net-snmp (5.7.3+dfsg-1.7ubuntu1) artful; urgency=medium
* Merge with Debian unstable (LP: #1712569). Remaining changes:
- Add apport hook.
+ d/control: add dh-apport to Build-Depends
+ d/rules: install the apport hook via debhelper
+ d/source.apport: apport hook
- Avoid installing links in rc[06].d.
- d/p/my_load_defaults: use my_load_defaults instead of the
libmysqlclient-internal load_defaults (LP #1565003). Thanks to Lars
Tangvald.
* Drop:
- SECURITY UPDATE: denial of service and possible code execution via
incompletely parsed varBind variables
+ debian/patches/CVE-2015-5621.patch: don't return incorrectly parsed
varbinds in snmplib/snmp_api.c.
+ CVE-2015-5621
[Added by Debian as 0025-Bug-788964-net-snmp-snmp_pdu_parse-DoS.patch
in 5.7.3+dfsg-1.1]
- debian/snmp.preinst:
It turns out that the original motivation why killall was added is gone.
So we can just remove the killall introduced by Ubuntu LP #573391
(Closes: #781257, LP #1245604)
[Fixed in Debian 5.7.3+dfsg-1.1]
- Fix "FTBFS with Perl 5.24: error: conflicting types for 'U64'":
add patch from upstream git which removes the U64 typedef from the
Net-SNMP header files.
Thanks to Niky Tyni for extracting the patch.
(Closes: #825014)
[Fixed in Debian 5.7.3+dfsg-1.5]
- Additionally add another patch from upstream git which fixes
perl/*/Makefile.PL to fix build failures with Perl 5.24.
Cf. https://sourceforge.net/p/net-snmp/bugs/2712/
[Fixed in Debian 5.7.3+dfsg-1.5]
-- Andreas Hasenack <email address hidden> Wed, 23 Aug 2017 10:29:35 -0300