net-snmp (5.9.1+dfsg-1ubuntu2.9) jammy-security; urgency=medium

  * SECURITY UPDATE: Buffer overflow vulnerability
    - debian/patches/CVE-2025-68615.patch: snmptrapd: Fix out-of-bounds
    trapOid[] accesses
    - CVE-2025-68615

 -- Nick Galanis <nick.galanis@canonical.com>  Tue, 06 Jan 2026 14:39:53 +0200

net-snmp (5.9.1+dfsg-1ubuntu2.8) jammy; urgency=medium

  * d/p/lp-2056257-Add-Linux-6.7-compatibility-parsing-proc-net-snmp.patch:
    fix parsing on newer kernels (LP: #2056257)

 -- Christian Ehrhardt <christian.ehrhardt@canonical.com>  Thu, 06 Mar 2025 07:50:08 +0100

net-snmp (5.9.1+dfsg-1ubuntu2.7) jammy; urgency=medium

  * d/patches: apply patch set to fix segfault caused by use after free.
    (LP: #720638)
    - d/p/pass-nw-if.patch: pass network interface index to
      netsnmp_access_interface_entry_create.
    - d/p/fix-memory-leak.patch: fix possible memory leak when reading network
      interfaces.
    - d/p/fix-if-race-cond.patch: fix race condition when scanning network
      interfaces.
    - d/p/fix-use-after-free.patch: fix use after free.

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Tue, 27 Aug 2024 20:20:43 -0300

net-snmp (5.9.1+dfsg-1ubuntu2.6) jammy; urgency=medium

  * Fix snmptrapd reconnection issue after hitting MySQL wait_timeout
    (LP: #1999711)
    - d/p/snmptrapd-mysql-reconnection-after-hitting-wait_timeout.patch
    - d/p/snmptrapd-mysql-fix-build-error.patch

 -- Chengen Du <chengen.du@canonical.com>  Fri, 17 Feb 2023 03:25:16 +0000

net-snmp (5.9.1+dfsg-1ubuntu2.5) jammy; urgency=medium

  * d/p/restore-support-for-long-dns-names.patch: Fix snmp requests for domains
    longer than 63 characters (LP: #1998461)

 -- Lena Voytek <lena.voytek@canonical.com>  Mon, 23 Jan 2023 11:33:32 -0700

net-snmp (5.9.1+dfsg-1ubuntu2.4) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via null pointer exception issues
    - debian/patches/CVE-2022-4479x-1.patch: disallow SET with NULL varbind
      in agent/snmp_agent.c.
    - debian/patches/CVE-2022-4479x-2.patch: allow SET with NULL varbind
      for testing in apps/snmpset.c.
    - debian/patches/CVE-2022-4479x-3.patch: add test for NULL varbind set
      in testing/fulltests/default/T0142snmpv2csetnull_simple.
    - CVE-2022-44792
    - CVE-2022-44793
  * This package does _not_ contain the changes from 5.9.1+dfsg-1ubuntu2.3
    in jammy-proposed.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 06 Jan 2023 11:02:17 -0500

net-snmp (5.9.1+dfsg-1ubuntu2.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Multiple security issus
    - debian/patches/CVE-2022-248xx-1.patch: fix bounds checking in
      NET-SNMP-AGENT-MIB, NET-SNMP-VACM-MIB, SNMP-VIEW-BASED-ACM-MIB,
      SNMP-USER-BASED-SM-MIB in  agent/mibgroup/agent/nsLogging.c,
      agent/mibgroup/agent/nsVacmAccessTable.c,
      agent/mibgroup/mibII/vacm_vars.c, agent/mibgroup/snmpv3/usmUser.
    - debian/patches/CVE-2022-248xx-2.patch: recover SET status from
      delegated request in agent/snmp_agent.c.
    - CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
      CVE-2022-24809, CVE-2022-24810

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 25 Jul 2022 14:22:08 -0400

net-snmp (5.9.1+dfsg-1ubuntu2.1) jammy; urgency=medium

  * d/p/lp1969623-net-snmp-create-v3-user-Fix-the-snmpd.conf-path.patch:
    Set ${datarootdir} value in net-snmp-create-v3-user and fix
    error when creating user.  (LP: #1969623)

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Thu, 21 Apr 2022 16:14:05 -0400

net-snmp (5.9.1+dfsg-1ubuntu2) jammy; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <doko@ubuntu.com>  Sun, 06 Feb 2022 13:33:00 +0100

net-snmp (5.9.1+dfsg-1ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946877, #1912390). Remaining changes:
    - Add apport hook:
      + d/control: add dh-apport to Build-Depends
      + d/rules: install the apport hook via debhelper
      + d/source.apport: apport hook
    - d/p/lp1945960-*: backport patches for the OpenSSL3 transition
      (LP #1945960)
  * Dropped changes, incorporated by Debian:
    - d/libsnmp-dev.install: Don't install archive (.a) files.
      The archive files are just temporary files generated in order to
      create the final shared objects (.so), and we don't need to ship
      them in the package.
  * Dropped changes, incorporated upstream:
    - Fix segmentation fault when certificate contains extension
      longer than 512 bytes (LP #1912389)
      + d/p/lp1912389-libsnmp-Handle-certificate-loading-errors-gracefully.patch:
        Skip certificate if loading fails.
      + d/p/lp1912389-libsnmp-SSL-Increase-extension-buffer-size-to-preven.patch:
        Make sure enough space is allocated for extensions longer than
        512 bytes.

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Tue, 11 Jan 2022 20:39:24 -0500

# For older changelog entries, run 'apt-get changelog libsnmp-base'
