [PATCH] get_pid_from_inode: Include limit.h
> @@ -14,7 +14,7 @@ Signed-off-by: Khem Raj <raj.khem@gmail.com>
> 1 file changed, 1 insertion(+)
>
> diff --git a/agent/mibgroup/util_funcs/get_pid_from_inode.c b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> -index aee907d..7abaec2 100644
> +index 5788e1d..ea380a6 100644
> --- a/agent/mibgroup/util_funcs/get_pid_from_inode.c
> +++ b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> @@ -6,6 +6,7 @@
> @@ -23,5 +23,5 @@ index aee907d..7abaec2 100644
> #include <ctype.h>
> +#include <limits.h>
> #include <stdio.h>
> - #if HAVE_STDLIB_H
> + #ifdef HAVE_STDLIB_H
> #include <stdlib.h>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> deleted file mode 100644
> index 4fc9e54b4..000000000
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> +++ /dev/null
> @@ -1,55 +0,0 @@
> -From 94ca941e06bef157bf0e13251f8ca1471daa9393 Mon Sep 17 00:00:00 2001
> -From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
> -Date: Fri, 27 Aug 2021 14:21:45 +0300
> -Subject: [PATCH] snmpd: always exit after displaying usage
> -
> -Currently, viewing the help text with -h results in snmpd being started
> -in the background, whereas this does not happen with --help. Similarly,
> -when an error is detected in command line syntax, the help text is
> -displayed but sometimes snmpd gets started anyway, depending on the
> -execution path.
> -
> -This patch makes snmpd consistently terminate whenever the usage
> -function gets called. It also removes the goto statements no longer
> -needed.
> -
> -Upstream-Status: Backport
> -[https://github.com/net-snmp/net-snmp/commit/94ca941e06bef157bf0e13251f8ca1471daa9393]
> -
> -Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
> ----
> - agent/snmpd.c | 4 ++--
> - 1 file changed, 2 insertions(+), 2 deletions(-)
> -
> -diff --git a/agent/snmpd.c b/agent/snmpd.c
> -index f5aab0af8..90de12d99 100644
> ---- a/agent/snmpd.c
> -+++ b/agent/snmpd.c
> -@@ -289,6 +289,8 @@ usage(char *prog)
> - " -S d|i|0-7\t\tuse -Ls <facility> instead\n"
> - "\n"
> - );
> -+ SOCK_CLEANUP;
> -+ exit(1);
> - }
> -
> - static void
> -@@ -494,7 +496,6 @@ main(int argc, char *argv[])
> - case '-':
> - if (strcasecmp(optarg, "help") == 0) {
> - usage(argv[0]);
> -- goto out;
> - }
> - if (strcasecmp(optarg, "version") == 0) {
> - version();
> -@@ -783,7 +784,6 @@ main(int argc, char *argv[])
> - fprintf(stderr, "%s: Illegal argument -X:"
> - "AgentX support not compiled in.\n", argv[0]);
> - usage(argv[0]);
> -- goto out;
> - #endif
> - break;
> -
> ---
> -2.25.1
> -
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> index 42352a6b0..af6334f72 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> @@ -1,4 +1,4 @@
> -From f3ff99736b8cccbba77349b0d10a3cee366a4c87 Mon Sep 17 00:00:00 2001
> +From f4e1acd4f509dd26cf88da872bd5adcf884f4a5f Mon Sep 17 00:00:00 2001
> From: Khem Raj <raj.khem@gmail.com>
> Date: Fri, 18 Sep 2015 00:28:45 -0400
> Subject: [PATCH] snmplib/keytools.c: Don't check for return from
> @@ -17,7 +17,7 @@ Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
> 1 file changed, 1 insertion(+), 4 deletions(-)
>
> diff --git a/snmplib/keytools.c b/snmplib/keytools.c
> -index 129a7c0..2fc1efc 100644
> +index 14a452a..fb1694b 100644
> --- a/snmplib/keytools.c
> +++ b/snmplib/keytools.c
> @@ -183,10 +183,7 @@ generate_Ku(const oid * hashtype, u_int hashtype_len,
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> deleted file mode 100644
> index c973bde72..000000000
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> +++ /dev/null
> @@ -1,28 +0,0 @@
> -From 0a02ac779c51a2b4af3b58cb96967bf3eff80367 Mon Sep 17 00:00:00 2001
> -From: Wenlin Kang <wenlin.kang@windriver.com>
> -Date: Wed, 24 May 2017 16:45:34 +0800
> -Subject: [PATCH] configure: fix a cc check issue.
> -
> -When has "." in cc value, the expression
> -$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'
> -can't get corretly the cc's value.
> -
> -Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
> -
> ----
> - configure.d/config_project_perl_python | 2 +-
> - 1 file changed, 1 insertion(+), 1 deletion(-)
> -
> -diff --git a/configure.d/config_project_perl_python b/configure.d/config_project_perl_python
> -index 475c843..22d2ad3 100644
> ---- a/configure.d/config_project_perl_python
> -+++ b/configure.d/config_project_perl_python
> -@@ -87,7 +87,7 @@ if test "x$install_perl" != "xno" ; then
> - if test "x$enable_perl_cc_checks" != "xno" ; then
> - AC_MSG_CHECKING([for Perl cc])
> - changequote(, )
> -- PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'`
> -+ PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\.\w\s\/]+).;\s*/$1/);'`
> - changequote([, ])
> - if test "x$PERLCC" != "x" ; then
> - AC_MSG_RESULT([$PERLCC])
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> index bfddc63dd..6e224188a 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> @@ -1,4 +1,4 @@
> -From 011bdcd07f2a289d0cfc1b411c03c0cc7c42dad1 Mon Sep 17 00:00:00 2001
> +From 6d655ba677563ac9d62d4d8eee59fdb39d486c02 Mon Sep 17 00:00:00 2001
> From: Wenlin Kang <wenlin.kang@windriver.com>
> Date: Wed, 24 May 2017 17:10:20 +0800
> Subject: [PATCH] configure: fix incorrect variable
> @@ -14,10 +14,10 @@ Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Makefile.in b/Makefile.in
> -index 912f6b2..a53d1b2 100644
> +index f1cbbf5..1545be3 100644
> --- a/Makefile.in
> +++ b/Makefile.in
> -@@ -174,7 +174,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
> +@@ -173,7 +173,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
> #
> # override LD_RUN_PATH to avoid dependencies on the build directory
> perlmodules: perlmakefiles subdirs
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> index 26dd014ce..409c1e03c 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> @@ -1,4 +1,4 @@
> -From 27444fbf8323679ea0551a3bd5f04c365143d8c0 Mon Sep 17 00:00:00 2001
> +From ab1d77c52e84746e75506a2870783806bc77f396 Mon Sep 17 00:00:00 2001
> From: "Roy.Li" <rongqing.li@windriver.com>
> Date: Fri, 16 Jan 2015 14:14:01 +0800
> Subject: [PATCH] net-snmp: fix "libtool --finish"
> @@ -20,11 +20,11 @@ Signed-off-by: Roy.Li <rongqing.li@windriver.com>
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Makefile.top b/Makefile.top
> -index 6315401..fc0ee06 100644
> +index a962c54..1ba5607 100644
> --- a/Makefile.top
> +++ b/Makefile.top
> @@ -89,7 +89,7 @@ LIBREVISION = 0
> - LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) -o
> + LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) @LD_NO_UNDEFINED@ -o
> LIB_EXTENSION = la
> LIB_VERSION =
> -LIB_LDCONFIG_CMD = $(LIBTOOL) --mode=finish $(INSTALL_PREFIX)$(libdir)
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> index 022eb958f..87f192e5b 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> @@ -1,4 +1,4 @@
> -From 1e3178835217ba89aa355e2b6b88e490f17be16d Mon Sep 17 00:00:00 2001
> +From 5ad4eab43c1ea63ff343bba64d576440e8783e75 Mon Sep 17 00:00:00 2001
> From: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
> Date: Wed, 9 Jun 2021 15:47:30 +0900
> Subject: [PATCH] net snmp: fix engineBoots value on SIGHUP
> @@ -7,6 +7,7 @@ Upstream-Status: Pending
>
> Signed-off-by: Marian Florea <marian.florea@windriver.com>
> Signed-off-by: Li Zhou <li.zhou@windriver.com>
> +Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
>
> ---
> agent/snmpd.c | 1 +
> @@ -14,19 +15,18 @@ Signed-off-by: Li Zhou <li.zhou@windriver.com>
> 2 files changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/agent/snmpd.c b/agent/snmpd.c
> -index 1af439f..355b510 100644
> +index 90de12d..1ccc4db 100644
> --- a/agent/snmpd.c
> +++ b/agent/snmpd.c
> -@@ -1208,6 +1208,7 @@ receive(void)
> - snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> - netsnmp_get_version());
> - update_config();
> -+ snmp_store(app_name);
> - send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> - #if HAVE_SIGPROCMASK
> - ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> + snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> + netsnmp_get_version());
> + update_config();
> ++ snmp_store(app_name);
> + send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> + #ifdef HAVE_SIGPROCMASK
> + ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> diff --git a/snmplib/snmpv3.c b/snmplib/snmpv3.c
> -index 29c2a0f..ada961c 100644
> +index 7b1746b..4a17e0d 100644
> --- a/snmplib/snmpv3.c
> +++ b/snmplib/snmpv3.c
> @@ -1059,9 +1059,9 @@ init_snmpv3_post_config(int majorid, int minorid, void *serverarg,
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> index f1ebe2bb6..c5a453abe 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> @@ -1,4 +1,4 @@
> -From e507dcf8b29c55011f85d88bf05400d4717e4074 Mon Sep 17 00:00:00 2001
> +From ad65b106d3cb3c6e595381be1c45a73c1ef6eb5e Mon Sep 17 00:00:00 2001
> From: Chong Lu <Chong.Lu@windriver.com>
> Date: Thu, 28 May 2020 09:46:34 -0500
> Subject: [PATCH] net-snmp: add knob whether nlist.h are checked
> @@ -15,7 +15,7 @@ Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
> 1 file changed, 2 insertions(+)
>
> diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
> -index 76ef58a..f07d512 100644
> +index b9c8c31..01c3376 100644
> --- a/configure.d/config_os_headers
> +++ b/configure.d/config_os_headers
> @@ -37,6 +37,7 @@ AC_CHECK_HEADERS([getopt.h pthread.h regex.h ] dnl
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> index 2941a3609..c382c02d8 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> @@ -1,4 +1,4 @@
> -From 3ca4335ec1d6b7b384c134fc85d7a9e513c68376 Mon Sep 17 00:00:00 2001
> +From b1b9980853b1083f0c8b9f628f8b4c3a484d4f91 Mon Sep 17 00:00:00 2001
> From: Jackie Huang <jackie.huang@windriver.com>
> Date: Thu, 22 Jun 2017 10:25:08 +0800
> Subject: [PATCH] net-snmp: fix for --disable-des
> @@ -15,7 +15,7 @@ Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
> 1 file changed, 2 insertions(+)
>
> diff --git a/snmplib/scapi.c b/snmplib/scapi.c
> -index 00c9174..c6875e1 100644
> +index 54fdd5c..0f7e931 100644
> --- a/snmplib/scapi.c
> +++ b/snmplib/scapi.c
> @@ -85,7 +85,9 @@ netsnmp_feature_child_of(usm_scapi, usm_support);
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> index 807983f61..09ca532a7 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> @@ -1,4 +1,4 @@
> -From 972df16e9599dffddf5d714a4cbf43008c771122 Mon Sep 17 00:00:00 2001
> +From 36a5656db7ea75dd15f35a6c1728937c6e2b901c Mon Sep 17 00:00:00 2001
> From: Jackie Huang <jackie.huang@windriver.com>
> Date: Wed, 14 Jan 2015 15:10:06 +0800
> Subject: [PATCH] testing: add the output format for ptest
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> index bf1e7bedf..c0b51c51e 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> @@ -1,4 +1,4 @@
> -From 84e362fe97f50fbad69f083bc2d8fe18f83eb2f7 Mon Sep 17 00:00:00 2001
> +From b923cd38e2503b86aedf66b767fd7f51c9f25645 Mon Sep 17 00:00:00 2001
> From: "douglas.royds" <douglas.royds@taitradio.com>
> Date: Wed, 21 Nov 2018 13:52:18 +1300
> Subject: [PATCH] net-snmp: Reproducibility: Don't check build host for
> @@ -13,7 +13,7 @@ set in the environment to "yes" or "no" as appropriate for the target platform.
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/configure.d/config_os_misc4 b/configure.d/config_os_misc4
> -index 6f23c8e..8cea75a 100644
> +index b6864d9..07ca922 100644
> --- a/configure.d/config_os_misc4
> +++ b/configure.d/config_os_misc4
> @@ -99,9 +99,9 @@ if test x$LPSTAT_PATH != x; then
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
> similarity index 98%
> rename from meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb
> rename to meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
> index 30c0ce74c..7af514756 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
> @@ -21,15 +21,13 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.tar.gz \
> file://0001-config_os_headers-Error-Fix.patch \
> file://0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch \
> file://0001-get_pid_from_inode-Include-limit.h.patch \
> - file://0002-configure-fix-a-cc-check-issue.patch \
> file://0004-configure-fix-incorrect-variable.patch \
> file://net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch \
> file://net-snmp-fix-for-disable-des.patch \
> file://reproducibility-have-printcap.patch \
> file://0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch \
> - file://0001-snmpd-always-exit-after-displaying-usage.patch \
> "
> -SRC_URI[sha256sum] = "eb7fd4a44de6cddbffd9a92a85ad1309e5c1054fb9d5a7dd93079c8953f48c3f"
> +SRC_URI[sha256sum] = "2097f29b7e1bf3f1300b4bae52fa2308d0bb8d5d3998dbe02f9462a413a2ef0a"
>
> UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/net-snmp/files/net-snmp/"
> UPSTREAM_CHECK_REGEX = "/net-snmp/(?P<pver>\d+(\.\d+)+)/"
> --
> 2.25.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#99037): https://lists.openembedded.org/g/openembedded-devel/message/99037
> Mute This Topic: https://lists.openembedded.org/mt/94085410/1997914
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [raj.khem@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
[-- Attachment #2: Type: text/html, Size: 39039 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
2022-10-03 17:11 ` Mali, Narpat
@ 2022-10-03 19:41 ` Khem Raj
2022-10-04 7:15 ` [oe] [kirkstone] [PATCH " Mali, Narpat
0 siblings, 1 reply; 6+ messages in thread
From: Khem Raj @ 2022-10-03 19:41 UTC (permalink / raw)
To: Mali, Narpat
Cc: G Pillai, Hari, Polampalli, Archana, Urade, Yogita, openembedded-devel
[-- Attachment #1: Type: text/plain, Size: 28863 bytes --]
Ok it will be good to add [kirkstone] in subject
So folks know where intend it for
On Mon, Oct 3, 2022 at 10:12 AM Mali, Narpat <Narpat.Mali@windriver.com>
wrote:
> Hi Khem Raj,
>
>
>
> It is the same commit but, we need this patch commit for “kirkstone”
> branch of meta-openembedded.
>
> We observed that the “master” branch has “net-snmp 5.9.3” version at
> https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp
> and the “kirkstone” branch has “net-snmp 5.9.1” at
> https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp?h=kirkstone
>
>
>
> Since, our product is using “kirkstone” branch of meta-openembedded so,
> CVE-2022-24805 to CVE-2022-24810 are vulnerable for our product.
>
> Could you please let us know, How to get net-snmp upgraded to 5.9.3
> version in “kirkstone” branch ?
>
>
>
> Best Regards,
>
> Narpat Mali
>
>
>
> Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for
> Windows
>
>
> ------------------------------
> *From:* Khem Raj <raj.khem@gmail.com>
> *Sent:* Monday, October 3, 2022 12:29:18 PM
> *To:* Mali, Narpat <Narpat.Mali@windriver.com>
> *Cc:* openembedded-devel@lists.openembedded.org <
> openembedded-devel@lists.openembedded.org>; Polampalli, Archana <
> Archana.Polampalli@windriver.com>; Urade, Yogita <
> Yogita.Urade@windriver.com>; G Pillai, Hari <Hari.GPillai@windriver.com>
> *Subject:* Re: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade
> 5.9.1 -> 5.9.3
>
> [Please note: This e-mail is from an EXTERNAL e-mail address]
>
>
> how different is this from
>
> https://git.openembedded.org/meta-openembedded/commit/?id=bf4a826c7de51dcdac87f81fa2bd2301629d50db
>
> On Sun, Oct 2, 2022 at 11:27 PM Narpat Mali <narpat.mali@windriver.com>
> wrote:
> >
> > Issue: LIN1022-1131, LIN1022-1132, LIN1022-1133, LIN1022-1134,
> LIN1022-1135
> > Issue: LIN1022-1136
> >
> > Upgrade summary:
> > ----------------
> > - drop 0002-configure-fix-a-cc-check-issue.patch, as it was replaced with
> > upstream commit
> https://github.com/net-snmp/net-snmp/commit/dbb49acfa2af
> > - drop 0001-snmpd-always-exit-after-displaying-usage.patch backport
> > - rebase net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch manually
> > - refresh patches with devtool to get rid of fuzz
> >
> > Changelog:
> > ----------
> > *5.9.3*:
> > security:
> > - These two CVEs can be exploited by a user with read-only credentials:
> > - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
> > NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
> > - CVE-2022-24809 A malformed OID in a GET-NEXT to the
> nsVacmAccessTable
> > can cause a NULL pointer dereference.
> > - These CVEs can be exploited by a user with read-write credentials:
> > - CVE-2022-24806 Improper Input Validation when SETing malformed
> > OIDs in master agent and subagent simultaneously
> > - CVE-2022-24807 A malformed OID in a SET request to
> > SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
> > out-of-bounds memory access.
> > - CVE-2022-24808 A malformed OID in a SET request to
> > NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer
> dereference
> > - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
> > can cause a NULL pointer dereference.
> > - To avoid these flaws, use strong SNMPv3 credentials and do not share
> them.
> > If you must use SNMPv1 or SNMPv2c, use a complex community string
> > and enhance the protection by restricting access to a given IP
> address
> > range.
> > - Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE
> for
> > reporting the following CVEs that have been fixed in this release,
> and
> > to Arista Networks for providing fixes.
> >
> > Windows:
> > - WinExtDLL: Fix multiple compiler warnings
> > - WinExtDLL: Make long strings occupy a single line Make it easier to
> > look up error messages in the source code by making long strings
> > occupy a single source code line.
> > - WinExtDLL: Restore MIB-II support Make winExtDLL work on 64-bit
> > Windows systems") caused snmpd to skip MIB-II on 64-bit systems.
> >
> > IF-MIB: Update ifTable entries even if the interface name has changed
> > At least on Linux a network interface index may be reused for a
> > network interface with a different name. Hence this patch that
> > enables replacing network interface information even if the network
> > interface name has changed.
> >
> > unspecified:
> > - Moved transport code into a separate subdirectory in snmplib
> > - Snmplib: remove inline versions of container funcs".
> >
> > misc:
> > - snmp-create-v3-user: Fix the snmpd.conf path @datadir@ is
> > expanded in ${datarootdir} so datarootdir must be set before
> > @datadir@ is used.
> >
> > *5.9.2*:
> > skipped due to a last minute library versioning found bug -- use 5.9.3
> instead
> >
> > (master rev: bf4a826c7de51dcdac87f81fa2bd2301629d50db) -- backport
> >
> > Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
> > ---
> > ...ath.m4-keep-consistent-between-32bit.patch | 8 ++-
> > .../0001-config_os_headers-Error-Fix.patch | 4 +-
> > ...1-get_pid_from_inode-Include-limit.h.patch | 6 +-
> > ...d-always-exit-after-displaying-usage.patch | 55 -------------------
> > ....c-Don-t-check-for-return-from-EVP_M.patch | 4 +-
> > .../0002-configure-fix-a-cc-check-issue.patch | 28 ----------
> > ...004-configure-fix-incorrect-variable.patch | 6 +-
> > .../net-snmp/fix-libtool-finish.patch | 6 +-
> > ....7.2-fix-engineBoots-value-on-SIGHUP.patch | 22 ++++----
> > ...add-knob-whether-nlist.h-are-checked.patch | 4 +-
> > .../net-snmp-fix-for-disable-des.patch | 4 +-
> > ...ting-add-the-output-format-for-ptest.patch | 2 +-
> > .../reproducibility-have-printcap.patch | 4 +-
> > .../{net-snmp_5.9.1.bb => net-snmp_5.9.3.bb} | 4 +-
> > 14 files changed, 37 insertions(+), 120 deletions(-)
> > delete mode 100644
> meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> > delete mode 100644
> meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> > rename meta-networking/recipes-protocols/net-snmp/{net-snmp_5.9.1.bb
> => net-snmp_5.9.3.bb} (98%)
> >
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> > index 4cd729044..ed2ebc6d7 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> > @@ -1,7 +1,8 @@
> > -From 6f8ea2e841ad45eed193310b599d3f3b410ae91d Mon Sep 17 00:00:00 2001
> > +From 98c62e24fdd05d7e8bd8149840bad8eb0feb3fb1 Mon Sep 17 00:00:00 2001
> > From: Mingli Yu <mingli.yu@windriver.com>
> > Date: Fri, 29 Jan 2021 08:49:15 +0000
> > -Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit
> and 64bit
> > +Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit
> and
> > + 64bit
> >
> > With configure option "--with-openssl=${STAGING_EXECPREFIXDIR}", it
> behaves
> > differently between 32bit and 64bit system as the openssl lib resides
> under
> > @@ -15,12 +16,13 @@ So add the patch to fix the gap between 32bit and
> 64bit system.
> > Upstream-Status: Inappropriate [configuration specific]
> >
> > Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
> > +
> > ---
> > m4/ac_add_search_path.m4 | 4 ++--
> > 1 file changed, 2 insertions(+), 2 deletions(-)
> >
> > diff --git a/m4/ac_add_search_path.m4 b/m4/ac_add_search_path.m4
> > -index 8e0a819..961f587 100644
> > +index 8e0a819..e9585bc 100644
> > --- a/m4/ac_add_search_path.m4
> > +++ b/m4/ac_add_search_path.m4
> > @@ -3,8 +3,8 @@ dnl Add a search path to the LIBS and CPPFLAGS variables
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> > index 05a47f61c..f8a52a63f 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> > @@ -1,4 +1,4 @@
> > -From 69d4c517c07f55c505090e48d96ace8cd599fb26 Mon Sep 17 00:00:00 2001
> > +From e86d5fd52f19b85da0b7cce660c6e65ec4c0f9bb Mon Sep 17 00:00:00 2001
> > From: Li xin <lixin.fnst@cn.fujitsu.com>
> > Date: Fri, 21 Aug 2015 18:23:13 +0900
> > Subject: [PATCH] config_os_headers: Error Fix
> > @@ -19,7 +19,7 @@ Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com>
> > 1 file changed, 2 insertions(+), 2 deletions(-)
> >
> > diff --git a/configure.d/config_os_headers
> b/configure.d/config_os_headers
> > -index f07d512..2363b42 100644
> > +index 01c3376..6edd85f 100644
> > --- a/configure.d/config_os_headers
> > +++ b/configure.d/config_os_headers
> > @@ -395,8 +395,8 @@ then
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> > index 22e591556..a7881a871 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> > @@ -1,4 +1,4 @@
> > -From 2bf1bbe1d428ed06d57aa76b03e394b72ff2216d Mon Sep 17 00:00:00 2001
> > +From 8097734b27fd146f358a4edd0d1a0d28309bd9a4 Mon Sep 17 00:00:00 2001
> > From: Khem Raj <raj.khem@gmail.com>
> > Date: Fri, 22 Jul 2016 18:34:39 +0000
> > Subject: [PATCH] get_pid_from_inode: Include limit.h
> > @@ -14,7 +14,7 @@ Signed-off-by: Khem Raj <raj.khem@gmail.com>
> > 1 file changed, 1 insertion(+)
> >
> > diff --git a/agent/mibgroup/util_funcs/get_pid_from_inode.c
> b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> > -index aee907d..7abaec2 100644
> > +index 5788e1d..ea380a6 100644
> > --- a/agent/mibgroup/util_funcs/get_pid_from_inode.c
> > +++ b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> > @@ -6,6 +6,7 @@
> > @@ -23,5 +23,5 @@ index aee907d..7abaec2 100644
> > #include <ctype.h>
> > +#include <limits.h>
> > #include <stdio.h>
> > - #if HAVE_STDLIB_H
> > + #ifdef HAVE_STDLIB_H
> > #include <stdlib.h>
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> > deleted file mode 100644
> > index 4fc9e54b4..000000000
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> > +++ /dev/null
> > @@ -1,55 +0,0 @@
> > -From 94ca941e06bef157bf0e13251f8ca1471daa9393 Mon Sep 17 00:00:00 2001
> > -From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
> > -Date: Fri, 27 Aug 2021 14:21:45 +0300
> > -Subject: [PATCH] snmpd: always exit after displaying usage
> > -
> > -Currently, viewing the help text with -h results in snmpd being started
> > -in the background, whereas this does not happen with --help. Similarly,
> > -when an error is detected in command line syntax, the help text is
> > -displayed but sometimes snmpd gets started anyway, depending on the
> > -execution path.
> > -
> > -This patch makes snmpd consistently terminate whenever the usage
> > -function gets called. It also removes the goto statements no longer
> > -needed.
> > -
> > -Upstream-Status: Backport
> > -[
> https://github.com/net-snmp/net-snmp/commit/94ca941e06bef157bf0e13251f8ca1471daa9393
> ]
> > -
> > -Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
> > ----
> > - agent/snmpd.c | 4 ++--
> > - 1 file changed, 2 insertions(+), 2 deletions(-)
> > -
> > -diff --git a/agent/snmpd.c b/agent/snmpd.c
> > -index f5aab0af8..90de12d99 100644
> > ---- a/agent/snmpd.c
> > -+++ b/agent/snmpd.c
> > -@@ -289,6 +289,8 @@ usage(char *prog)
> > - " -S d|i|0-7\t\tuse -Ls <facility> instead\n"
> > - "\n"
> > - );
> > -+ SOCK_CLEANUP;
> > -+ exit(1);
> > - }
> > -
> > - static void
> > -@@ -494,7 +496,6 @@ main(int argc, char *argv[])
> > - case '-':
> > - if (strcasecmp(optarg, "help") == 0) {
> > - usage(argv[0]);
> > -- goto out;
> > - }
> > - if (strcasecmp(optarg, "version") == 0) {
> > - version();
> > -@@ -783,7 +784,6 @@ main(int argc, char *argv[])
> > - fprintf(stderr, "%s: Illegal argument -X:"
> > - "AgentX support not compiled in.\n",
> argv[0]);
> > - usage(argv[0]);
> > -- goto out;
> > - #endif
> > - break;
> > -
> > ---
> > -2.25.1
> > -
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> > index 42352a6b0..af6334f72 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> > @@ -1,4 +1,4 @@
> > -From f3ff99736b8cccbba77349b0d10a3cee366a4c87 Mon Sep 17 00:00:00 2001
> > +From f4e1acd4f509dd26cf88da872bd5adcf884f4a5f Mon Sep 17 00:00:00 2001
> > From: Khem Raj <raj.khem@gmail.com>
> > Date: Fri, 18 Sep 2015 00:28:45 -0400
> > Subject: [PATCH] snmplib/keytools.c: Don't check for return from
> > @@ -17,7 +17,7 @@ Signed-off-by: Ovidiu Panait <
> ovidiu.panait@windriver.com>
> > 1 file changed, 1 insertion(+), 4 deletions(-)
> >
> > diff --git a/snmplib/keytools.c b/snmplib/keytools.c
> > -index 129a7c0..2fc1efc 100644
> > +index 14a452a..fb1694b 100644
> > --- a/snmplib/keytools.c
> > +++ b/snmplib/keytools.c
> > @@ -183,10 +183,7 @@ generate_Ku(const oid * hashtype, u_int
> hashtype_len,
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> > deleted file mode 100644
> > index c973bde72..000000000
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> > +++ /dev/null
> > @@ -1,28 +0,0 @@
> > -From 0a02ac779c51a2b4af3b58cb96967bf3eff80367 Mon Sep 17 00:00:00 2001
> > -From: Wenlin Kang <wenlin.kang@windriver.com>
> > -Date: Wed, 24 May 2017 16:45:34 +0800
> > -Subject: [PATCH] configure: fix a cc check issue.
> > -
> > -When has "." in cc value, the expression
> > -$myperl -V:cc | $myperl -n -e 'print if
> (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'
> > -can't get corretly the cc's value.
> > -
> > -Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com>
> > -
> > ----
> > - configure.d/config_project_perl_python | 2 +-
> > - 1 file changed, 1 insertion(+), 1 deletion(-)
> > -
> > -diff --git a/configure.d/config_project_perl_python
> b/configure.d/config_project_perl_python
> > -index 475c843..22d2ad3 100644
> > ---- a/configure.d/config_project_perl_python
> > -+++ b/configure.d/config_project_perl_python
> > -@@ -87,7 +87,7 @@ if test "x$install_perl" != "xno" ; then
> > - if test "x$enable_perl_cc_checks" != "xno" ; then
> > - AC_MSG_CHECKING([for Perl cc])
> > - changequote(, )
> > -- PERLCC=`$myperl -V:cc | $myperl -n -e 'print if
> (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'`
> > -+ PERLCC=`$myperl -V:cc | $myperl -n -e 'print if
> (s/^\s*cc=.([-=\.\w\s\/]+).;\s*/$1/);'`
> > - changequote([, ])
> > - if test "x$PERLCC" != "x" ; then
> > - AC_MSG_RESULT([$PERLCC])
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> > index bfddc63dd..6e224188a 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> > @@ -1,4 +1,4 @@
> > -From 011bdcd07f2a289d0cfc1b411c03c0cc7c42dad1 Mon Sep 17 00:00:00 2001
> > +From 6d655ba677563ac9d62d4d8eee59fdb39d486c02 Mon Sep 17 00:00:00 2001
> > From: Wenlin Kang <wenlin.kang@windriver.com>
> > Date: Wed, 24 May 2017 17:10:20 +0800
> > Subject: [PATCH] configure: fix incorrect variable
> > @@ -14,10 +14,10 @@ Signed-off-by: Wenlin Kang <
> wenlin.kang@windriver.com>
> > 1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/Makefile.in b/Makefile.in
> > -index 912f6b2..a53d1b2 100644
> > +index f1cbbf5..1545be3 100644
> > --- a/Makefile.in
> > +++ b/Makefile.in
> > -@@ -174,7 +174,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@
> cleanfeatures perlcleanfeatures pyt
> > +@@ -173,7 +173,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@
> cleanfeatures perlcleanfeatures pyt
> > #
> > # override LD_RUN_PATH to avoid dependencies on the build directory
> > perlmodules: perlmakefiles subdirs
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> > index 26dd014ce..409c1e03c 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> > @@ -1,4 +1,4 @@
> > -From 27444fbf8323679ea0551a3bd5f04c365143d8c0 Mon Sep 17 00:00:00 2001
> > +From ab1d77c52e84746e75506a2870783806bc77f396 Mon Sep 17 00:00:00 2001
> > From: "Roy.Li" <rongqing.li@windriver.com>
> > Date: Fri, 16 Jan 2015 14:14:01 +0800
> > Subject: [PATCH] net-snmp: fix "libtool --finish"
> > @@ -20,11 +20,11 @@ Signed-off-by: Roy.Li <rongqing.li@windriver.com>
> > 1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/Makefile.top b/Makefile.top
> > -index 6315401..fc0ee06 100644
> > +index a962c54..1ba5607 100644
> > --- a/Makefile.top
> > +++ b/Makefile.top
> > @@ -89,7 +89,7 @@ LIBREVISION = 0
> > - LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath
> $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) -o
> > + LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath
> $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE)
> @LD_NO_UNDEFINED@ -o
> > LIB_EXTENSION = la
> > LIB_VERSION =
> > -LIB_LDCONFIG_CMD = $(LIBTOOL) --mode=finish $(INSTALL_PREFIX)$(libdir)
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> > index 022eb958f..87f192e5b 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> > @@ -1,4 +1,4 @@
> > -From 1e3178835217ba89aa355e2b6b88e490f17be16d Mon Sep 17 00:00:00 2001
> > +From 5ad4eab43c1ea63ff343bba64d576440e8783e75 Mon Sep 17 00:00:00 2001
> > From: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
> > Date: Wed, 9 Jun 2021 15:47:30 +0900
> > Subject: [PATCH] net snmp: fix engineBoots value on SIGHUP
> > @@ -7,6 +7,7 @@ Upstream-Status: Pending
> >
> > Signed-off-by: Marian Florea <marian.florea@windriver.com>
> > Signed-off-by: Li Zhou <li.zhou@windriver.com>
> > +Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
> >
> > ---
> > agent/snmpd.c | 1 +
> > @@ -14,19 +15,18 @@ Signed-off-by: Li Zhou <li.zhou@windriver.com>
> > 2 files changed, 3 insertions(+), 2 deletions(-)
> >
> > diff --git a/agent/snmpd.c b/agent/snmpd.c
> > -index 1af439f..355b510 100644
> > +index 90de12d..1ccc4db 100644
> > --- a/agent/snmpd.c
> > +++ b/agent/snmpd.c
> > -@@ -1208,6 +1208,7 @@ receive(void)
> > - snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> > - netsnmp_get_version());
> > - update_config();
> > -+ snmp_store(app_name);
> > - send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> > - #if HAVE_SIGPROCMASK
> > - ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> > + snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> > + netsnmp_get_version());
> > + update_config();
> > ++ snmp_store(app_name);
> > + send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> > + #ifdef HAVE_SIGPROCMASK
> > + ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> > diff --git a/snmplib/snmpv3.c b/snmplib/snmpv3.c
> > -index 29c2a0f..ada961c 100644
> > +index 7b1746b..4a17e0d 100644
> > --- a/snmplib/snmpv3.c
> > +++ b/snmplib/snmpv3.c
> > @@ -1059,9 +1059,9 @@ init_snmpv3_post_config(int majorid, int minorid,
> void *serverarg,
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> > index f1ebe2bb6..c5a453abe 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> > @@ -1,4 +1,4 @@
> > -From e507dcf8b29c55011f85d88bf05400d4717e4074 Mon Sep 17 00:00:00 2001
> > +From ad65b106d3cb3c6e595381be1c45a73c1ef6eb5e Mon Sep 17 00:00:00 2001
> > From: Chong Lu <Chong.Lu@windriver.com>
> > Date: Thu, 28 May 2020 09:46:34 -0500
> > Subject: [PATCH] net-snmp: add knob whether nlist.h are checked
> > @@ -15,7 +15,7 @@ Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
> > 1 file changed, 2 insertions(+)
> >
> > diff --git a/configure.d/config_os_headers
> b/configure.d/config_os_headers
> > -index 76ef58a..f07d512 100644
> > +index b9c8c31..01c3376 100644
> > --- a/configure.d/config_os_headers
> > +++ b/configure.d/config_os_headers
> > @@ -37,6 +37,7 @@ AC_CHECK_HEADERS([getopt.h pthread.h regex.h
> ] dnl
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> > index 2941a3609..c382c02d8 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> > @@ -1,4 +1,4 @@
> > -From 3ca4335ec1d6b7b384c134fc85d7a9e513c68376 Mon Sep 17 00:00:00 2001
> > +From b1b9980853b1083f0c8b9f628f8b4c3a484d4f91 Mon Sep 17 00:00:00 2001
> > From: Jackie Huang <jackie.huang@windriver.com>
> > Date: Thu, 22 Jun 2017 10:25:08 +0800
> > Subject: [PATCH] net-snmp: fix for --disable-des
> > @@ -15,7 +15,7 @@ Signed-off-by: Jackie Huang <
> jackie.huang@windriver.com>
> > 1 file changed, 2 insertions(+)
> >
> > diff --git a/snmplib/scapi.c b/snmplib/scapi.c
> > -index 00c9174..c6875e1 100644
> > +index 54fdd5c..0f7e931 100644
> > --- a/snmplib/scapi.c
> > +++ b/snmplib/scapi.c
> > @@ -85,7 +85,9 @@ netsnmp_feature_child_of(usm_scapi, usm_support);
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> > index 807983f61..09ca532a7 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> > @@ -1,4 +1,4 @@
> > -From 972df16e9599dffddf5d714a4cbf43008c771122 Mon Sep 17 00:00:00 2001
> > +From 36a5656db7ea75dd15f35a6c1728937c6e2b901c Mon Sep 17 00:00:00 2001
> > From: Jackie Huang <jackie.huang@windriver.com>
> > Date: Wed, 14 Jan 2015 15:10:06 +0800
> > Subject: [PATCH] testing: add the output format for ptest
> > diff --git
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> > index bf1e7bedf..c0b51c51e 100644
> > ---
> a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> > +++
> b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> > @@ -1,4 +1,4 @@
> > -From 84e362fe97f50fbad69f083bc2d8fe18f83eb2f7 Mon Sep 17 00:00:00 2001
> > +From b923cd38e2503b86aedf66b767fd7f51c9f25645 Mon Sep 17 00:00:00 2001
> > From: "douglas.royds" <douglas.royds@taitradio.com>
> > Date: Wed, 21 Nov 2018 13:52:18 +1300
> > Subject: [PATCH] net-snmp: Reproducibility: Don't check build host for
> > @@ -13,7 +13,7 @@ set in the environment to "yes" or "no" as appropriate
> for the target platform.
> > 1 file changed, 2 insertions(+), 2 deletions(-)
> >
> > diff --git a/configure.d/config_os_misc4 b/configure.d/config_os_misc4
> > -index 6f23c8e..8cea75a 100644
> > +index b6864d9..07ca922 100644
> > --- a/configure.d/config_os_misc4
> > +++ b/configure.d/config_os_misc4
> > @@ -99,9 +99,9 @@ if test x$LPSTAT_PATH != x; then
> > diff --git a/meta-networking/recipes-protocols/net-snmp/
> net-snmp_5.9.1.bb b/meta-networking/recipes-protocols/net-snmp/
> net-snmp_5.9.3.bb
> > similarity index 98%
> > rename from meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb
> > rename to meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
> > index 30c0ce74c..7af514756 100644
> > --- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb
> > +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb
> > @@ -21,15 +21,13 @@ SRC_URI =
> "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.tar.gz \
> > file://0001-config_os_headers-Error-Fix.patch \
> >
> file://0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch \
> > file://0001-get_pid_from_inode-Include-limit.h.patch \
> > - file://0002-configure-fix-a-cc-check-issue.patch \
> > file://0004-configure-fix-incorrect-variable.patch \
> > file://net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> \
> > file://net-snmp-fix-for-disable-des.patch \
> > file://reproducibility-have-printcap.patch \
> >
> file://0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch \
> > - file://0001-snmpd-always-exit-after-displaying-usage.patch \
> > "
> > -SRC_URI[sha256sum] =
> "eb7fd4a44de6cddbffd9a92a85ad1309e5c1054fb9d5a7dd93079c8953f48c3f"
> > +SRC_URI[sha256sum] =
> "2097f29b7e1bf3f1300b4bae52fa2308d0bb8d5d3998dbe02f9462a413a2ef0a"
> >
> > UPSTREAM_CHECK_URI = "
> https://sourceforge.net/projects/net-snmp/files/net-snmp/"
> > UPSTREAM_CHECK_REGEX = "/net-snmp/(?P<pver>\d+(\.\d+)+)/"
> > --
> > 2.25.1
> >
> >
> > -=-=-=-=-=-=-=-=-=-=-=-
> > Links: You receive all messages sent to this group.
> > View/Reply Online (#99037):
> https://lists.openembedded.org/g/openembedded-devel/message/99037
> > Mute This Topic: https://lists.openembedded.org/mt/94085410/1997914
> > Group Owner: openembedded-devel+owner@lists.openembedded.org
> > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [
> raj.khem@gmail.com]
> > -=-=-=-=-=-=-=-=-=-=-=-
> >
>
[-- Attachment #2: Type: text/html, Size: 37669 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: [oe] [kirkstone] [PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
2022-10-03 19:41 ` Khem Raj
@ 2022-10-04 7:15 ` Mali, Narpat
2022-10-06 8:17 ` Mali, Narpat
0 siblings, 1 reply; 6+ messages in thread
From: Mali, Narpat @ 2022-10-04 7:15 UTC (permalink / raw)
To: Khem Raj
Cc: G Pillai, Hari, Polampalli, Archana, Urade, Yogita, openembedded-devel
[-- Attachment #1.1: Type: text/plain, Size: 34389 bytes --]
Hi Khem Raj,
Have added the “[kirkstone]” in subject.
Do I need to send the patch again ?
Best Regards,
Narpat Mali
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows
From: Khem Raj<mailto:raj.khem@gmail.com>
Sent: 04 October 2022 01:11
To: Mali, Narpat<mailto:Narpat.Mali@windriver.com>
Cc: G Pillai, Hari<mailto:Hari.GPillai@windriver.com>; Polampalli, Archana<mailto:Archana.Polampalli@windriver.com>; Urade, Yogita<mailto:Yogita.Urade@windriver.com>; openembedded-devel@lists.openembedded.org<mailto:openembedded-devel@lists.openembedded.org>
Subject: Re: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
[Please note: This e-mail is from an EXTERNAL e-mail address]
Ok it will be good to add [kirkstone] in subject
So folks know where intend it for
On Mon, Oct 3, 2022 at 10:12 AM Mali, Narpat <Narpat.Mali@windriver.com<mailto:Narpat.Mali@windriver.com>> wrote:
Hi Khem Raj,
It is the same commit but, we need this patch commit for “kirkstone” branch of meta-openembedded.
We observed that the “master” branch has “net-snmp 5.9.3” version at https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp<https://urldefense.com/v3/__https:/git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtigk1r7C$> and the “kirkstone” branch has “net-snmp 5.9.1” at https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp?h=kirkstone<https://urldefense.com/v3/__https:/git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp?h=kirkstone__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtnBwmXJ0$>
Since, our product is using “kirkstone” branch of meta-openembedded so, CVE-2022-24805 to CVE-2022-24810 are vulnerable for our product.
Could you please let us know, How to get net-snmp upgraded to 5.9.3 version in “kirkstone” branch ?
Best Regards,
Narpat Mali
Sent from Mail<https://urldefense.com/v3/__https:/go.microsoft.com/fwlink/?LinkId=550986__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtrYRmqeF$> for Windows
From: Khem Raj <raj.khem@gmail.com<mailto:raj.khem@gmail.com>>
Sent: Monday, October 3, 2022 12:29:18 PM
To: Mali, Narpat <Narpat.Mali@windriver.com<mailto:Narpat.Mali@windriver.com>>
Cc: openembedded-devel@lists.openembedded.org<mailto:openembedded-devel@lists.openembedded.org> <openembedded-devel@lists.openembedded.org<mailto:openembedded-devel@lists.openembedded.org>>; Polampalli, Archana <Archana.Polampalli@windriver.com<mailto:Archana.Polampalli@windriver.com>>; Urade, Yogita <Yogita.Urade@windriver.com<mailto:Yogita.Urade@windriver.com>>; G Pillai, Hari <Hari.GPillai@windriver.com<mailto:Hari.GPillai@windriver.com>>
Subject: Re: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
[Please note: This e-mail is from an EXTERNAL e-mail address]
how different is this from
https://git.openembedded.org/meta-openembedded/commit/?id=bf4a826c7de51dcdac87f81fa2bd2301629d50db<https://urldefense.com/v3/__https:/git.openembedded.org/meta-openembedded/commit/?id=bf4a826c7de51dcdac87f81fa2bd2301629d50db__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtpcGLzXP$>
On Sun, Oct 2, 2022 at 11:27 PM Narpat Mali <narpat.mali@windriver.com<mailto:narpat.mali@windriver.com>> wrote:
>
> Issue: LIN1022-1131, LIN1022-1132, LIN1022-1133, LIN1022-1134, LIN1022-1135
> Issue: LIN1022-1136
>
> Upgrade summary:
> ----------------
> - drop 0002-configure-fix-a-cc-check-issue.patch, as it was replaced with
> upstream commit https://github.com/net-snmp/net-snmp/commit/dbb49acfa2af<https://urldefense.com/v3/__https:/github.com/net-snmp/net-snmp/commit/dbb49acfa2af__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtoZJYKse$>
> - drop 0001-snmpd-always-exit-after-displaying-usage.patch backport
> - rebase net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch manually
> - refresh patches with devtool to get rid of fuzz
>
> Changelog:
> ----------
> *5.9.3*:
> security:
> - These two CVEs can be exploited by a user with read-only credentials:
> - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
> NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
> - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
> can cause a NULL pointer dereference.
> - These CVEs can be exploited by a user with read-write credentials:
> - CVE-2022-24806 Improper Input Validation when SETing malformed
> OIDs in master agent and subagent simultaneously
> - CVE-2022-24807 A malformed OID in a SET request to
> SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
> out-of-bounds memory access.
> - CVE-2022-24808 A malformed OID in a SET request to
> NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
> - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
> can cause a NULL pointer dereference.
> - To avoid these flaws, use strong SNMPv3 credentials and do not share them.
> If you must use SNMPv1 or SNMPv2c, use a complex community string
> and enhance the protection by restricting access to a given IP address
> range.
> - Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for
> reporting the following CVEs that have been fixed in this release, and
> to Arista Networks for providing fixes.
>
> Windows:
> - WinExtDLL: Fix multiple compiler warnings
> - WinExtDLL: Make long strings occupy a single line Make it easier to
> look up error messages in the source code by making long strings
> occupy a single source code line.
> - WinExtDLL: Restore MIB-II support Make winExtDLL work on 64-bit
> Windows systems") caused snmpd to skip MIB-II on 64-bit systems.
>
> IF-MIB: Update ifTable entries even if the interface name has changed
> At least on Linux a network interface index may be reused for a
> network interface with a different name. Hence this patch that
> enables replacing network interface information even if the network
> interface name has changed.
>
> unspecified:
> - Moved transport code into a separate subdirectory in snmplib
> - Snmplib: remove inline versions of container funcs".
>
> misc:
> - snmp-create-v3-user: Fix the snmpd.conf path @datadir@ is
> expanded in ${datarootdir} so datarootdir must be set before
> @datadir@ is used.
>
> *5.9.2*:
> skipped due to a last minute library versioning found bug -- use 5.9.3 instead
>
> (master rev: bf4a826c7de51dcdac87f81fa2bd2301629d50db) -- backport
>
> Signed-off-by: Narpat Mali <narpat.mali@windriver.com<mailto:narpat.mali@windriver.com>>
> ---
> ...ath.m4-keep-consistent-between-32bit.patch | 8 ++-
> .../0001-config_os_headers-Error-Fix.patch | 4 +-
> ...1-get_pid_from_inode-Include-limit.h.patch | 6 +-
> ...d-always-exit-after-displaying-usage.patch | 55 -------------------
> ....c-Don-t-check-for-return-from-EVP_M.patch | 4 +-
> .../0002-configure-fix-a-cc-check-issue.patch | 28 ----------
> ...004-configure-fix-incorrect-variable.patch | 6 +-
> .../net-snmp/fix-libtool-finish.patch | 6 +-
> ....7.2-fix-engineBoots-value-on-SIGHUP.patch | 22 ++++----
> ...add-knob-whether-nlist.h-are-checked.patch | 4 +-
> .../net-snmp-fix-for-disable-des.patch | 4 +-
> ...ting-add-the-output-format-for-ptest.patch | 2 +-
> .../reproducibility-have-printcap.patch | 4 +-
> .../{net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$> => net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>} | 4 +-
> 14 files changed, 37 insertions(+), 120 deletions(-)
> delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> rename meta-networking/recipes-protocols/net-snmp/{net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$> => net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>} (98%)
>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> index 4cd729044..ed2ebc6d7 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> @@ -1,7 +1,8 @@
> -From 6f8ea2e841ad45eed193310b599d3f3b410ae91d Mon Sep 17 00:00:00 2001
> +From 98c62e24fdd05d7e8bd8149840bad8eb0feb3fb1 Mon Sep 17 00:00:00 2001
> From: Mingli Yu <mingli.yu@windriver.com<mailto:mingli.yu@windriver.com>>
> Date: Fri, 29 Jan 2021 08:49:15 +0000
> -Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and 64bit
> +Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and
> + 64bit
>
> With configure option "--with-openssl=${STAGING_EXECPREFIXDIR}", it behaves
> differently between 32bit and 64bit system as the openssl lib resides under
> @@ -15,12 +16,13 @@ So add the patch to fix the gap between 32bit and 64bit system.
> Upstream-Status: Inappropriate [configuration specific]
>
> Signed-off-by: Mingli Yu <mingli.yu@windriver.com<mailto:mingli.yu@windriver.com>>
> +
> ---
> m4/ac_add_search_path.m4 | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/m4/ac_add_search_path.m4 b/m4/ac_add_search_path.m4
> -index 8e0a819..961f587 100644
> +index 8e0a819..e9585bc 100644
> --- a/m4/ac_add_search_path.m4
> +++ b/m4/ac_add_search_path.m4
> @@ -3,8 +3,8 @@ dnl Add a search path to the LIBS and CPPFLAGS variables
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> index 05a47f61c..f8a52a63f 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> @@ -1,4 +1,4 @@
> -From 69d4c517c07f55c505090e48d96ace8cd599fb26 Mon Sep 17 00:00:00 2001
> +From e86d5fd52f19b85da0b7cce660c6e65ec4c0f9bb Mon Sep 17 00:00:00 2001
> From: Li xin <lixin.fnst@cn.fujitsu.com<mailto:lixin.fnst@cn.fujitsu.com>>
> Date: Fri, 21 Aug 2015 18:23:13 +0900
> Subject: [PATCH] config_os_headers: Error Fix
> @@ -19,7 +19,7 @@ Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com<mailto:lixin.fnst@cn.fujitsu.com>>
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
> -index f07d512..2363b42 100644
> +index 01c3376..6edd85f 100644
> --- a/configure.d/config_os_headers
> +++ b/configure.d/config_os_headers
> @@ -395,8 +395,8 @@ then
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> index 22e591556..a7881a871 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> @@ -1,4 +1,4 @@
> -From 2bf1bbe1d428ed06d57aa76b03e394b72ff2216d Mon Sep 17 00:00:00 2001
> +From 8097734b27fd146f358a4edd0d1a0d28309bd9a4 Mon Sep 17 00:00:00 2001
> From: Khem Raj <raj.khem@gmail.com<mailto:raj.khem@gmail.com>>
> Date: Fri, 22 Jul 2016 18:34:39 +0000
> Subject: [PATCH] get_pid_from_inode: Include limit.h
> @@ -14,7 +14,7 @@ Signed-off-by: Khem Raj <raj.khem@gmail.com<mailto:raj.khem@gmail.com>>
> 1 file changed, 1 insertion(+)
>
> diff --git a/agent/mibgroup/util_funcs/get_pid_from_inode.c b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> -index aee907d..7abaec2 100644
> +index 5788e1d..ea380a6 100644
> --- a/agent/mibgroup/util_funcs/get_pid_from_inode.c
> +++ b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> @@ -6,6 +6,7 @@
> @@ -23,5 +23,5 @@ index aee907d..7abaec2 100644
> #include <ctype.h>
> +#include <limits.h>
> #include <stdio.h>
> - #if HAVE_STDLIB_H
> + #ifdef HAVE_STDLIB_H
> #include <stdlib.h>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> deleted file mode 100644
> index 4fc9e54b4..000000000
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> +++ /dev/null
> @@ -1,55 +0,0 @@
> -From 94ca941e06bef157bf0e13251f8ca1471daa9393 Mon Sep 17 00:00:00 2001
> -From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi<mailto:kaarle.ritvanen@datakunkku.fi>>
> -Date: Fri, 27 Aug 2021 14:21:45 +0300
> -Subject: [PATCH] snmpd: always exit after displaying usage
> -
> -Currently, viewing the help text with -h results in snmpd being started
> -in the background, whereas this does not happen with --help. Similarly,
> -when an error is detected in command line syntax, the help text is
> -displayed but sometimes snmpd gets started anyway, depending on the
> -execution path.
> -
> -This patch makes snmpd consistently terminate whenever the usage
> -function gets called. It also removes the goto statements no longer
> -needed.
> -
> -Upstream-Status: Backport
> -[https://github.com/net-snmp/net-snmp/commit/94ca941e06bef157bf0e13251f8ca1471daa9393<https://urldefense.com/v3/__https:/github.com/net-snmp/net-snmp/commit/94ca941e06bef157bf0e13251f8ca1471daa9393__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtoLiNbMZ$>]
> -
> -Signed-off-by: Yi Zhao <yi.zhao@windriver.com<mailto:yi.zhao@windriver.com>>
> ----
> - agent/snmpd.c | 4 ++--
> - 1 file changed, 2 insertions(+), 2 deletions(-)
> -
> -diff --git a/agent/snmpd.c b/agent/snmpd.c
> -index f5aab0af8..90de12d99 100644
> ---- a/agent/snmpd.c
> -+++ b/agent/snmpd.c
> -@@ -289,6 +289,8 @@ usage(char *prog)
> - " -S d|i|0-7\t\tuse -Ls <facility> instead\n"
> - "\n"
> - );
> -+ SOCK_CLEANUP;
> -+ exit(1);
> - }
> -
> - static void
> -@@ -494,7 +496,6 @@ main(int argc, char *argv[])
> - case '-':
> - if (strcasecmp(optarg, "help") == 0) {
> - usage(argv[0]);
> -- goto out;
> - }
> - if (strcasecmp(optarg, "version") == 0) {
> - version();
> -@@ -783,7 +784,6 @@ main(int argc, char *argv[])
> - fprintf(stderr, "%s: Illegal argument -X:"
> - "AgentX support not compiled in.\n", argv[0]);
> - usage(argv[0]);
> -- goto out;
> - #endif
> - break;
> -
> ---
> -2.25.1
> -
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> index 42352a6b0..af6334f72 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> @@ -1,4 +1,4 @@
> -From f3ff99736b8cccbba77349b0d10a3cee366a4c87 Mon Sep 17 00:00:00 2001
> +From f4e1acd4f509dd26cf88da872bd5adcf884f4a5f Mon Sep 17 00:00:00 2001
> From: Khem Raj <raj.khem@gmail.com<mailto:raj.khem@gmail.com>>
> Date: Fri, 18 Sep 2015 00:28:45 -0400
> Subject: [PATCH] snmplib/keytools.c: Don't check for return from
> @@ -17,7 +17,7 @@ Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com<mailto:ovidiu.panait@windriver.com>>
> 1 file changed, 1 insertion(+), 4 deletions(-)
>
> diff --git a/snmplib/keytools.c b/snmplib/keytools.c
> -index 129a7c0..2fc1efc 100644
> +index 14a452a..fb1694b 100644
> --- a/snmplib/keytools.c
> +++ b/snmplib/keytools.c
> @@ -183,10 +183,7 @@ generate_Ku(const oid * hashtype, u_int hashtype_len,
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> deleted file mode 100644
> index c973bde72..000000000
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> +++ /dev/null
> @@ -1,28 +0,0 @@
> -From 0a02ac779c51a2b4af3b58cb96967bf3eff80367 Mon Sep 17 00:00:00 2001
> -From: Wenlin Kang <wenlin.kang@windriver.com<mailto:wenlin.kang@windriver.com>>
> -Date: Wed, 24 May 2017 16:45:34 +0800
> -Subject: [PATCH] configure: fix a cc check issue.
> -
> -When has "." in cc value, the expression
> -$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'
> -can't get corretly the cc's value.
> -
> -Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com<mailto:wenlin.kang@windriver.com>>
> -
> ----
> - configure.d/config_project_perl_python | 2 +-
> - 1 file changed, 1 insertion(+), 1 deletion(-)
> -
> -diff --git a/configure.d/config_project_perl_python b/configure.d/config_project_perl_python
> -index 475c843..22d2ad3 100644
> ---- a/configure.d/config_project_perl_python
> -+++ b/configure.d/config_project_perl_python
> -@@ -87,7 +87,7 @@ if test "x$install_perl" != "xno" ; then
> - if test "x$enable_perl_cc_checks" != "xno" ; then
> - AC_MSG_CHECKING([for Perl cc])
> - changequote(, )
> -- PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'`
> -+ PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\.\w\s\/]+).;\s*/$1/);'`
> - changequote([, ])
> - if test "x$PERLCC" != "x" ; then
> - AC_MSG_RESULT([$PERLCC])
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> index bfddc63dd..6e224188a 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> @@ -1,4 +1,4 @@
> -From 011bdcd07f2a289d0cfc1b411c03c0cc7c42dad1 Mon Sep 17 00:00:00 2001
> +From 6d655ba677563ac9d62d4d8eee59fdb39d486c02 Mon Sep 17 00:00:00 2001
> From: Wenlin Kang <wenlin.kang@windriver.com<mailto:wenlin.kang@windriver.com>>
> Date: Wed, 24 May 2017 17:10:20 +0800
> Subject: [PATCH] configure: fix incorrect variable
> @@ -14,10 +14,10 @@ Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com<mailto:wenlin.kang@windriver.com>>
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Makefile.in<https://urldefense.com/v3/__http:/Makefile.in__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtsi07kql$> b/Makefile.in<https://urldefense.com/v3/__http:/Makefile.in__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtsi07kql$>
> -index 912f6b2..a53d1b2 100644
> +index f1cbbf5..1545be3 100644
> --- a/Makefile.in<https://urldefense.com/v3/__http:/Makefile.in__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtsi07kql$>
> +++ b/Makefile.in<https://urldefense.com/v3/__http:/Makefile.in__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtsi07kql$>
> -@@ -174,7 +174,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
> +@@ -173,7 +173,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
> #
> # override LD_RUN_PATH to avoid dependencies on the build directory
> perlmodules: perlmakefiles subdirs
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> index 26dd014ce..409c1e03c 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> @@ -1,4 +1,4 @@
> -From 27444fbf8323679ea0551a3bd5f04c365143d8c0 Mon Sep 17 00:00:00 2001
> +From ab1d77c52e84746e75506a2870783806bc77f396 Mon Sep 17 00:00:00 2001
> From: "Roy.Li" <rongqing.li@windriver.com<mailto:rongqing.li@windriver.com>>
> Date: Fri, 16 Jan 2015 14:14:01 +0800
> Subject: [PATCH] net-snmp: fix "libtool --finish"
> @@ -20,11 +20,11 @@ Signed-off-by: Roy.Li<https://urldefense.com/v3/__http:/Roy.Li__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYttQgWTFr$> <rongqing.li@windriver.com<mailto:rongqing.li@windriver.com>>
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Makefile.top<https://urldefense.com/v3/__http:/Makefile.top__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYticrioNt$> b/Makefile.top<https://urldefense.com/v3/__http:/Makefile.top__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYticrioNt$>
> -index 6315401..fc0ee06 100644
> +index a962c54..1ba5607 100644
> --- a/Makefile.top<https://urldefense.com/v3/__http:/Makefile.top__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYticrioNt$>
> +++ b/Makefile.top<https://urldefense.com/v3/__http:/Makefile.top__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYticrioNt$>
> @@ -89,7 +89,7 @@ LIBREVISION = 0
> - LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) -o
> + LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) @LD_NO_UNDEFINED@ -o
> LIB_EXTENSION = la
> LIB_VERSION =
> -LIB_LDCONFIG_CMD = $(LIBTOOL) --mode=finish $(INSTALL_PREFIX)$(libdir)
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> index 022eb958f..87f192e5b 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> @@ -1,4 +1,4 @@
> -From 1e3178835217ba89aa355e2b6b88e490f17be16d Mon Sep 17 00:00:00 2001
> +From 5ad4eab43c1ea63ff343bba64d576440e8783e75 Mon Sep 17 00:00:00 2001
> From: Zheng Ruoqin <zhengrq.fnst@fujitsu.com<mailto:zhengrq.fnst@fujitsu.com>>
> Date: Wed, 9 Jun 2021 15:47:30 +0900
> Subject: [PATCH] net snmp: fix engineBoots value on SIGHUP
> @@ -7,6 +7,7 @@ Upstream-Status: Pending
>
> Signed-off-by: Marian Florea <marian.florea@windriver.com<mailto:marian.florea@windriver.com>>
> Signed-off-by: Li Zhou <li.zhou@windriver.com<mailto:li.zhou@windriver.com>>
> +Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com<mailto:ovidiu.panait@windriver.com>>
>
> ---
> agent/snmpd.c | 1 +
> @@ -14,19 +15,18 @@ Signed-off-by: Li Zhou <li.zhou@windriver.com<mailto:li.zhou@windriver.com>>
> 2 files changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/agent/snmpd.c b/agent/snmpd.c
> -index 1af439f..355b510 100644
> +index 90de12d..1ccc4db 100644
> --- a/agent/snmpd.c
> +++ b/agent/snmpd.c
> -@@ -1208,6 +1208,7 @@ receive(void)
> - snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> - netsnmp_get_version());
> - update_config();
> -+ snmp_store(app_name);
> - send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> - #if HAVE_SIGPROCMASK
> - ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> + snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> + netsnmp_get_version());
> + update_config();
> ++ snmp_store(app_name);
> + send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> + #ifdef HAVE_SIGPROCMASK
> + ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> diff --git a/snmplib/snmpv3.c b/snmplib/snmpv3.c
> -index 29c2a0f..ada961c 100644
> +index 7b1746b..4a17e0d 100644
> --- a/snmplib/snmpv3.c
> +++ b/snmplib/snmpv3.c
> @@ -1059,9 +1059,9 @@ init_snmpv3_post_config(int majorid, int minorid, void *serverarg,
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> index f1ebe2bb6..c5a453abe 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> @@ -1,4 +1,4 @@
> -From e507dcf8b29c55011f85d88bf05400d4717e4074 Mon Sep 17 00:00:00 2001
> +From ad65b106d3cb3c6e595381be1c45a73c1ef6eb5e Mon Sep 17 00:00:00 2001
> From: Chong Lu <Chong.Lu@windriver.com<mailto:Chong.Lu@windriver.com>>
> Date: Thu, 28 May 2020 09:46:34 -0500
> Subject: [PATCH] net-snmp: add knob whether nlist.h are checked
> @@ -15,7 +15,7 @@ Signed-off-by: Chong Lu <Chong.Lu@windriver.com<mailto:Chong.Lu@windriver.com>>
> 1 file changed, 2 insertions(+)
>
> diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
> -index 76ef58a..f07d512 100644
> +index b9c8c31..01c3376 100644
> --- a/configure.d/config_os_headers
> +++ b/configure.d/config_os_headers
> @@ -37,6 +37,7 @@ AC_CHECK_HEADERS([getopt.h pthread.h regex.h ] dnl
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> index 2941a3609..c382c02d8 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> @@ -1,4 +1,4 @@
> -From 3ca4335ec1d6b7b384c134fc85d7a9e513c68376 Mon Sep 17 00:00:00 2001
> +From b1b9980853b1083f0c8b9f628f8b4c3a484d4f91 Mon Sep 17 00:00:00 2001
> From: Jackie Huang <jackie.huang@windriver.com<mailto:jackie.huang@windriver.com>>
> Date: Thu, 22 Jun 2017 10:25:08 +0800
> Subject: [PATCH] net-snmp: fix for --disable-des
> @@ -15,7 +15,7 @@ Signed-off-by: Jackie Huang <jackie.huang@windriver.com<mailto:jackie.huang@windriver.com>>
> 1 file changed, 2 insertions(+)
>
> diff --git a/snmplib/scapi.c b/snmplib/scapi.c
> -index 00c9174..c6875e1 100644
> +index 54fdd5c..0f7e931 100644
> --- a/snmplib/scapi.c
> +++ b/snmplib/scapi.c
> @@ -85,7 +85,9 @@ netsnmp_feature_child_of(usm_scapi, usm_support);
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> index 807983f61..09ca532a7 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> @@ -1,4 +1,4 @@
> -From 972df16e9599dffddf5d714a4cbf43008c771122 Mon Sep 17 00:00:00 2001
> +From 36a5656db7ea75dd15f35a6c1728937c6e2b901c Mon Sep 17 00:00:00 2001
> From: Jackie Huang <jackie.huang@windriver.com<mailto:jackie.huang@windriver.com>>
> Date: Wed, 14 Jan 2015 15:10:06 +0800
> Subject: [PATCH] testing: add the output format for ptest
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> index bf1e7bedf..c0b51c51e 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> @@ -1,4 +1,4 @@
> -From 84e362fe97f50fbad69f083bc2d8fe18f83eb2f7 Mon Sep 17 00:00:00 2001
> +From b923cd38e2503b86aedf66b767fd7f51c9f25645 Mon Sep 17 00:00:00 2001
> From: "douglas.royds" <douglas.royds@taitradio.com<mailto:douglas.royds@taitradio.com>>
> Date: Wed, 21 Nov 2018 13:52:18 +1300
> Subject: [PATCH] net-snmp: Reproducibility: Don't check build host for
> @@ -13,7 +13,7 @@ set in the environment to "yes" or "no" as appropriate for the target platform.
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/configure.d/config_os_misc4 b/configure.d/config_os_misc4
> -index 6f23c8e..8cea75a 100644
> +index b6864d9..07ca922 100644
> --- a/configure.d/config_os_misc4
> +++ b/configure.d/config_os_misc4
> @@ -99,9 +99,9 @@ if test x$LPSTAT_PATH != x; then
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$> b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>
> similarity index 98%
> rename from meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$>
> rename to meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>
> index 30c0ce74c..7af514756 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$>
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>
> @@ -21,15 +21,13 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.tar.gz \
> file://0001-config_os_headers-Error-Fix.patch \
> file://0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch \
> file://0001-get_pid_from_inode-Include-limit.h.patch \
> - file://0002-configure-fix-a-cc-check-issue.patch \
> file://0004-configure-fix-incorrect-variable.patch \
> file://net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch \
> file://net-snmp-fix-for-disable-des.patch \
> file://reproducibility-have-printcap.patch \
> file://0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch \
> - file://0001-snmpd-always-exit-after-displaying-usage.patch \
> "
> -SRC_URI[sha256sum] = "eb7fd4a44de6cddbffd9a92a85ad1309e5c1054fb9d5a7dd93079c8953f48c3f"
> +SRC_URI[sha256sum] = "2097f29b7e1bf3f1300b4bae52fa2308d0bb8d5d3998dbe02f9462a413a2ef0a"
>
> UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/net-snmp/files/net-snmp/<https://urldefense.com/v3/__https:/sourceforge.net/projects/net-snmp/files/net-snmp/__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYttt45kxq$>"
> UPSTREAM_CHECK_REGEX = "/net-snmp/(?P<pver>\d+(\.\d+)+)/"
> --
> 2.25.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#99037): https://lists.openembedded.org/g/openembedded-devel/message/99037<https://urldefense.com/v3/__https:/lists.openembedded.org/g/openembedded-devel/message/99037__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtnWSrQ1-$>
> Mute This Topic: https://lists.openembedded.org/mt/94085410/1997914<https://urldefense.com/v3/__https:/lists.openembedded.org/mt/94085410/1997914__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtnZeynhZ$>
> Group Owner: openembedded-devel+owner@lists.openembedded.org<mailto:openembedded-devel%2Bowner@lists.openembedded.org>
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub<https://urldefense.com/v3/__https:/lists.openembedded.org/g/openembedded-devel/unsub__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYttC2KpO6$> [raj.khem@gmail.com<mailto:raj.khem@gmail.com>]
> -=-=-=-=-=-=-=-=-=-=-=-
>
[-- Attachment #1.2: Type: text/html, Size: 48949 bytes --]
[-- Attachment #2: 117E5983738545F3B03544E8BDEB48CE.png --]
[-- Type: image/png, Size: 160 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: [oe] [kirkstone] [PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
2022-10-04 7:15 ` [oe] [kirkstone] [PATCH " Mali, Narpat
@ 2022-10-06 8:17 ` Mali, Narpat
0 siblings, 0 replies; 6+ messages in thread
From: Mali, Narpat @ 2022-10-06 8:17 UTC (permalink / raw)
To: Khem Raj
Cc: G Pillai, Hari, Polampalli, Archana, Urade, Yogita, openembedded-devel
[-- Attachment #1.1: Type: text/plain, Size: 35065 bytes --]
Hi Khem Raj,
Please ignore this patch, have sent again fresh patch with “[kirkstone]” in subject.
Best Regards,
Narpat Mali
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows
From: Mali, Narpat<mailto:Narpat.Mali@windriver.com>
Sent: 04 October 2022 12:45
To: Khem Raj<mailto:raj.khem@gmail.com>
Cc: G Pillai, Hari<mailto:Hari.GPillai@windriver.com>; Polampalli, Archana<mailto:Archana.Polampalli@windriver.com>; Urade, Yogita<mailto:Yogita.Urade@windriver.com>; openembedded-devel@lists.openembedded.org<mailto:openembedded-devel@lists.openembedded.org>
Subject: RE: [oe] [kirkstone] [PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
Hi Khem Raj,
Have added the “[kirkstone]” in subject.
Do I need to send the patch again ?
Best Regards,
Narpat Mali
Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows
From: Khem Raj<mailto:raj.khem@gmail.com>
Sent: 04 October 2022 01:11
To: Mali, Narpat<mailto:Narpat.Mali@windriver.com>
Cc: G Pillai, Hari<mailto:Hari.GPillai@windriver.com>; Polampalli, Archana<mailto:Archana.Polampalli@windriver.com>; Urade, Yogita<mailto:Yogita.Urade@windriver.com>; openembedded-devel@lists.openembedded.org<mailto:openembedded-devel@lists.openembedded.org>
Subject: Re: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
[Please note: This e-mail is from an EXTERNAL e-mail address]
Ok it will be good to add [kirkstone] in subject
So folks know where intend it for
On Mon, Oct 3, 2022 at 10:12 AM Mali, Narpat <Narpat.Mali@windriver.com<mailto:Narpat.Mali@windriver.com>> wrote:
Hi Khem Raj,
It is the same commit but, we need this patch commit for “kirkstone” branch of meta-openembedded.
We observed that the “master” branch has “net-snmp 5.9.3” version at https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp<https://urldefense.com/v3/__https:/git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtigk1r7C$> and the “kirkstone” branch has “net-snmp 5.9.1” at https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp?h=kirkstone<https://urldefense.com/v3/__https:/git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/net-snmp?h=kirkstone__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtnBwmXJ0$>
Since, our product is using “kirkstone” branch of meta-openembedded so, CVE-2022-24805 to CVE-2022-24810 are vulnerable for our product.
Could you please let us know, How to get net-snmp upgraded to 5.9.3 version in “kirkstone” branch ?
Best Regards,
Narpat Mali
Sent from Mail<https://urldefense.com/v3/__https:/go.microsoft.com/fwlink/?LinkId=550986__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtrYRmqeF$> for Windows
From: Khem Raj <raj.khem@gmail.com<mailto:raj.khem@gmail.com>>
Sent: Monday, October 3, 2022 12:29:18 PM
To: Mali, Narpat <Narpat.Mali@windriver.com<mailto:Narpat.Mali@windriver.com>>
Cc: openembedded-devel@lists.openembedded.org<mailto:openembedded-devel@lists.openembedded.org> <openembedded-devel@lists.openembedded.org<mailto:openembedded-devel@lists.openembedded.org>>; Polampalli, Archana <Archana.Polampalli@windriver.com<mailto:Archana.Polampalli@windriver.com>>; Urade, Yogita <Yogita.Urade@windriver.com<mailto:Yogita.Urade@windriver.com>>; G Pillai, Hari <Hari.GPillai@windriver.com<mailto:Hari.GPillai@windriver.com>>
Subject: Re: [oe] [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3
[Please note: This e-mail is from an EXTERNAL e-mail address]
how different is this from
https://git.openembedded.org/meta-openembedded/commit/?id=bf4a826c7de51dcdac87f81fa2bd2301629d50db<https://urldefense.com/v3/__https:/git.openembedded.org/meta-openembedded/commit/?id=bf4a826c7de51dcdac87f81fa2bd2301629d50db__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtpcGLzXP$>
On Sun, Oct 2, 2022 at 11:27 PM Narpat Mali <narpat.mali@windriver.com<mailto:narpat.mali@windriver.com>> wrote:
>
> Issue: LIN1022-1131, LIN1022-1132, LIN1022-1133, LIN1022-1134, LIN1022-1135
> Issue: LIN1022-1136
>
> Upgrade summary:
> ----------------
> - drop 0002-configure-fix-a-cc-check-issue.patch, as it was replaced with
> upstream commit https://github.com/net-snmp/net-snmp/commit/dbb49acfa2af<https://urldefense.com/v3/__https:/github.com/net-snmp/net-snmp/commit/dbb49acfa2af__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtoZJYKse$>
> - drop 0001-snmpd-always-exit-after-displaying-usage.patch backport
> - rebase net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch manually
> - refresh patches with devtool to get rid of fuzz
>
> Changelog:
> ----------
> *5.9.3*:
> security:
> - These two CVEs can be exploited by a user with read-only credentials:
> - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
> NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
> - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
> can cause a NULL pointer dereference.
> - These CVEs can be exploited by a user with read-write credentials:
> - CVE-2022-24806 Improper Input Validation when SETing malformed
> OIDs in master agent and subagent simultaneously
> - CVE-2022-24807 A malformed OID in a SET request to
> SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
> out-of-bounds memory access.
> - CVE-2022-24808 A malformed OID in a SET request to
> NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
> - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
> can cause a NULL pointer dereference.
> - To avoid these flaws, use strong SNMPv3 credentials and do not share them.
> If you must use SNMPv1 or SNMPv2c, use a complex community string
> and enhance the protection by restricting access to a given IP address
> range.
> - Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for
> reporting the following CVEs that have been fixed in this release, and
> to Arista Networks for providing fixes.
>
> Windows:
> - WinExtDLL: Fix multiple compiler warnings
> - WinExtDLL: Make long strings occupy a single line Make it easier to
> look up error messages in the source code by making long strings
> occupy a single source code line.
> - WinExtDLL: Restore MIB-II support Make winExtDLL work on 64-bit
> Windows systems") caused snmpd to skip MIB-II on 64-bit systems.
>
> IF-MIB: Update ifTable entries even if the interface name has changed
> At least on Linux a network interface index may be reused for a
> network interface with a different name. Hence this patch that
> enables replacing network interface information even if the network
> interface name has changed.
>
> unspecified:
> - Moved transport code into a separate subdirectory in snmplib
> - Snmplib: remove inline versions of container funcs".
>
> misc:
> - snmp-create-v3-user: Fix the snmpd.conf path @datadir@ is
> expanded in ${datarootdir} so datarootdir must be set before
> @datadir@ is used.
>
> *5.9.2*:
> skipped due to a last minute library versioning found bug -- use 5.9.3 instead
>
> (master rev: bf4a826c7de51dcdac87f81fa2bd2301629d50db) -- backport
>
> Signed-off-by: Narpat Mali <narpat.mali@windriver.com<mailto:narpat.mali@windriver.com>>
> ---
> ...ath.m4-keep-consistent-between-32bit.patch | 8 ++-
> .../0001-config_os_headers-Error-Fix.patch | 4 +-
> ...1-get_pid_from_inode-Include-limit.h.patch | 6 +-
> ...d-always-exit-after-displaying-usage.patch | 55 -------------------
> ....c-Don-t-check-for-return-from-EVP_M.patch | 4 +-
> .../0002-configure-fix-a-cc-check-issue.patch | 28 ----------
> ...004-configure-fix-incorrect-variable.patch | 6 +-
> .../net-snmp/fix-libtool-finish.patch | 6 +-
> ....7.2-fix-engineBoots-value-on-SIGHUP.patch | 22 ++++----
> ...add-knob-whether-nlist.h-are-checked.patch | 4 +-
> .../net-snmp-fix-for-disable-des.patch | 4 +-
> ...ting-add-the-output-format-for-ptest.patch | 2 +-
> .../reproducibility-have-printcap.patch | 4 +-
> .../{net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$> => net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>} | 4 +-
> 14 files changed, 37 insertions(+), 120 deletions(-)
> delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> delete mode 100644 meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> rename meta-networking/recipes-protocols/net-snmp/{net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$> => net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>} (98%)
>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> index 4cd729044..ed2ebc6d7 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch
> @@ -1,7 +1,8 @@
> -From 6f8ea2e841ad45eed193310b599d3f3b410ae91d Mon Sep 17 00:00:00 2001
> +From 98c62e24fdd05d7e8bd8149840bad8eb0feb3fb1 Mon Sep 17 00:00:00 2001
> From: Mingli Yu <mingli.yu@windriver.com<mailto:mingli.yu@windriver.com>>
> Date: Fri, 29 Jan 2021 08:49:15 +0000
> -Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and 64bit
> +Subject: [PATCH] ac_add_search_path.m4: keep consistent between 32bit and
> + 64bit
>
> With configure option "--with-openssl=${STAGING_EXECPREFIXDIR}", it behaves
> differently between 32bit and 64bit system as the openssl lib resides under
> @@ -15,12 +16,13 @@ So add the patch to fix the gap between 32bit and 64bit system.
> Upstream-Status: Inappropriate [configuration specific]
>
> Signed-off-by: Mingli Yu <mingli.yu@windriver.com<mailto:mingli.yu@windriver.com>>
> +
> ---
> m4/ac_add_search_path.m4 | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/m4/ac_add_search_path.m4 b/m4/ac_add_search_path.m4
> -index 8e0a819..961f587 100644
> +index 8e0a819..e9585bc 100644
> --- a/m4/ac_add_search_path.m4
> +++ b/m4/ac_add_search_path.m4
> @@ -3,8 +3,8 @@ dnl Add a search path to the LIBS and CPPFLAGS variables
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> index 05a47f61c..f8a52a63f 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-config_os_headers-Error-Fix.patch
> @@ -1,4 +1,4 @@
> -From 69d4c517c07f55c505090e48d96ace8cd599fb26 Mon Sep 17 00:00:00 2001
> +From e86d5fd52f19b85da0b7cce660c6e65ec4c0f9bb Mon Sep 17 00:00:00 2001
> From: Li xin <lixin.fnst@cn.fujitsu.com<mailto:lixin.fnst@cn.fujitsu.com>>
> Date: Fri, 21 Aug 2015 18:23:13 +0900
> Subject: [PATCH] config_os_headers: Error Fix
> @@ -19,7 +19,7 @@ Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com<mailto:lixin.fnst@cn.fujitsu.com>>
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
> -index f07d512..2363b42 100644
> +index 01c3376..6edd85f 100644
> --- a/configure.d/config_os_headers
> +++ b/configure.d/config_os_headers
> @@ -395,8 +395,8 @@ then
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> index 22e591556..a7881a871 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-get_pid_from_inode-Include-limit.h.patch
> @@ -1,4 +1,4 @@
> -From 2bf1bbe1d428ed06d57aa76b03e394b72ff2216d Mon Sep 17 00:00:00 2001
> +From 8097734b27fd146f358a4edd0d1a0d28309bd9a4 Mon Sep 17 00:00:00 2001
> From: Khem Raj <raj.khem@gmail.com<mailto:raj.khem@gmail.com>>
> Date: Fri, 22 Jul 2016 18:34:39 +0000
> Subject: [PATCH] get_pid_from_inode: Include limit.h
> @@ -14,7 +14,7 @@ Signed-off-by: Khem Raj <raj.khem@gmail.com<mailto:raj.khem@gmail.com>>
> 1 file changed, 1 insertion(+)
>
> diff --git a/agent/mibgroup/util_funcs/get_pid_from_inode.c b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> -index aee907d..7abaec2 100644
> +index 5788e1d..ea380a6 100644
> --- a/agent/mibgroup/util_funcs/get_pid_from_inode.c
> +++ b/agent/mibgroup/util_funcs/get_pid_from_inode.c
> @@ -6,6 +6,7 @@
> @@ -23,5 +23,5 @@ index aee907d..7abaec2 100644
> #include <ctype.h>
> +#include <limits.h>
> #include <stdio.h>
> - #if HAVE_STDLIB_H
> + #ifdef HAVE_STDLIB_H
> #include <stdlib.h>
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> deleted file mode 100644
> index 4fc9e54b4..000000000
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmpd-always-exit-after-displaying-usage.patch
> +++ /dev/null
> @@ -1,55 +0,0 @@
> -From 94ca941e06bef157bf0e13251f8ca1471daa9393 Mon Sep 17 00:00:00 2001
> -From: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi<mailto:kaarle.ritvanen@datakunkku.fi>>
> -Date: Fri, 27 Aug 2021 14:21:45 +0300
> -Subject: [PATCH] snmpd: always exit after displaying usage
> -
> -Currently, viewing the help text with -h results in snmpd being started
> -in the background, whereas this does not happen with --help. Similarly,
> -when an error is detected in command line syntax, the help text is
> -displayed but sometimes snmpd gets started anyway, depending on the
> -execution path.
> -
> -This patch makes snmpd consistently terminate whenever the usage
> -function gets called. It also removes the goto statements no longer
> -needed.
> -
> -Upstream-Status: Backport
> -[https://github.com/net-snmp/net-snmp/commit/94ca941e06bef157bf0e13251f8ca1471daa9393<https://urldefense.com/v3/__https:/github.com/net-snmp/net-snmp/commit/94ca941e06bef157bf0e13251f8ca1471daa9393__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtoLiNbMZ$>]
> -
> -Signed-off-by: Yi Zhao <yi.zhao@windriver.com<mailto:yi.zhao@windriver.com>>
> ----
> - agent/snmpd.c | 4 ++--
> - 1 file changed, 2 insertions(+), 2 deletions(-)
> -
> -diff --git a/agent/snmpd.c b/agent/snmpd.c
> -index f5aab0af8..90de12d99 100644
> ---- a/agent/snmpd.c
> -+++ b/agent/snmpd.c
> -@@ -289,6 +289,8 @@ usage(char *prog)
> - " -S d|i|0-7\t\tuse -Ls <facility> instead\n"
> - "\n"
> - );
> -+ SOCK_CLEANUP;
> -+ exit(1);
> - }
> -
> - static void
> -@@ -494,7 +496,6 @@ main(int argc, char *argv[])
> - case '-':
> - if (strcasecmp(optarg, "help") == 0) {
> - usage(argv[0]);
> -- goto out;
> - }
> - if (strcasecmp(optarg, "version") == 0) {
> - version();
> -@@ -783,7 +784,6 @@ main(int argc, char *argv[])
> - fprintf(stderr, "%s: Illegal argument -X:"
> - "AgentX support not compiled in.\n", argv[0]);
> - usage(argv[0]);
> -- goto out;
> - #endif
> - break;
> -
> ---
> -2.25.1
> -
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> index 42352a6b0..af6334f72 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch
> @@ -1,4 +1,4 @@
> -From f3ff99736b8cccbba77349b0d10a3cee366a4c87 Mon Sep 17 00:00:00 2001
> +From f4e1acd4f509dd26cf88da872bd5adcf884f4a5f Mon Sep 17 00:00:00 2001
> From: Khem Raj <raj.khem@gmail.com<mailto:raj.khem@gmail.com>>
> Date: Fri, 18 Sep 2015 00:28:45 -0400
> Subject: [PATCH] snmplib/keytools.c: Don't check for return from
> @@ -17,7 +17,7 @@ Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com<mailto:ovidiu.panait@windriver.com>>
> 1 file changed, 1 insertion(+), 4 deletions(-)
>
> diff --git a/snmplib/keytools.c b/snmplib/keytools.c
> -index 129a7c0..2fc1efc 100644
> +index 14a452a..fb1694b 100644
> --- a/snmplib/keytools.c
> +++ b/snmplib/keytools.c
> @@ -183,10 +183,7 @@ generate_Ku(const oid * hashtype, u_int hashtype_len,
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> deleted file mode 100644
> index c973bde72..000000000
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0002-configure-fix-a-cc-check-issue.patch
> +++ /dev/null
> @@ -1,28 +0,0 @@
> -From 0a02ac779c51a2b4af3b58cb96967bf3eff80367 Mon Sep 17 00:00:00 2001
> -From: Wenlin Kang <wenlin.kang@windriver.com<mailto:wenlin.kang@windriver.com>>
> -Date: Wed, 24 May 2017 16:45:34 +0800
> -Subject: [PATCH] configure: fix a cc check issue.
> -
> -When has "." in cc value, the expression
> -$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'
> -can't get corretly the cc's value.
> -
> -Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com<mailto:wenlin.kang@windriver.com>>
> -
> ----
> - configure.d/config_project_perl_python | 2 +-
> - 1 file changed, 1 insertion(+), 1 deletion(-)
> -
> -diff --git a/configure.d/config_project_perl_python b/configure.d/config_project_perl_python
> -index 475c843..22d2ad3 100644
> ---- a/configure.d/config_project_perl_python
> -+++ b/configure.d/config_project_perl_python
> -@@ -87,7 +87,7 @@ if test "x$install_perl" != "xno" ; then
> - if test "x$enable_perl_cc_checks" != "xno" ; then
> - AC_MSG_CHECKING([for Perl cc])
> - changequote(, )
> -- PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\w\s\/]+).;\s*/$1/);'`
> -+ PERLCC=`$myperl -V:cc | $myperl -n -e 'print if (s/^\s*cc=.([-=\.\w\s\/]+).;\s*/$1/);'`
> - changequote([, ])
> - if test "x$PERLCC" != "x" ; then
> - AC_MSG_RESULT([$PERLCC])
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> index bfddc63dd..6e224188a 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/0004-configure-fix-incorrect-variable.patch
> @@ -1,4 +1,4 @@
> -From 011bdcd07f2a289d0cfc1b411c03c0cc7c42dad1 Mon Sep 17 00:00:00 2001
> +From 6d655ba677563ac9d62d4d8eee59fdb39d486c02 Mon Sep 17 00:00:00 2001
> From: Wenlin Kang <wenlin.kang@windriver.com<mailto:wenlin.kang@windriver.com>>
> Date: Wed, 24 May 2017 17:10:20 +0800
> Subject: [PATCH] configure: fix incorrect variable
> @@ -14,10 +14,10 @@ Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com<mailto:wenlin.kang@windriver.com>>
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Makefile.in<https://urldefense.com/v3/__http:/Makefile.in__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtsi07kql$> b/Makefile.in<https://urldefense.com/v3/__http:/Makefile.in__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtsi07kql$>
> -index 912f6b2..a53d1b2 100644
> +index f1cbbf5..1545be3 100644
> --- a/Makefile.in<https://urldefense.com/v3/__http:/Makefile.in__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtsi07kql$>
> +++ b/Makefile.in<https://urldefense.com/v3/__http:/Makefile.in__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtsi07kql$>
> -@@ -174,7 +174,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
> +@@ -173,7 +173,7 @@ OTHERCLEANTODOS=perlclean @PYTHONCLEANTARGS@ cleanfeatures perlcleanfeatures pyt
> #
> # override LD_RUN_PATH to avoid dependencies on the build directory
> perlmodules: perlmakefiles subdirs
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> index 26dd014ce..409c1e03c 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/fix-libtool-finish.patch
> @@ -1,4 +1,4 @@
> -From 27444fbf8323679ea0551a3bd5f04c365143d8c0 Mon Sep 17 00:00:00 2001
> +From ab1d77c52e84746e75506a2870783806bc77f396 Mon Sep 17 00:00:00 2001
> From: "Roy.Li" <rongqing.li@windriver.com<mailto:rongqing.li@windriver.com>>
> Date: Fri, 16 Jan 2015 14:14:01 +0800
> Subject: [PATCH] net-snmp: fix "libtool --finish"
> @@ -20,11 +20,11 @@ Signed-off-by: Roy.Li<https://urldefense.com/v3/__http:/Roy.Li__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYttQgWTFr$> <rongqing.li@windriver.com<mailto:rongqing.li@windriver.com>>
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Makefile.top<https://urldefense.com/v3/__http:/Makefile.top__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYticrioNt$> b/Makefile.top<https://urldefense.com/v3/__http:/Makefile.top__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYticrioNt$>
> -index 6315401..fc0ee06 100644
> +index a962c54..1ba5607 100644
> --- a/Makefile.top<https://urldefense.com/v3/__http:/Makefile.top__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYticrioNt$>
> +++ b/Makefile.top<https://urldefense.com/v3/__http:/Makefile.top__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYticrioNt$>
> @@ -89,7 +89,7 @@ LIBREVISION = 0
> - LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) -o
> + LIB_LD_CMD = $(LIBTOOL) --mode=link $(LINKCC) $(CFLAGS) -rpath $(libdir) -version-info $(LIBCURRENT):$(LIBREVISION):$(LIBAGE) @LD_NO_UNDEFINED@ -o
> LIB_EXTENSION = la
> LIB_VERSION =
> -LIB_LDCONFIG_CMD = $(LIBTOOL) --mode=finish $(INSTALL_PREFIX)$(libdir)
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> index 022eb958f..87f192e5b 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch
> @@ -1,4 +1,4 @@
> -From 1e3178835217ba89aa355e2b6b88e490f17be16d Mon Sep 17 00:00:00 2001
> +From 5ad4eab43c1ea63ff343bba64d576440e8783e75 Mon Sep 17 00:00:00 2001
> From: Zheng Ruoqin <zhengrq.fnst@fujitsu.com<mailto:zhengrq.fnst@fujitsu.com>>
> Date: Wed, 9 Jun 2021 15:47:30 +0900
> Subject: [PATCH] net snmp: fix engineBoots value on SIGHUP
> @@ -7,6 +7,7 @@ Upstream-Status: Pending
>
> Signed-off-by: Marian Florea <marian.florea@windriver.com<mailto:marian.florea@windriver.com>>
> Signed-off-by: Li Zhou <li.zhou@windriver.com<mailto:li.zhou@windriver.com>>
> +Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com<mailto:ovidiu.panait@windriver.com>>
>
> ---
> agent/snmpd.c | 1 +
> @@ -14,19 +15,18 @@ Signed-off-by: Li Zhou <li.zhou@windriver.com<mailto:li.zhou@windriver.com>>
> 2 files changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/agent/snmpd.c b/agent/snmpd.c
> -index 1af439f..355b510 100644
> +index 90de12d..1ccc4db 100644
> --- a/agent/snmpd.c
> +++ b/agent/snmpd.c
> -@@ -1208,6 +1208,7 @@ receive(void)
> - snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> - netsnmp_get_version());
> - update_config();
> -+ snmp_store(app_name);
> - send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> - #if HAVE_SIGPROCMASK
> - ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> + snmp_log(LOG_INFO, "NET-SNMP version %s restarted\n",
> + netsnmp_get_version());
> + update_config();
> ++ snmp_store(app_name);
> + send_easy_trap(SNMP_TRAP_ENTERPRISESPECIFIC, 3);
> + #ifdef HAVE_SIGPROCMASK
> + ret = sigprocmask(SIG_UNBLOCK, &set, NULL);
> diff --git a/snmplib/snmpv3.c b/snmplib/snmpv3.c
> -index 29c2a0f..ada961c 100644
> +index 7b1746b..4a17e0d 100644
> --- a/snmplib/snmpv3.c
> +++ b/snmplib/snmpv3.c
> @@ -1059,9 +1059,9 @@ init_snmpv3_post_config(int majorid, int minorid, void *serverarg,
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> index f1ebe2bb6..c5a453abe 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-add-knob-whether-nlist.h-are-checked.patch
> @@ -1,4 +1,4 @@
> -From e507dcf8b29c55011f85d88bf05400d4717e4074 Mon Sep 17 00:00:00 2001
> +From ad65b106d3cb3c6e595381be1c45a73c1ef6eb5e Mon Sep 17 00:00:00 2001
> From: Chong Lu <Chong.Lu@windriver.com<mailto:Chong.Lu@windriver.com>>
> Date: Thu, 28 May 2020 09:46:34 -0500
> Subject: [PATCH] net-snmp: add knob whether nlist.h are checked
> @@ -15,7 +15,7 @@ Signed-off-by: Chong Lu <Chong.Lu@windriver.com<mailto:Chong.Lu@windriver.com>>
> 1 file changed, 2 insertions(+)
>
> diff --git a/configure.d/config_os_headers b/configure.d/config_os_headers
> -index 76ef58a..f07d512 100644
> +index b9c8c31..01c3376 100644
> --- a/configure.d/config_os_headers
> +++ b/configure.d/config_os_headers
> @@ -37,6 +37,7 @@ AC_CHECK_HEADERS([getopt.h pthread.h regex.h ] dnl
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> index 2941a3609..c382c02d8 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-fix-for-disable-des.patch
> @@ -1,4 +1,4 @@
> -From 3ca4335ec1d6b7b384c134fc85d7a9e513c68376 Mon Sep 17 00:00:00 2001
> +From b1b9980853b1083f0c8b9f628f8b4c3a484d4f91 Mon Sep 17 00:00:00 2001
> From: Jackie Huang <jackie.huang@windriver.com<mailto:jackie.huang@windriver.com>>
> Date: Thu, 22 Jun 2017 10:25:08 +0800
> Subject: [PATCH] net-snmp: fix for --disable-des
> @@ -15,7 +15,7 @@ Signed-off-by: Jackie Huang <jackie.huang@windriver.com<mailto:jackie.huang@windriver.com>>
> 1 file changed, 2 insertions(+)
>
> diff --git a/snmplib/scapi.c b/snmplib/scapi.c
> -index 00c9174..c6875e1 100644
> +index 54fdd5c..0f7e931 100644
> --- a/snmplib/scapi.c
> +++ b/snmplib/scapi.c
> @@ -85,7 +85,9 @@ netsnmp_feature_child_of(usm_scapi, usm_support);
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> index 807983f61..09ca532a7 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/net-snmp-testing-add-the-output-format-for-ptest.patch
> @@ -1,4 +1,4 @@
> -From 972df16e9599dffddf5d714a4cbf43008c771122 Mon Sep 17 00:00:00 2001
> +From 36a5656db7ea75dd15f35a6c1728937c6e2b901c Mon Sep 17 00:00:00 2001
> From: Jackie Huang <jackie.huang@windriver.com<mailto:jackie.huang@windriver.com>>
> Date: Wed, 14 Jan 2015 15:10:06 +0800
> Subject: [PATCH] testing: add the output format for ptest
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> index bf1e7bedf..c0b51c51e 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp/reproducibility-have-printcap.patch
> @@ -1,4 +1,4 @@
> -From 84e362fe97f50fbad69f083bc2d8fe18f83eb2f7 Mon Sep 17 00:00:00 2001
> +From b923cd38e2503b86aedf66b767fd7f51c9f25645 Mon Sep 17 00:00:00 2001
> From: "douglas.royds" <douglas.royds@taitradio.com<mailto:douglas.royds@taitradio.com>>
> Date: Wed, 21 Nov 2018 13:52:18 +1300
> Subject: [PATCH] net-snmp: Reproducibility: Don't check build host for
> @@ -13,7 +13,7 @@ set in the environment to "yes" or "no" as appropriate for the target platform.
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/configure.d/config_os_misc4 b/configure.d/config_os_misc4
> -index 6f23c8e..8cea75a 100644
> +index b6864d9..07ca922 100644
> --- a/configure.d/config_os_misc4
> +++ b/configure.d/config_os_misc4
> @@ -99,9 +99,9 @@ if test x$LPSTAT_PATH != x; then
> diff --git a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$> b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>
> similarity index 98%
> rename from meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$>
> rename to meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>
> index 30c0ce74c..7af514756 100644
> --- a/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.1.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.1.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtgJfttSA$>
> +++ b/meta-networking/recipes-protocols/net-snmp/net-snmp_5.9.3.bb<https://urldefense.com/v3/__http:/net-snmp_5.9.3.bb__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtg4FzuZn$>
> @@ -21,15 +21,13 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/net-snmp/net-snmp-${PV}.tar.gz \
> file://0001-config_os_headers-Error-Fix.patch \
> file://0001-snmplib-keytools.c-Don-t-check-for-return-from-EVP_M.patch \
> file://0001-get_pid_from_inode-Include-limit.h.patch \
> - file://0002-configure-fix-a-cc-check-issue.patch \
> file://0004-configure-fix-incorrect-variable.patch \
> file://net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch \
> file://net-snmp-fix-for-disable-des.patch \
> file://reproducibility-have-printcap.patch \
> file://0001-ac_add_search_path.m4-keep-consistent-between-32bit.patch \
> - file://0001-snmpd-always-exit-after-displaying-usage.patch \
> "
> -SRC_URI[sha256sum] = "eb7fd4a44de6cddbffd9a92a85ad1309e5c1054fb9d5a7dd93079c8953f48c3f"
> +SRC_URI[sha256sum] = "2097f29b7e1bf3f1300b4bae52fa2308d0bb8d5d3998dbe02f9462a413a2ef0a"
>
> UPSTREAM_CHECK_URI = "https://sourceforge.net/projects/net-snmp/files/net-snmp/<https://urldefense.com/v3/__https:/sourceforge.net/projects/net-snmp/files/net-snmp/__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYttt45kxq$>"
> UPSTREAM_CHECK_REGEX = "/net-snmp/(?P<pver>\d+(\.\d+)+)/"
> --
> 2.25.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#99037): https://lists.openembedded.org/g/openembedded-devel/message/99037<https://urldefense.com/v3/__https:/lists.openembedded.org/g/openembedded-devel/message/99037__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtnWSrQ1-$>
> Mute This Topic: https://lists.openembedded.org/mt/94085410/1997914<https://urldefense.com/v3/__https:/lists.openembedded.org/mt/94085410/1997914__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYtnZeynhZ$>
> Group Owner: openembedded-devel+owner@lists.openembedded.org<mailto:openembedded-devel%2Bowner@lists.openembedded.org>
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub<https://urldefense.com/v3/__https:/lists.openembedded.org/g/openembedded-devel/unsub__;!!AjveYdw8EvQ!ZzYDx7kFVh5e_WREHKtwOKlB0gzWJ5uBreZgWz17XbqSPIpRoCWlAxdMV_d3cedWCD1nDmiLXuSYttC2KpO6$> [raj.khem@gmail.com<mailto:raj.khem@gmail.com>]
> -=-=-=-=-=-=-=-=-=-=-=-
>
[-- Attachment #1.2: Type: text/html, Size: 51220 bytes --]
[-- Attachment #2: B53CC402AB9B4A5DA389AE330172DEE2.png --]
[-- Type: image/png, Size: 160 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2022-10-06 8:17 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-10-03 6:27 [meta-openembedded][PATCH 1/1] net-snmp: upgrade 5.9.1 -> 5.9.3 Narpat Mali
2022-10-03 6:59 ` [oe] " Khem Raj
2022-10-03 17:11 ` Mali, Narpat
2022-10-03 19:41 ` Khem Raj
2022-10-04 7:15 ` [oe] [kirkstone] [PATCH " Mali, Narpat
2022-10-06 8:17 ` Mali, Narpat
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.