Merge net-snmp from Debian unstable for kinetic

[Bryce Harrington]

Upstream: tbd
Debian: 5.9.1+dfsg-1
Ubuntu: 5.9.1+dfsg-1ubuntu2.1

Debian does new releases regularly, so it's likely there will be newer versions available before FF that we can pick up if this merge is done later in the cycle.

As part of the merge, please also consider including a fix for LP: #1742761 "Drop dh-apport to reduce delta with Debian".

### New Debian Changes ###

net-snmp (5.9.1+dfsg-1) unstable; urgency=medium

  [ Owen Evans ]
  * Enable Blumenthal AES-192 and AES-256 encryption Closes: #972985

  [ Ferenc Wágner ]
  * Enable systemd integration and UDP socket activation
    Closes: #985369

  [ Sergio Durigan Junior ]
  * d/libsnmp-dev.install: Don't install archive (.a) files.
    The archive files are just temporary files generated in order to
    create the final shared objects (.so), and we don't need to ship them
    in the package.

  [ Debian Janitor ]
  * Trim trailing whitespace.

  [ Vagrant Cascadian ]
  * Embed path to ps and uname. Closes: #978598

  [ Craig Small ]
  * Make the perl agent code more tolerant of perl types, thanks
    to Guillem Jover for the patch Closes: #977573
  * Make CI files use correct libmariadb-dev package names
    Closes: #975477
  * mib2c: Add recommends and fix error message Closes: #990706

  * Add configuration directory for snmpd
  * New upstream release
  * Add Recommends: procps for snmpd Closes: #993997

 -- Craig Small <email address hidden> Mon, 20 Sep 2021 21:35:58 +1000

net-snmp (5.9+dfsg-3) unstable; urgency=medium

  * Source only upload - no changes Closes: #970798

 -- Craig Small <email address hidden> Fri, 25 Sep 2020 09:10:00 +1000

net-snmp (5.9+dfsg-2) unstable; urgency=medium

  * Move SNMP.3pm back to perl package Closes: #969436
  * Moved snmptrapd library into its own package to not pull in mysql
    dependencies for snmp/snmpd Closes: #953948

 -- Craig Small <email address hidden> Sun, 06 Sep 2020 21:52:58 +1000

net-snmp (5.9+dfsg-1) unstable; urgency=medium

  [ Sergio Durigan Junior ]
  * Link libnetsnmptrapd against MYSQL_LIBS
    - d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch: When building
      with MySQL (MariaDB) support, this library must be linked against the
      MySQL client library, or else it will have unresolved symbols.
    (Closes: #886221)

  [ Craig Small ]
  * New upstream release
  * Removed patches included in upstream
  * Library soname changed to 40
  * Remove dbg packages, no need to migrate as new soname

 -- Craig Small <email address hidden> Sat, 22 Aug 2020 17:11:17 +1000

net-snmp (5.8+dfsg-5) unstable; urgency=medium

  * Allow extend to be read-only Closes: #966544
  * Stop using mib_index files CVE-2020-15861 Closes: 966599

 -- Craig Small <email address hidden> Fri, 31 Jul 2020 20:29:41 +1000

net-snmp (5.8+dfsg-4) unstable; urgency=high

  [ Sergio Durigan Junior ]
  * Fix segmentation fault that happens when using the snmpv3
    protocol with snmpbulkget. (LP #1877027) (Debian Bug #963713)
    This is a rework of the patches introduced in the last release,
    to fix CVE-2019-20892.
    - d/p/move-securityStateRef-into-free_securityStateRef.patch:
      Consolidate the check of the securityStateRef pointer into the
      free_securityStateRef function.
    - d/p/prevent-snmpv3-bulkget-errors-double-free.patch:
      Prevent snmpv3 bulkget errors from becoming resulting in a
      double free.
    - d/p/fix-usmStateReference-free.patch:
      Fix typo on usm_free_usmStateReference from last patch.
    - d/p/unexport-struct-usmStateReference.patch:
      Unexport struct usmStateReference and to prevent ABI breakages,
      since it will be necessary to add a reference count to it.
    - d/p/introduce-refcount-usmStateReference.patch:
      Introduce refcount in the struct usmStateReference, and adjust
      code to properly use the field.
    - d/p/libsnmp-securitystateref: Rename to
      d/p/move-securityStateRef-into-free_securityStateRef.
    - d/p/doublefree_snmpusm: Rename to
      d/p/prevent-snmpv3-bulkget-errors-double-free.patch.

  [ Debian Janitor ]
  * Trim trailing whitespace.

### Old Ubuntu Delta ###

net-snmp (5.9.1+dfsg-1ubuntu2) jammy; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <email address hidden> Sun, 06 Feb 2022 13:33:00 +0100

net-snmp (5.9.1+dfsg-1ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946877, #1912390). Remaining changes:
    - Add apport hook:
      + d/control: add dh-apport to Build-Depends
      + d/rules: install the apport hook via debhelper
      + d/source.apport: apport hook
    - d/p/lp1945960-*: backport patches for the OpenSSL3 transition
      (LP #1945960)
  * Dropped changes, incorporated by Debian:
    - d/libsnmp-dev.install: Don't install archive (.a) files.
      The archive files are just temporary files generated in order to
      create the final shared objects (.so), and we don't need to ship
      them in the package.
  * Dropped changes, incorporated upstream:
    - Fix segmentation fault when certificate contains extension
      longer than 512 bytes (LP #1912389)
      + d/p/lp1912389-libsnmp-Handle-certificate-loading-errors-gracefully.patch:
        Skip certificate if loading fails.
      + d/p/lp1912389-libsnmp-SSL-Increase-extension-buffer-size-to-preven.patch:
        Make sure enough space is allocated for extensions longer than
        512 bytes.

 -- Sergio Durigan Junior <email address hidden> Tue, 11 Jan 2022 20:39:24 -0500

[Sergio Durigan Junior (sergiodj)]

Nothing to merge yet.

[Bryce Harrington (bryce)]

There is a -2 available from debian with a few bugfixes:

$ rmad net-snmp
 net-snmp | 5.9.1+dfsg-1ubuntu2.1 | kinetic
 net-snmp | 5.9.1+dfsg-1ubuntu2.1 | kinetic-proposed
net-snmp | 5.9.1+dfsg-1 | testing
net-snmp | 5.9.1+dfsg-2 | unstable

net-snmp (5.9.1+dfsg-2) unstable; urgency=medium

  * Fix path for net-snmp-create-v3-user Closes: #997895
  * Use pidof for net-snmp-create-v3-user so don't need procps
  * Make snmpd.conf group readable Closes: #998152
  * Reapplied perl callback patch Closes: #1011440

 -- Craig Small <email address hidden> Wed, 25 May 2022 22:09:23 +1000

[Sergio Durigan Junior (sergiodj)]

Thanks, Bryce. I'll address this one next week.

[Sergio Durigan Junior (sergiodj)]

I noticed that Debian's net-snmp is FTBFSing due to the openssl 3.0 transition (which is happening now for them). I'm working with the package maintainer in order to have the package build again there, so that when I merge it I can also drop our own openssl 3-related patches. For this reason, I will put this merge on hold for now.

[Launchpad Janitor (janitor)]

This bug was fixed in the package net-snmp - 5.9.1+dfsg-4ubuntu1

---------------
net-snmp (5.9.1+dfsg-4ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable (LP: #1971295, #1894190). Remaining changes:
    - Add apport hook:
      + d/control: add dh-apport to Build-Depends
      + d/rules: install the apport hook via debhelper
      + d/source.apport: apport hook
  * Dropped changes:
    - d/p/lp1945960-*: backport patches for the OpenSSL3 transition
      (LP #1945960)
    [ Included in 5.9.1+dfsg-3 ]
    - d/p/lp1969623-net-snmp-create-v3-user-Fix-the-snmpd.conf-path.patch:
      Set ${datarootdir} value in net-snmp-create-v3-user and fix
      error when creating user. (LP #1969623)
    [ Included in 5.9.1+dfsg-3 ]
    - d/control: Build-Depend on libsensors4-dev.
    [ Unnecessary; libsensors4-dev is a dummy transitional package to
      libsensors-dev ]

 -- Sergio Durigan Junior <email address hidden> Mon, 13 Jun 2022 17:36:01 -0400