This bug was fixed in the package net-snmp - 5.8+dfsg-5ubuntu1
---------------
net-snmp (5.8+dfsg-5ubuntu1) groovy; urgency=medium
* Merge with Debian unstable (LP: #1880724). Remaining changes:
- Add apport hook:
+ d/control: add dh-apport to Build-Depends
+ d/rules: install the apport hook via debhelper
+ d/source.apport: apport hook
- d/p/Link-libnetsnmptrapd-against-MYSQL_LIBS.patch:
Link libnetsnmptrapd against MYSQL_LIBS. Thanks to Adam
Williamson <awill...@redhat.com>.
(Closes #886221, LP #1814254)
- Fix build with mysql-8 (LP #1814270):
+ d/p/mysql8-replace-bool.patch: newer mysql dropped my_bool, use
char instead.
- Skip autofs entries when calling statfs to prevent autofs
being mounted on snmpd startup (LP #1835818):
+ d/p/autofs-fix-a-recently-introduced-bug.patch
+ d/p/autofs-skip-autofs-entries.patch
- d/p/fix-check-hr-filesys-autofs.patch:
+ On Linux getmntent() is available but getfsstat() not.
Hence remove #if HAVE_GETFSSTAT from around the HRFS_type
check.
* Dropped changes, incorporated by Debian:
- d/p/lp1871307-log-once-proc-net-if_inet6-failure.patch (LP #1871307):
+ MIB-II: Only log once that opening /proc/net/if_inet6 failed
- SECURITY UPDATE: Fix segmentation fault that happens when using the
snmpv3 protocol with snmpbulkget. (LP #1877027)
+ d/p/move-securityStateRef-into-free_securityStateRef.patch:
Consolidate the check of the securityStateRef pointer into the
free_securityStateRef function.
+ d/p/prevent-snmpv3-bulkget-errors-double-free.patch:
Prevent snmpv3 bulkget errors from becoming resulting in a
double free.
+ d/p/fix-usmStateReference-free.patch:
Fix typo on usm_free_usmStateReference from last patch.
+ d/p/unexport-struct-usmStateReference.patch:
Unexport struct usmStateReference and to prevent ABI breakages,
since it will be necessary to add a reference count to it.
+ d/p/introduce-refcount-usmStateReference.patch:
Introduce refcount in the struct usmStateReference, and adjust
code to properly use the field.
+ CVE-2019-20892
-- Sergio Durigan Junior <sergio.duri...@canonical.com> Thu, 06 Aug
2020 11:42:13 -0400
** Changed in: net-snmp (Ubuntu Groovy)
Status: Triaged => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-20892
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1880724
Title:
Add (D)TLS support by default to snmpd
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1880724/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
