Skip to contentSkip to conversation

netsnmp: bump to version 5.7.3

PATCH New Gustavo Zacarias 3 participants 3 messages Dec 9, 2014 – Dec 10, 2014

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 netsnmp: bump to version 5.7.3

Security patch now upstream so remove.
Add hash file.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/netsnmp/netsnmp-001-CVE-2014-2285.patch | 31 -------------------------
 package/netsnmp/netsnmp.hash                    |  4 ++++
 package/netsnmp/netsnmp.mk                      |  2 +-
 3 files changed, 5 insertions(+), 32 deletions(-)
 delete mode 100644 package/netsnmp/netsnmp-001-CVE-2014-2285.patch
 create mode 100644 package/netsnmp/netsnmp.hash
package/netsnmp/netsnmp-001-CVE-2014-2285.patch deleted +0 -31
deleted file mode 100644
index d7a3057..0000000
@@ -1,31 +0,0 @@
-Fix for CVE-2014-2285 from upstream:
-http://sourceforge.net/p/net-snmp/patches/1275/
-
-Signed-off-by: Gustavo Zacarias <[email protected]>
-
---- net-snmp-5.7.3.pre3/perl/TrapReceiver/TrapReceiver.xs.null	2014-02-25 21:50:16.000000000 +0100
-+++ net-snmp-5.7.3.pre3/perl/TrapReceiver/TrapReceiver.xs	2014-03-03 18:59:20.261766270 +0100
-@@ -81,18 +81,18 @@ int   perl_trapd_handler( netsnmp_pdu
-         STOREPDUi("securitymodel", pdu->securityModel);
-         STOREPDUi("securitylevel", pdu->securityLevel);
-         STOREPDU("contextName",
--                 newSVpv(pdu->contextName, pdu->contextNameLen));
-+                 newSVpv(pdu->contextName ? pdu->contextName : "", pdu->contextNameLen));
-         STOREPDU("contextEngineID",
--                 newSVpv((char *) pdu->contextEngineID,
-+                 newSVpv(pdu->contextEngineID ? (char *) pdu->contextEngineID : "",
-                                     pdu->contextEngineIDLen));
-         STOREPDU("securityEngineID",
--                 newSVpv((char *) pdu->securityEngineID,
-+                 newSVpv(pdu->securityEngineID ? (char *) pdu->securityEngineID : "",
-                                     pdu->securityEngineIDLen));
-         STOREPDU("securityName",
--                 newSVpv((char *) pdu->securityName, pdu->securityNameLen));
-+                 newSVpv(pdu->securityName ? (char *) pdu->securityName : "", pdu->securityNameLen));
-     } else {
-         STOREPDU("community",
--                 newSVpv((char *) pdu->community, pdu->community_len));
-+                 newSVpv(pdu->community ? (char *) pdu->community : "", pdu->community_len));
-     }
- 
-     if (transport && transport->f_fmtaddr) {
package/netsnmp/netsnmp.hash new file +4 -0
new file mode 100644
index 0000000..2c18441
@@ -0,0 +1,4 @@
+# From http://sourceforge.net/projects/net-snmp/files/net-snmp/5.7.3/
+md5	d4a3459e1577d0efa8d96ca70a885e53	net-snmp-5.7.3.tar.gz
+sha1	97dc25077257680815de44e34128d365c76bd839	net-snmp-5.7.3.tar.gz
+
package/netsnmp/netsnmp.mk +1 -1
index d20ce50..1897478 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-NETSNMP_VERSION = 5.7.2.1
+NETSNMP_VERSION = 5.7.3
 NETSNMP_SITE = http://downloads.sourceforge.net/project/net-snmp/net-snmp/$(NETSNMP_VERSION)
 NETSNMP_SOURCE = net-snmp-$(NETSNMP_VERSION).tar.gz
 NETSNMP_LICENSE = Various BSD-like
Signature · 1 line
2.0.4
#1 lore raw

PATCH 1/1 netsnmp: bump to version 5.7.3

Dear Gustavo Zacarias,

- Built fine for MIPS
- Hash checking OK
- Files installed in the right place and built for the right architecture

net-snmp-5.7.3.tar.gz: OK (md5: d4a3459e1577d0efa8d96ca70a885e53) net-snmp-5.7.3.tar.gz: OK (sha1: 97dc25077257680815de44e34128d365c76bd839)

$ file output/target/usr/lib/libnetsnmp.so.30.0.3
output/target/usr/lib/libnetsnmp.so.30.0.3: ELF 32-bit MSB shared
object, MIPS, MIPS32 rel2 version 1 (SYSV), dynamically linked, with
unknown capability 0x41000000 = 0xf676e75, with unknown capability
0x10000 = 0x70403, stripped
Reviewed-by Vicente Olivert Riera <[email protected]>
Tested-by Vicente Olivert Riera <[email protected]>

Best regards,

Signature · 5 lines
Vicente Olivert Riera
Graduate Software Engineer, MIPS Platforms
Imagination Technologies Limited
t: +44 (0)113 2429814
www.imgtec.com
Applied
#2 lore raw

PATCH 1/1 netsnmp: bump to version 5.7.3

In reply to Gustavo Zacarias

Dear Gustavo Zacarias,

Quoted 11 lines · Gustavo Zacarias

Security patch now upstream so remove.
Add hash file.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/netsnmp/netsnmp-001-CVE-2014-2285.patch | 31 -------------------------
 package/netsnmp/netsnmp.hash                    |  4 ++++
 package/netsnmp/netsnmp.mk                      |  2 +-
 3 files changed, 5 insertions(+), 32 deletions(-)
 delete mode 100644 package/netsnmp/netsnmp-001-CVE-2014-2285.patch
 create mode 100644 package/netsnmp/netsnmp.hash

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com