net-snmp/net-snmp.spec

464 lines
15 KiB
RPMSpec
Raw Normal View History

#
# spec file for package net-snmp
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
%define netsnmp_logfile %{_localstatedir}/log/net-snmpd.log
%define netsnmp_agentx_socket_dir_fhs %{_rundir}/agentx
%define netsnmp_agentx_socket_dir_rfc %{_localstatedir}/agentx
# Compat macro for new _fillupdir macro introduced in Nov 2017
%if ! %{defined _fillupdir}
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
%ifnarch s390 s390x
%define netsnmp_with_sensors 1
%endif
%define libname libsnmp40
%bcond_without python2
Name: net-snmp
Version: 5.9.4
Release: 0
Summary: SNMP Daemon
License: BSD-3-Clause AND MIT
Group: Productivity/Networking/Other
URL: https://sourceforge.net/projects/net-snmp
Source: https://sourceforge.net/projects/net-snmp/files/net-snmp/%{version}/%{name}-%{version}.tar.gz
Source1: snmpd.conf
Source2: README.SUSE
Source3: net-snmp.logrotate
Source4: test_installed
Source7: https://sourceforge.net/projects/net-snmp/files/net-snmp/%{version}/%{name}-%{version}.tar.gz.asc
Source8: http://www.net-snmp.org/net-snmp-admin.asc#/%{name}.keyring
Source10: snmpd.sysconfig
Source11: snmptrapd.sysconfig
Source20: net-snmp-tmpfs.conf
Source98: net-snmp-rpmlintrc
Source99: baselibs.conf
Patch1: net-snmp-5.9.4-socket-path.patch
Patch2: net-snmp-5.9.4-testing-empty-arptable.patch
Patch3: net-snmp-5.9.4-pie.patch
Patch4: net-snmp-5.9.4-net-snmp-config-headercheck.patch
Patch5: net-snmp-5.9.4-perl-tk-warning.patch
Patch6: net-snmp-5.9.4-snmpstatus-suppress-output.patch
Patch7: net-snmp-5.9.4-fix-Makefile.PL.patch
Patch8: net-snmp-5.9.4-modern-rpm-api.patch
Patch9: net-snmp-5.9.4-add-lustre-fs-support.patch
Patch10: net-snmp-5.9.4-harden_snmpd.service.patch
Patch11: net-snmp-5.9.4-harden_snmptrapd.service.patch
Patch12: net-snmp-5.9.4-suse-systemd-service-files.patch
Patch13: net-snmp-5.9.4-fix-create-v3-user-outfile.patch
Patch14: net-snmp-5.9.4-subagent-set-response.patch
Patch15: net-snmp-5.9.4-fixed-python2-bindings.patch
Patch16: net-snmp-5.9.4-add-netgroups-functionality.patch
Patch17: net-snmp-5.9.4-systemd-no-utmp.patch
BuildRequires: %{python_module devel}
BuildRequires: %{python_module setuptools}
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: libtool
BuildRequires: ncurses-devel
BuildRequires: openssl-devel
BuildRequires: procps
BuildRequires: python-rpm-macros
BuildRequires: rpm-devel
BuildRequires: systemd-devel
BuildRequires: systemd-rpm-macros
BuildRequires: tcpd-devel
Requires: logrotate
Requires: perl-SNMP = %{version}
Requires: perl-TermReadKey
Requires(post): %fillup_prereq
%if 0%{?netsnmp_with_sensors}
BuildRequires: libsensors4-devel
%endif
Accepting request 881354 from home:bnavigator:branches:network:utilities - Can't assume non-existence of python38 macros in Leap. gh#openSUSE/python-rpm-macros#107 Test for suse_version instead. Only Tumbleweed has and needs the python_subpackage_only support. - update to 5.9: snmplib: - Add IPv6 support to DTLSUDP transport CHANGES: snmplib: use new netsnmp_sockaddr_storage in netsnmp_addr_pair CHANGES: snmplib: add base_transport ptr for tunneled transports snmpd: - Security vulnerabilty in the ping MIB reported by Christopher Ertl from Microsoft fixed - Changing to a different uid/gid can only be done once - The extend mib is now read-only by default snmptrap: - BUG: 2899: Patch from Drew Roedersheimer to set library engineboots/time values before sending unspecified: - Add pkg-config support for building applications and sub-agents Use the netsnmp package when building Net-SNMP applications. Use the netsnmp-agent package when building Net-SNMP subagents. - drop net-snmp-5.8-fix-python3.patch, net-snmp-5.8-netgroups.patch: obsolete - Update the tmpfiles.d/ drop-in file - remove legacy directory Fixes boo#1137761 and boo#1176997 - Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79 - Support multiple python 3 flavors in the python subpackage gh#openSUSE/python-rpm-macros#66 - Change /etc/logrotate.d/net-snmp from init.d to systemd fix boo#1173487. - Add -fcommon in order to fix boo#1160404. - Add Lustre filesystem support (bsc#1140341). Add net-snmp-5.8-add-lustre-fs-support.patch - Remove FIRST_ARG usage from spec file (bsc#1126426). - Update to net-snmp-5.8. Fixes included: * Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) * Fix agentx freezing on timeout (bsc#1027353) * swintst_rpm: Protect against unspecified Group name (bsc#1102775) - Add tsm and tlstm MIBs and the USM security module. (bsc#1081164) - Rename and refactor patches and remove those that are already included inside the new version. Added: * net-snmp-5.8-socket-path.patch * net-snmp-5.8-testing-empty-arptable.patch * net-snmp-5.8-pie.patch * net-snmp-5.8-net-snmp-config-headercheck.patch * net-snmp-5.8-perl-tk-warning.patch * net-snmp-5.8-velocity-mib.patch * net-snmp-5.8-netgroups.patch * net-snmp-5.8-snmpstatus-suppress-output.patch * net-snmp-5.8-fix-Makefile.PL.patch * net-snmp-5.8-modern-rpm-api.patch * net-snmp-5.8-fix-python3.patch Removed: * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-velocity-mib.patch * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-netgroups.patch * net-snmp-5.7.3-snmpstatus-suppress-output.patch * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch * net-snmp-5.7.3-Remove-U64-typedef.patch * net-snmp-5.7.3-Fix-Makefile.PL.patch * net-snmp-5.7.3-build-with-openssl-1.1.patch * net-snmp-5.7.3-modern-rpm-api.patch * net-snmp-python3.patch * net-snmp-5.7.2-systemd.patch * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Create /var/agentx via systemd tmpfiles in case of rollback, snapshots and transactional updates [bsc#1098032] - Fix permissions on unit files wrt bsc#1087977 - Use %license (boo#1082318) - Remove executable flags from systemd service files (bsc#1089295). - Fix RPM group for shlib subpackage. - Properly conditionalize the py2 build - Add patch from Fedora to support natively systemd: * net-snmp-5.7.2-systemd.patch - Drop the check phase as whole 90% of the tests fail it makes more sense to run them somewhere localy - Take systemd service files from fedora to replace sysV scripts - Also convert the sysconfig files to match fedora ones, they get bit more terse but it works seamlessly with systemd - Format with spec-cleaner - Drop sle11 support as it fails to build anyway for ages - Rename python packages to be python-%{name} with obsoletes * Use new singlespec macros * Add patch converting the py files to python3/2 compat mode net-snmp-python3.patch - Run full autoreconf instead of partial - Build with threads by building few targets first - Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (>= 4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being removed. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Fix build with OpenSSL 1.1 (bsc#1042664): + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated squash-patch from the following upstream commits: bbed6b86e70b5a3c54f14992696f2308a8d79511 14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8 9641b472ef01208f92631016e91b0a4a518163f0 e4c6937483d4a680570cec05388d2e4b291868a6 b906c60c8a436d7360267a6d242526b33a9aaac8 - Fix build with perl 5.24.0: + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system recursiely loading Makefile.Pl and destroying its internas. See https://rt.perl.org/Public/Bug/Display.html?id=125907 + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef conflicts with a typedef in a Perl header file. Hence remove the U64 typedef from the Net-SNMP header files. Backported from upstream commit 477b4307ef1. - make snmpd and snmptrapd log message destination configurable for syslog or a dedicated log file. (bsc#695677) - make snmpd and snmptrapd listening address(es) configurable via the sysconfig file. - fix build with GNU grep 2.23, use grep -a to force text matching - reenabled md5 and des, as some tools build against it and need the methods :( - added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Disable MD5 authentication method, disable DES support (if something breaks, tell me) - Request pkgconfig(libssl) instead of openssl-devel to support using LibreSSL as well. - update to upstream version 5.7.3 - remove patch that is now present in the upstream release: * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch - rename patches to new version number 5.7.3: delete: * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.2-net-snmp-config-headercheck.patch * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-velocity-mib.patch add: * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-velocity-mib.patch - add build requirement 'procps' to fix a net-snmp-config error (bsc#935863) - enable DTLS and TLS support (FATE#318789) new binary 'snmptls' was added - add support for hostname netgroups (FATE#316305) '@hostgroup' can be specified for multiple hosts * net-snmp-5.7.3-netgroups.patch - suppress network statistics output in snmpstatus (FATE#316289) '-Sn' don't print any info about the network '-Si' don't print the operational status of network interfaces * net-snmp-5.7.3-snmpstatus-suppress-output.patch - also stop snmptrapd on removal - update to upstream version 5.7.3.pre5 - remove patches that are now present in the upstream release: * net-snmp-5.7.2-build-fix-for-strlcat.patch * net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch * net-snmp-5.7.2-fix-perl-trap-handler.patch - net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: refresh and add patch header - added net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: fix remote denial of service problem inside snmptrapd when started with the "-OQ" option (CVE-2014-3565)(bnc#894361) - added net-snmp-5.7.2-fix-perl-trap-handler.patch: fix potential remote denial of service problem inside the snmptrapd Perl trap handler (CVE-2014-2285)(bnc#866942) - merge some old fixes from SLE 11: * init script should provide snmpd. (bnc#466805) * stop all snmp agents when stopping the daemon. (bnc#473328) - recompress .tar.gz - it has trailing garbage, hope we can readd source url on next update - update to upstream version 5.7.2.1, fixing one security issue: * A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. (CVE-2014-2284, bnc#866942) - net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch: fix mib representation of timeout values (bnc#833153) - use _rundir macro - remove old workaround for ppc/ppc64 migrations which is no longer needed (bnc#437293) - add support for python bindings - improve snmptrapd init script (avoid to overwrite the logfile on restart) - Disable parallelism during build. The dependencies between the Perl module and libnetsnmp are not defined correctly and might result in broken linkage (bnc#819497, bnc#818907) - Add Source URL, see https://en.opensuse.org/SourceUrls - net-snmp-5.7.2-build-fix-for-strlcat.patch: fix exported strlcat() prototype that could conflict with other packages (bnc#793548) - update to version 5.7.2: several bug fixes in the agent, client utilities and libraries. The CHANGES file shipped with the package contains a comprehensive list of fixes and improvements - rebase patches to apply cleanly: * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-velocity-mib.patch * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch - remove patches that are now present in the upstream release: * net-snmp-5.7.0-recognize-reiserfs.patch * net-snmp-5.7.1-snmplib-zero-timeout.patch * net-snmp-5.7.1-old-api-double-free.patch * net-snmp-5.7.1-use-pclose-to-close-pipes.patch * net-snmp-5.7.1-fix-handling-of-large-filesystems.patch * net-snmp-5.7.1-snmplib-default-retries.patch * net-snmp-5.7.1-fsys-memory-leak.patch * net-snmp-5.7.1-adjust-copyright-in-agent-txt-file.patch * net-snmp-5.7.1-recognize-ocfs2.patch * net-snmp-5.7.1-properly-clean-up-old-requests-in-subagents.patch * net-snmp-5.7.1-reduce-code-duplication-in-agentx.patch * net-snmp-5.7.1-log-agentx-disconnections.patch * net-snmp-5.7.1-more-robust-handling-of-agentx-errors.patch * net-snmp-5.7.1-report-problems-with-setundo-processing.patch * net-snmp-5.7.1-fix-array-index-error.patch - Remove redundant sections from specfile - Avoid shipping .la files - fix array index error that could lead to a crash (CVE-2012-2141) (bnc#759352) - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - add OCFS2 to the list of known file systems - update copyright notice of AGENT.txt allowing us to redistribute the file in our package (from Dave Shield) (bnc#750704) - fix license to be in spdx.org format - logrotate: use "reload" instead of "try-restart" to avoid an unnecessary stop/start cycle in the agent (bnc#707636) - net-snmp-5.7.1-fsys-memory-leak.patch: fix a memory leak in agent/mibgroup/hardware/fsys (bnc#725766) - net-snmp-5.7.1-snmplib-default-retries.patch: change default number of retries back from 0 to 5 (bnc#725766) - net-snmp-5.7.1-fix-handling-of-large-filesystems.patch: fix bug in handling large (>8TB) filesystems (bnc#725766) - net-snmp-5.7.1-use-pclose-to-close-pipes.patch: use pclose() instead of fclose() to close a pipe (bnc#725766) - net-snmp-5.7.1-old-api-double-free.patch: agent: avoid double free when netsnmp_register_old_api() fails (bnc#725766) - net-snmp-5.7.1-snmplib-zero-timeout.patch: snmplib: avoid waiting indefinitely if a session has timeout zero (bnc#725766) - update to version 5.7.1: minor release including some bug fixes - enable net-snmp-devel on all baselib architectures - make sure all delegated requests are removed before closing an AgentX session (bnc#670789) - update to version 5.7.1.rc1 but keep package version as 5.7.1 to avoid update problems when the final version is released - small fixes to snmpd and snmptrapd init scripts: - if $SNMPD_LOGLEVEL is not defined, use LOG_NOTICE instead of LOG_DEBUG - improve messages printed and service description - write snmptrapd logs to /var/log/net-snmpd.log - update README.SUSE to reflect some recent changes and drop a bit of outdated information - update baselibs to reflect new library version - spec file cleanup: rename some source files for consistency - add ReiserFS to the list of known file systems (bnc#715199) - install snmptrapd init script by default (bnc#712175) - fix logging option in snmptrapd init script (bnc#712174) - update upstream patches from branch V5-7-patches to 20110714 - update to version 5.7: new features and lots of bug fixes - remove patches that are no longer needed: net-snmp-5.6.0-enable-hrh-filesys.patch net-snmp-5.6.1-recognize-jfs-and-xfs.patch net-snmp-5.6.1-rpm490.patch - refresh and rename patches to apply cleanly after update: net-snmp-5.7.0-pie.patch net-snmp-5.7.0-velocity-mib.patch - switch from rpmdb to rpmts to support rpm-4.9.0 - update upstream patches from branch V5-6-patches to 20110512 - add JFS and XFS to the list of known file systems (bnc#687327) - update upstream patches from branch V5-6-patches to 20110328 - fix libsnmp version in baselibs.conf - update to version 5.6.1: new features and lots of bug fixes - update upstream patches from branch V5-6-patches to 20110104 - remove patches that are no longer needed: net-snmp-5.6.0-ethtool-speed.patch - remove /var/adm/perl-modules/net-snmp from the Perl module - update upstream patches from branch V5-6-patches to 20101129 - spec file cleanup: upstream uses -fno-strict-aliasing by default now - remove patches that are no longer needed: net-snmp-5.5.0-rpmdb-h-detect.patch net-snmp-5.6.0-vendorperl.patch - if-mib: add support for more speeds with ethtool (bnc#650558) - update upstream patches from branch V5-6-patches to 20101101, fixing a segmentation fault on shutdown (bnc#650282) - enable new implementation of hrStorage and hrFilesys to fix persistent indexes in FS and Storage tables (bnc#648364) - update upstream patches from branch V5-6-patches to 20101021 - update to version 5.6: new features and lots of bug fixes - refresh and rename patches to apply cleanly after update: net-snmp-5.6.0-pie.patch net-snmp-5.6.0-vendorperl.patch net-snmp-5.6.0-net-snmp-config-headercheck.patch - update upstream patches from branch V5-5-patches to 20100803 - change default log level from DEBUG to NOTICE (bnc#623497) - spec file cleanup: remove old backward compatibility scripts - update upstream patches from branch V5-5-patches to 20100602: fixed potential buffer overflow in parsing OIDs in config files - update upstream patches from branch V5-5-patches to 20100531 - add net-snmp-5.5.0-rpmdb-h-detect.patch: workaround for autoconf failing to detect rpm/rpmdb.h - remove patches that are no longer needed: net-snmp-5.5.0-use-lmsensors-v3.patch - create /var/run/agentx during startup to support systems that mount /var/run as tmpfs - update libsnmp package name to reflect the library version we are currently shipping - remove patches that are obsolete: net-snmp-5.4.rc2-versinfo.diff net-snmp-5.4.2_snmpconf-selinux.patch - refresh all patches to apply as "-p1" - spec file cleanup: remove conditionals to build on unsupported versions of the distribution - update upstream patches from branch V5-5-patches to 20100428 - add net-snmp-5.5.0_upstream-20100405.patch: merge all patches committed to upstream branch V5-5-patches - remove patches that are now upstream: net-snmp-5.4.2_audit.patch net-snmp-5.5.0_autoconf.patch net-snmp-5.4.2_overflow.patch net-snmp-5.4.2.1-rpm4.7.patch net-snmp-5.5.0_gcc45.patch - Fix strncat properly (from Andreas Jaeger) - Fix code errors found by gcc 4.5 - build for libsensors4 instead of libsensors3 - remove sparcv9-specific baselib exceptions (not needed) - remove net-snmp-5.4.1.2-rmon-mib-revised_3.patch from sources (upstream since 5.5) - refresh net-snmp-5.5.0_autoconf.patch - spec file cleanup: update package description - update to version 5.5: new features and lots of bug fixes, including: - fix hrSWRunPath for processes other than init (bnc#486270) - remove patches that are now upstream: Add-Default-Router-Table-support.patch Add-ICMP-Statistics-Tables-support.patch Add-IPv6-Scope-Zone-Index.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Prefix-Table.patch Fix-for-Internet-Address-Table.patch Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Improve-IP-Statistics-tables.patch net-snmp-5.3.0.1_trap-agent-addr_v2.patch net-snmp-5.4.1.2-etherlike-mib-revised_4.patch net-snmp-5.4.x_embedded_perl_error_message.patch - add baselibs.conf as a source - add baselib defs for SPARC - Fix build with rpm 4.7 (net-snmp-5.4.2.1-rpm4.7.patch) - make patch0 usage consistent - updated patches from Dell: Those patches incorporate the latest fixes for remarks from the upstream review old: net-snmp-5.4.1.2-rmon-mib-revised.patch new: net-snmp-5.4.1.2-rmon-mib-revised_3.patch old: net-snmp-5.4.1.2-etherlike-mib-revised_2.patch new: net-snmp-5.4.1.2-etherlike-mib-revised_4.patch - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) - fix the snmptrapd init script: 1. make sure the config isnt loaded twice. 2. do not truncate the net-snmp.log 3. use SNMPD_LOGLEVEL aswell. 4. write a pid - update snmptrapd section in README.SuSE - whitespace cleanup in both init scripts - update patches from Dell: Upstream asked to reduce the logging in the mib module. old name net-snmp-5.4.1.2-etherlike-mib-revised_1.patch new name net-snmp-5.4.1.2-etherlike-mib-revised_2.patch - Remove the recommends on perl-Tk again. We rely on the fixed warning in the perl_tk_warnings.patch. (bnc#443047) - SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf - added net-snmp-5.4.x_embedded_perl_error_message.patch: fix typo in error message (bnc#439857) - update to 5.4.2.1: (bnc#440950) (CVE-2008-4309) fix crash in getbulk handling code - obsolete old -XXbit packages (bnc#437293) - added net-snmp-5.4.2_velocity-mib.patch (FATE#303556) - refreshed patches to apply cleanly: old: net-snmp-5.1.2-snmpconf-selinux.patch new: net-snmp-5.4.2_snmpconf-selinux.patch old: net-snmp-5.2.1-overflow.diff new: net-snmp-5.4.2_overflow.patch old: net-snmp-5.2.1.testing.empty_arptable.patch new: net-snmp-5.4.2_testing.empty_arptable.patch old: net-snmp-5.3.0.1-audit.diff new: nmp-5.4.2_audit.patch old: net-snmp-5.3_vendorperl.patch new: net-snmp-5.4.2_vendorperl.patch old: net-snmp-5.4.1-autoconf.diff new: net-snmp-5.4.2_autoconf.patch old: net-snmp-5.4.1_perl_tk_warning.patch new: net-snmp-5.4.2_perl_tk_warning.patch old: net-snmp-5.4_net-snmp-config_headercheck.patch new: net-snmp-5.4.2_net-snmp-config_headercheck.patch - more IPv6 support from IBM (mainline backports) (bnc#437208) Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Table.patch Add-ICMP-Statistics-Tables-support.patch Add-Default-Router-Table-support.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-Internet-Address-Prefix-Table.patch Add-IPv6-Scope-Zone-Index.patch Improve-IP-Statistics-tables.patch - remove lzma-alpha-devel. rpm-devel has to require it if it is really needed - updated patches from Dell: net-snmp-5.4.1.2-etherlike-mib-revised_1.patch net-snmp-5.4.1.2-rmon-mib-revised.patch Those 2 patches obsolete the previous 3 patches. - fix typo in the init script which breaks loading of agents (bnc#415127) - also restart snmptrapd after logrotate (bnc#378069) - add patches from Dell: (Fate#304310) net-snmp-5.4.1.2-etherlike-mib-revised.patch net-snmp-5.4.1.2-rmon-mib.patch net-snmp-5.4.2_fix_dell_patches.patch - update to version 5.4.2 - [PATCH 1921861]: Avoid endless loop after truncating 64bit int - Better handling of CONTAINER_INSERT failures with multiple indices - [PATCH 2023633]: add SCTP-MIB implementation (Linux only) - suppress annoying "registration != duplicate" warning for root oids - Update to libtool 1.5.26 - add net-snmp-5.4.1_perl_tk_warning.patch (bnc#392695) correctly recommend installing the perl-Tk package instead of referring to cpan. - fix Required-Stop in the init scripts - cleanup the spec file: - moved files from the mibs package to the packages where they really belong (snmpconf-data, mib2c) - move mib2c from the perl package to the devel package - fixed wrong SELinux context (selinux.patch) [Fate#303662] - fix init scripts - use %fillup_only as we dont launch the daemon per default - added baselibs.conf file to build xxbit packages for multilib support - added lzma-alpha-devel to buildreq - libsensors is in a separate package now. - update to 5.4.1 many small fixes. the highlights: - link only needed libraries - memleaks fixed - python bindings (not yet packaged) - rediffed net-snmp-5.4.rc1-autoconf.diff new name net-snmp-5.4.1-autoconf.diff - no longer build against lm_sensors on s390 - split out new packages: libsnmp15, snmp-mibs - update to 5.4.rc2: tons of bugfixes, and new features. just to name a few: - enabled embedded perl - new MIB table to manage net-snmp access control extensions - hal to abstract os specific aspects of the systems - tree matching support for snmptrapd - reworked transport creation in snmplib - using the incoming ip for outgoing packets if possible. - ipv6 aware tcp/udp mibs - removed patches: (all of them are either upstream or obsolete) net-snmp-5.2.1-acinclude.diff net-snmp-5.2.1-acquotation.patch net-snmp-5.2.1-compat.patch net-snmp-5.2.1-localperl.diff net-snmp-5.2.1-perl.diff net-snmp-5.3.0.1-64bit.diff net-snmp-5.3.0.1_agentx_socket_path_doc.patch net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch net-snmp-5.3.0.1_disman_mib_crash.patch net-snmp-5.3.0.1_ethtool.patch net-snmp-5.3.0.1_linux_types_header.patch net-snmp-5.3.0.1_missing_ifNumber.patch net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch net-snmp-5.3.0.1_perl_ld_run_path.patch net-snmp-5.3.0.1_sighup_vacm.patch net-snmp-5.3.0.1-smux-trap.diff net-snmp-5.3.0.1.tar.bz2 net-snmp-5.3.0.1_tcpwrapper_log_severity.patch net-snmp-5.3.0.1_testsuite_no_smux.patch net-snmp-5.3.0.1_tunnel_compilation.patch net-snmp-5.3_perl_agent.xs-pointersize.patch net-snmp-5.3_perl-printf.patch net-snmp-5.4_default_store_return_value.patch oid-names2_5.3.patch - added net-snmp-5.4_net-snmp-config_headercheck.patch: warn if net-snmp-config is used but development files are missing. - updated net-snmp-5.2.1-autoconf.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc1-autoconf.diff - updated net-snmp-5.2.1-versinfo.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc2-versinfo.diff - added net-snmp-5.4.rc2_perl_SNMP_size_t.patch: dont use int if you want size_t. fixes failures in the perl test suite. - added net-snmp-5.4_default_store_return_value.patch: backport my patch from 5.4 so we can get rid of the build errors. the patch removes/disables dead code. - added net-snmp-5.3.0.1_perl_ld_run_path.patch: the old perl replacement line broke linking of the SNMP libraries into the perl modules. the patch sets the LD_RUN_PATH for the build process to LIBDIR. (#180888) - added net-snmp-5.3.0.1_sighup_vacm.patch: The snmp agent was broken on SIGHUP. It lost all its MIB informations. (upstream bug: #1473289) - added net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch: The snmpd used a deprecated sysctl to get the retransmit time from the kernel. We didnt use this module but the mib library triggered the sysctl. The patch uses retrans_time_ms when available and corrects the correction factor for the old sysctl. (bug: #170140, upstream: #1437287) - reenabled the lmsensors support. was disabled for testing and never reenabled. - net-snmp-5.3.0.1_missing_ifNumber.patch: The 5.3 agent on Linux systems did not implement the 'ifNumber' MIB object. (#159501) - logrotate does not like if the postrotate script returns with a non zero returncode. - add missing "-e" in echo line - dont call "/etc/init.d/snmpd restart". this could start the daemon unconditionally (too large log file). switched to "/etc/init.d/snmpd try-restart" - run logrotate on startup if the logfile is too large. (#131072) - fix compilation with ethtool support. (#155709) - added option to ignore accepted connections (#86634) net-snmp-5.3.0.1_tcpwrapper_log_severity.patch new sysconfig option: SNMPD_LOG_SUCCESSFUL_CONNECTIONS - pass the correct path to configure to set the desired log file - make smux listen to localhost by default. (#116742) - remove confpath patch. (#147808,#159768) - updated and reenabled the audit patch - ported sysconfig options from sles9 SNMPD_LOGLEVEL -> SPECIFY the log level for the snmpd SNMPD_USE_SMUX -> disable SMUX socket - disable embedded perl for now. - added net-snmp-5.3.0.1_agentx_socket_path_doc.patch: fixes: net-snmp snmpd.conf(5) manpage gives wrong default for AgentXSocket (#129437) - ported fix for bug #129923 from sles9 - suppress the error message in the ucd-snmp upgrade script - we move the configs into /etc/snmp [#77935] - removed debugging packages from the build requires. - added net-snmp-5.3.0.1-smux-trap.diff dont loose the value of string variables via smux traps [#150091] - added net-snmp-5.3.0.1_disman_mib_crash.patch o fixes a crash in the disman mib loading - net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch o dont crash while registering mibs - net-snmp-5.3_perl_agent.xs-pointersize.patch o dont use int if you mean intptr_t(IV) - net-snmp-5.3_perl-printf.patch o unused format specifier in printf - net-snmp-5.3_vendorperl.patch o do make install_vendor - removed net-snmp-5.2.1-cmdline.diff better solution from upstream - converted neededforbuild to BuildRequires - update to version 5.3.0.1 - removed patches that got applied upstream or superseeded by upstream fixes: net-snmp-5.2.1-uptime.diff net-snmp-5.2.1-typeclash.diff net-snmp-5.2.1-gcc.diff net-snmp-5.2.1-dlopen-conf.diff net-snmp-5.2.1-enomedium.diff net-snmp-5.2.1-mktemp.diff net-snmp-5.2.1-close-all-fds.diff net-snmp-5.2.1-more-cpus.diff net-snmp-5.2.1-nowraplibs.patch net-snmp-5.2.1.set-var-value.patch - added 4 new patches: net-snmp-5.3_perl_agent.xs-pointersize.patch - fixes some casts of pointers to ints -> segfaults in the test suite net-snmp-5.3_perl-printf.patch - fixes a printf warning net-snmp-5.3_vendorperl.patch - call perl modules install with install_vendor net-snmp-5.1.1-pie.patch - build snmpd and snmptrapd with pie - no point in running the test suite in QEMU - Added rpm-devel to the requires of the -devel package - added disman/event-mib to the mib list (Bug #91039) - replaced patch25 (asn1 handling fix) with patch from the upstream. (Bug #73804) - build snmpd and snmptrap with with -fpie/-pie - Fixed test suite for boxes with empty arp tables. - Include the right header for compat mode (Bug #64074) - Fix length for type ASN_UNSIGNED (Bug #73804) - Get rid of WRAPLIBS in net-snmp-config (Bug #75879) - Fix ac quotation - moved tkmib and mib2c* to perl subpackage, since they require it. #63992 - Multiple non Intel CPU detection added. - Upgraded to 5.1.2 release. (lots of bugfixes as usual) - overflow counter32 and gauge32 on 64bit systems correctly. #50384 - close all non standard filedescriptors on start. - Upgraded to 5.2 final. - Upgraded to 5.2.1rc2. Dropped merged patches, rediffed old ones. - fixing pre-requires - Upgrade to 5.1.2 final. - Upgraded to upstream 5.1.2.rc2. - Upgraded to 5.1.2.rc1. - Dropped some old patches / parts of old patches. - Fixed problem on little endian 64bit machines. - removed double free on failure in netsnmp_register_old_api(). (bug #42580) - do not specify -c /etc/snmpd.conf (since it is already built in). (bug #41706) - require openssl-devel in -devel package. - replaced undefined C construct (x[n] = y[n++]) which caused the testsuite to fail on i386. - sleep .3 s before starting agents (bug #42588) - Fixed 2 places of file descriptor leakage which lead to segfaults during readdir/fgets. #33958 - remove the #define PACKAGE_ from the included autoconf generated config.h file. #36355 - use stop_on_removal and restart_on_update macros (#36306) - package /var/log/net-snmp as %ghost (#36435) - use mktemp in fixproc (#36103) - avoid segfault in version-info (limit to 300 bytes) - open devices with NONBLOCK, don't wait for cdrom - avoid segfault in proc-cmdline output - previous 64-bit fix went just one bit too far, fixed - added smux mib (for quagga) - fix dlopen detection in configure - added requires for perl-TermReadKey - try to fix at least some 64bit issues (eg. #33958) - update arguments in rc-script - Fix some 64bit critical compiler warnings - Fixed includes for build with evlog. - update to 5.1 - build perl module as perl-SNMP - enable ucd-snmp compatibility - update to 5.1.pre2 - revised audit patch - branched devel subpackage - added rpm support - created package and ported patches from ucd-snmp OBS-URL: https://build.opensuse.org/request/show/881354 OBS-URL: https://build.opensuse.org/package/show/network:utilities/net-snmp?expand=0&rev=33
2021-05-09 14:38:01 +02:00
%if 0%{?suse_version} >= 1550
# TW: generate subpackages for every python3 flavor
Accepting request 849908 from home:bnavigator:branches:network:utilities - Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79 - Support multiple python 3 flavors in the python subpackage gh#openSUSE/python-rpm-macros#66 - Change /etc/logrotate.d/net-snmp from init.d to systemd fix boo#1173487. - Add -fcommon in order to fix boo#1160404. - Add Lustre filesystem support (bsc#1140341). Add net-snmp-5.8-add-lustre-fs-support.patch - Remove FIRST_ARG usage from spec file (bsc#1126426). - Update to net-snmp-5.8. Fixes included: * Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) * Fix agentx freezing on timeout (bsc#1027353) * swintst_rpm: Protect against unspecified Group name (bsc#1102775) - Add tsm and tlstm MIBs and the USM security module. (bsc#1081164) - Rename and refactor patches and remove those that are already included inside the new version. Added: * net-snmp-5.8-socket-path.patch * net-snmp-5.8-testing-empty-arptable.patch * net-snmp-5.8-pie.patch * net-snmp-5.8-net-snmp-config-headercheck.patch * net-snmp-5.8-perl-tk-warning.patch * net-snmp-5.8-velocity-mib.patch * net-snmp-5.8-netgroups.patch * net-snmp-5.8-snmpstatus-suppress-output.patch * net-snmp-5.8-fix-Makefile.PL.patch * net-snmp-5.8-modern-rpm-api.patch * net-snmp-5.8-fix-python3.patch Removed: * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-velocity-mib.patch * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-netgroups.patch * net-snmp-5.7.3-snmpstatus-suppress-output.patch * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch * net-snmp-5.7.3-Remove-U64-typedef.patch * net-snmp-5.7.3-Fix-Makefile.PL.patch * net-snmp-5.7.3-build-with-openssl-1.1.patch * net-snmp-5.7.3-modern-rpm-api.patch * net-snmp-python3.patch * net-snmp-5.7.2-systemd.patch * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Create /var/agentx via systemd tmpfiles in case of rollback, snapshots and transactional updates [bsc#1098032] - Fix permissions on unit files wrt bsc#1087977 - Use %license (boo#1082318) - Remove executable flags from systemd service files (bsc#1089295). - Fix RPM group for shlib subpackage. - Properly conditionalize the py2 build - Add patch from Fedora to support natively systemd: * net-snmp-5.7.2-systemd.patch - Drop the check phase as whole 90% of the tests fail it makes more sense to run them somewhere localy - Take systemd service files from fedora to replace sysV scripts - Also convert the sysconfig files to match fedora ones, they get bit more terse but it works seamlessly with systemd - Format with spec-cleaner - Drop sle11 support as it fails to build anyway for ages - Rename python packages to be python-%{name} with obsoletes * Use new singlespec macros * Add patch converting the py files to python3/2 compat mode net-snmp-python3.patch - Run full autoreconf instead of partial - Build with threads by building few targets first - Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (>= 4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being removed. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Fix build with OpenSSL 1.1 (bsc#1042664): + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated squash-patch from the following upstream commits: bbed6b86e70b5a3c54f14992696f2308a8d79511 14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8 9641b472ef01208f92631016e91b0a4a518163f0 e4c6937483d4a680570cec05388d2e4b291868a6 b906c60c8a436d7360267a6d242526b33a9aaac8 - Fix build with perl 5.24.0: + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system recursiely loading Makefile.Pl and destroying its internas. See https://rt.perl.org/Public/Bug/Display.html?id=125907 + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef conflicts with a typedef in a Perl header file. Hence remove the U64 typedef from the Net-SNMP header files. Backported from upstream commit 477b4307ef1. - make snmpd and snmptrapd log message destination configurable for syslog or a dedicated log file. (bsc#695677) - make snmpd and snmptrapd listening address(es) configurable via the sysconfig file. - fix build with GNU grep 2.23, use grep -a to force text matching - reenabled md5 and des, as some tools build against it and need the methods :( - added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Disable MD5 authentication method, disable DES support (if something breaks, tell me) - Request pkgconfig(libssl) instead of openssl-devel to support using LibreSSL as well. - update to upstream version 5.7.3 - remove patch that is now present in the upstream release: * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch - rename patches to new version number 5.7.3: delete: * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.2-net-snmp-config-headercheck.patch * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-velocity-mib.patch add: * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-velocity-mib.patch - add build requirement 'procps' to fix a net-snmp-config error (bsc#935863) - enable DTLS and TLS support (FATE#318789) new binary 'snmptls' was added - add support for hostname netgroups (FATE#316305) '@hostgroup' can be specified for multiple hosts * net-snmp-5.7.3-netgroups.patch - suppress network statistics output in snmpstatus (FATE#316289) '-Sn' don't print any info about the network '-Si' don't print the operational status of network interfaces * net-snmp-5.7.3-snmpstatus-suppress-output.patch - also stop snmptrapd on removal - update to upstream version 5.7.3.pre5 - remove patches that are now present in the upstream release: * net-snmp-5.7.2-build-fix-for-strlcat.patch * net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch * net-snmp-5.7.2-fix-perl-trap-handler.patch - net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: refresh and add patch header - added net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: fix remote denial of service problem inside snmptrapd when started with the "-OQ" option (CVE-2014-3565)(bnc#894361) - added net-snmp-5.7.2-fix-perl-trap-handler.patch: fix potential remote denial of service problem inside the snmptrapd Perl trap handler (CVE-2014-2285)(bnc#866942) - merge some old fixes from SLE 11: * init script should provide snmpd. (bnc#466805) * stop all snmp agents when stopping the daemon. (bnc#473328) - recompress .tar.gz - it has trailing garbage, hope we can readd source url on next update - update to upstream version 5.7.2.1, fixing one security issue: * A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. (CVE-2014-2284, bnc#866942) - net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch: fix mib representation of timeout values (bnc#833153) - use _rundir macro - remove old workaround for ppc/ppc64 migrations which is no longer needed (bnc#437293) - add support for python bindings - improve snmptrapd init script (avoid to overwrite the logfile on restart) - Disable parallelism during build. The dependencies between the Perl module and libnetsnmp are not defined correctly and might result in broken linkage (bnc#819497, bnc#818907) - Add Source URL, see https://en.opensuse.org/SourceUrls - net-snmp-5.7.2-build-fix-for-strlcat.patch: fix exported strlcat() prototype that could conflict with other packages (bnc#793548) - update to version 5.7.2: several bug fixes in the agent, client utilities and libraries. The CHANGES file shipped with the package contains a comprehensive list of fixes and improvements - rebase patches to apply cleanly: * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-velocity-mib.patch * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch - remove patches that are now present in the upstream release: * net-snmp-5.7.0-recognize-reiserfs.patch * net-snmp-5.7.1-snmplib-zero-timeout.patch * net-snmp-5.7.1-old-api-double-free.patch * net-snmp-5.7.1-use-pclose-to-close-pipes.patch * net-snmp-5.7.1-fix-handling-of-large-filesystems.patch * net-snmp-5.7.1-snmplib-default-retries.patch * net-snmp-5.7.1-fsys-memory-leak.patch * net-snmp-5.7.1-adjust-copyright-in-agent-txt-file.patch * net-snmp-5.7.1-recognize-ocfs2.patch * net-snmp-5.7.1-properly-clean-up-old-requests-in-subagents.patch * net-snmp-5.7.1-reduce-code-duplication-in-agentx.patch * net-snmp-5.7.1-log-agentx-disconnections.patch * net-snmp-5.7.1-more-robust-handling-of-agentx-errors.patch * net-snmp-5.7.1-report-problems-with-setundo-processing.patch * net-snmp-5.7.1-fix-array-index-error.patch - Remove redundant sections from specfile - Avoid shipping .la files - fix array index error that could lead to a crash (CVE-2012-2141) (bnc#759352) - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - add OCFS2 to the list of known file systems - update copyright notice of AGENT.txt allowing us to redistribute the file in our package (from Dave Shield) (bnc#750704) - fix license to be in spdx.org format - logrotate: use "reload" instead of "try-restart" to avoid an unnecessary stop/start cycle in the agent (bnc#707636) - net-snmp-5.7.1-fsys-memory-leak.patch: fix a memory leak in agent/mibgroup/hardware/fsys (bnc#725766) - net-snmp-5.7.1-snmplib-default-retries.patch: change default number of retries back from 0 to 5 (bnc#725766) - net-snmp-5.7.1-fix-handling-of-large-filesystems.patch: fix bug in handling large (>8TB) filesystems (bnc#725766) - net-snmp-5.7.1-use-pclose-to-close-pipes.patch: use pclose() instead of fclose() to close a pipe (bnc#725766) - net-snmp-5.7.1-old-api-double-free.patch: agent: avoid double free when netsnmp_register_old_api() fails (bnc#725766) - net-snmp-5.7.1-snmplib-zero-timeout.patch: snmplib: avoid waiting indefinitely if a session has timeout zero (bnc#725766) - update to version 5.7.1: minor release including some bug fixes - enable net-snmp-devel on all baselib architectures - make sure all delegated requests are removed before closing an AgentX session (bnc#670789) - update to version 5.7.1.rc1 but keep package version as 5.7.1 to avoid update problems when the final version is released - small fixes to snmpd and snmptrapd init scripts: - if $SNMPD_LOGLEVEL is not defined, use LOG_NOTICE instead of LOG_DEBUG - improve messages printed and service description - write snmptrapd logs to /var/log/net-snmpd.log - update README.SUSE to reflect some recent changes and drop a bit of outdated information - update baselibs to reflect new library version - spec file cleanup: rename some source files for consistency - add ReiserFS to the list of known file systems (bnc#715199) - install snmptrapd init script by default (bnc#712175) - fix logging option in snmptrapd init script (bnc#712174) - update upstream patches from branch V5-7-patches to 20110714 - update to version 5.7: new features and lots of bug fixes - remove patches that are no longer needed: net-snmp-5.6.0-enable-hrh-filesys.patch net-snmp-5.6.1-recognize-jfs-and-xfs.patch net-snmp-5.6.1-rpm490.patch - refresh and rename patches to apply cleanly after update: net-snmp-5.7.0-pie.patch net-snmp-5.7.0-velocity-mib.patch - switch from rpmdb to rpmts to support rpm-4.9.0 - update upstream patches from branch V5-6-patches to 20110512 - add JFS and XFS to the list of known file systems (bnc#687327) - update upstream patches from branch V5-6-patches to 20110328 - fix libsnmp version in baselibs.conf - update to version 5.6.1: new features and lots of bug fixes - update upstream patches from branch V5-6-patches to 20110104 - remove patches that are no longer needed: net-snmp-5.6.0-ethtool-speed.patch - remove /var/adm/perl-modules/net-snmp from the Perl module - update upstream patches from branch V5-6-patches to 20101129 - spec file cleanup: upstream uses -fno-strict-aliasing by default now - remove patches that are no longer needed: net-snmp-5.5.0-rpmdb-h-detect.patch net-snmp-5.6.0-vendorperl.patch - if-mib: add support for more speeds with ethtool (bnc#650558) - update upstream patches from branch V5-6-patches to 20101101, fixing a segmentation fault on shutdown (bnc#650282) - enable new implementation of hrStorage and hrFilesys to fix persistent indexes in FS and Storage tables (bnc#648364) - update upstream patches from branch V5-6-patches to 20101021 - update to version 5.6: new features and lots of bug fixes - refresh and rename patches to apply cleanly after update: net-snmp-5.6.0-pie.patch net-snmp-5.6.0-vendorperl.patch net-snmp-5.6.0-net-snmp-config-headercheck.patch - update upstream patches from branch V5-5-patches to 20100803 - change default log level from DEBUG to NOTICE (bnc#623497) - spec file cleanup: remove old backward compatibility scripts - update upstream patches from branch V5-5-patches to 20100602: fixed potential buffer overflow in parsing OIDs in config files - update upstream patches from branch V5-5-patches to 20100531 - add net-snmp-5.5.0-rpmdb-h-detect.patch: workaround for autoconf failing to detect rpm/rpmdb.h - remove patches that are no longer needed: net-snmp-5.5.0-use-lmsensors-v3.patch - create /var/run/agentx during startup to support systems that mount /var/run as tmpfs - update libsnmp package name to reflect the library version we are currently shipping - remove patches that are obsolete: net-snmp-5.4.rc2-versinfo.diff net-snmp-5.4.2_snmpconf-selinux.patch - refresh all patches to apply as "-p1" - spec file cleanup: remove conditionals to build on unsupported versions of the distribution - update upstream patches from branch V5-5-patches to 20100428 - add net-snmp-5.5.0_upstream-20100405.patch: merge all patches committed to upstream branch V5-5-patches - remove patches that are now upstream: net-snmp-5.4.2_audit.patch net-snmp-5.5.0_autoconf.patch net-snmp-5.4.2_overflow.patch net-snmp-5.4.2.1-rpm4.7.patch net-snmp-5.5.0_gcc45.patch - Fix strncat properly (from Andreas Jaeger) - Fix code errors found by gcc 4.5 - build for libsensors4 instead of libsensors3 - remove sparcv9-specific baselib exceptions (not needed) - remove net-snmp-5.4.1.2-rmon-mib-revised_3.patch from sources (upstream since 5.5) - refresh net-snmp-5.5.0_autoconf.patch - spec file cleanup: update package description - update to version 5.5: new features and lots of bug fixes, including: - fix hrSWRunPath for processes other than init (bnc#486270) - remove patches that are now upstream: Add-Default-Router-Table-support.patch Add-ICMP-Statistics-Tables-support.patch Add-IPv6-Scope-Zone-Index.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Prefix-Table.patch Fix-for-Internet-Address-Table.patch Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Improve-IP-Statistics-tables.patch net-snmp-5.3.0.1_trap-agent-addr_v2.patch net-snmp-5.4.1.2-etherlike-mib-revised_4.patch net-snmp-5.4.x_embedded_perl_error_message.patch - add baselibs.conf as a source - add baselib defs for SPARC - Fix build with rpm 4.7 (net-snmp-5.4.2.1-rpm4.7.patch) - make patch0 usage consistent - updated patches from Dell: Those patches incorporate the latest fixes for remarks from the upstream review old: net-snmp-5.4.1.2-rmon-mib-revised.patch new: net-snmp-5.4.1.2-rmon-mib-revised_3.patch old: net-snmp-5.4.1.2-etherlike-mib-revised_2.patch new: net-snmp-5.4.1.2-etherlike-mib-revised_4.patch - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) - fix the snmptrapd init script: 1. make sure the config isnt loaded twice. 2. do not truncate the net-snmp.log 3. use SNMPD_LOGLEVEL aswell. 4. write a pid - update snmptrapd section in README.SuSE - whitespace cleanup in both init scripts - update patches from Dell: Upstream asked to reduce the logging in the mib module. old name net-snmp-5.4.1.2-etherlike-mib-revised_1.patch new name net-snmp-5.4.1.2-etherlike-mib-revised_2.patch - Remove the recommends on perl-Tk again. We rely on the fixed warning in the perl_tk_warnings.patch. (bnc#443047) - SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf - added net-snmp-5.4.x_embedded_perl_error_message.patch: fix typo in error message (bnc#439857) - update to 5.4.2.1: (bnc#440950) (CVE-2008-4309) fix crash in getbulk handling code - obsolete old -XXbit packages (bnc#437293) - added net-snmp-5.4.2_velocity-mib.patch (FATE#303556) - refreshed patches to apply cleanly: old: net-snmp-5.1.2-snmpconf-selinux.patch new: net-snmp-5.4.2_snmpconf-selinux.patch old: net-snmp-5.2.1-overflow.diff new: net-snmp-5.4.2_overflow.patch old: net-snmp-5.2.1.testing.empty_arptable.patch new: net-snmp-5.4.2_testing.empty_arptable.patch old: net-snmp-5.3.0.1-audit.diff new: nmp-5.4.2_audit.patch old: net-snmp-5.3_vendorperl.patch new: net-snmp-5.4.2_vendorperl.patch old: net-snmp-5.4.1-autoconf.diff new: net-snmp-5.4.2_autoconf.patch old: net-snmp-5.4.1_perl_tk_warning.patch new: net-snmp-5.4.2_perl_tk_warning.patch old: net-snmp-5.4_net-snmp-config_headercheck.patch new: net-snmp-5.4.2_net-snmp-config_headercheck.patch - more IPv6 support from IBM (mainline backports) (bnc#437208) Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Table.patch Add-ICMP-Statistics-Tables-support.patch Add-Default-Router-Table-support.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-Internet-Address-Prefix-Table.patch Add-IPv6-Scope-Zone-Index.patch Improve-IP-Statistics-tables.patch - remove lzma-alpha-devel. rpm-devel has to require it if it is really needed - updated patches from Dell: net-snmp-5.4.1.2-etherlike-mib-revised_1.patch net-snmp-5.4.1.2-rmon-mib-revised.patch Those 2 patches obsolete the previous 3 patches. - fix typo in the init script which breaks loading of agents (bnc#415127) - also restart snmptrapd after logrotate (bnc#378069) - add patches from Dell: (Fate#304310) net-snmp-5.4.1.2-etherlike-mib-revised.patch net-snmp-5.4.1.2-rmon-mib.patch net-snmp-5.4.2_fix_dell_patches.patch - update to version 5.4.2 - [PATCH 1921861]: Avoid endless loop after truncating 64bit int - Better handling of CONTAINER_INSERT failures with multiple indices - [PATCH 2023633]: add SCTP-MIB implementation (Linux only) - suppress annoying "registration != duplicate" warning for root oids - Update to libtool 1.5.26 - add net-snmp-5.4.1_perl_tk_warning.patch (bnc#392695) correctly recommend installing the perl-Tk package instead of referring to cpan. - fix Required-Stop in the init scripts - cleanup the spec file: - moved files from the mibs package to the packages where they really belong (snmpconf-data, mib2c) - move mib2c from the perl package to the devel package - fixed wrong SELinux context (selinux.patch) [Fate#303662] - fix init scripts - use %fillup_only as we dont launch the daemon per default - added baselibs.conf file to build xxbit packages for multilib support - added lzma-alpha-devel to buildreq - libsensors is in a separate package now. - update to 5.4.1 many small fixes. the highlights: - link only needed libraries - memleaks fixed - python bindings (not yet packaged) - rediffed net-snmp-5.4.rc1-autoconf.diff new name net-snmp-5.4.1-autoconf.diff - no longer build against lm_sensors on s390 - split out new packages: libsnmp15, snmp-mibs - update to 5.4.rc2: tons of bugfixes, and new features. just to name a few: - enabled embedded perl - new MIB table to manage net-snmp access control extensions - hal to abstract os specific aspects of the systems - tree matching support for snmptrapd - reworked transport creation in snmplib - using the incoming ip for outgoing packets if possible. - ipv6 aware tcp/udp mibs - removed patches: (all of them are either upstream or obsolete) net-snmp-5.2.1-acinclude.diff net-snmp-5.2.1-acquotation.patch net-snmp-5.2.1-compat.patch net-snmp-5.2.1-localperl.diff net-snmp-5.2.1-perl.diff net-snmp-5.3.0.1-64bit.diff net-snmp-5.3.0.1_agentx_socket_path_doc.patch net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch net-snmp-5.3.0.1_disman_mib_crash.patch net-snmp-5.3.0.1_ethtool.patch net-snmp-5.3.0.1_linux_types_header.patch net-snmp-5.3.0.1_missing_ifNumber.patch net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch net-snmp-5.3.0.1_perl_ld_run_path.patch net-snmp-5.3.0.1_sighup_vacm.patch net-snmp-5.3.0.1-smux-trap.diff net-snmp-5.3.0.1.tar.bz2 net-snmp-5.3.0.1_tcpwrapper_log_severity.patch net-snmp-5.3.0.1_testsuite_no_smux.patch net-snmp-5.3.0.1_tunnel_compilation.patch net-snmp-5.3_perl_agent.xs-pointersize.patch net-snmp-5.3_perl-printf.patch net-snmp-5.4_default_store_return_value.patch oid-names2_5.3.patch - added net-snmp-5.4_net-snmp-config_headercheck.patch: warn if net-snmp-config is used but development files are missing. - updated net-snmp-5.2.1-autoconf.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc1-autoconf.diff - updated net-snmp-5.2.1-versinfo.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc2-versinfo.diff - added net-snmp-5.4.rc2_perl_SNMP_size_t.patch: dont use int if you want size_t. fixes failures in the perl test suite. - added net-snmp-5.4_default_store_return_value.patch: backport my patch from 5.4 so we can get rid of the build errors. the patch removes/disables dead code. - added net-snmp-5.3.0.1_perl_ld_run_path.patch: the old perl replacement line broke linking of the SNMP libraries into the perl modules. the patch sets the LD_RUN_PATH for the build process to LIBDIR. (#180888) - added net-snmp-5.3.0.1_sighup_vacm.patch: The snmp agent was broken on SIGHUP. It lost all its MIB informations. (upstream bug: #1473289) - added net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch: The snmpd used a deprecated sysctl to get the retransmit time from the kernel. We didnt use this module but the mib library triggered the sysctl. The patch uses retrans_time_ms when available and corrects the correction factor for the old sysctl. (bug: #170140, upstream: #1437287) - reenabled the lmsensors support. was disabled for testing and never reenabled. - net-snmp-5.3.0.1_missing_ifNumber.patch: The 5.3 agent on Linux systems did not implement the 'ifNumber' MIB object. (#159501) - logrotate does not like if the postrotate script returns with a non zero returncode. - add missing "-e" in echo line - dont call "/etc/init.d/snmpd restart". this could start the daemon unconditionally (too large log file). switched to "/etc/init.d/snmpd try-restart" - run logrotate on startup if the logfile is too large. (#131072) - fix compilation with ethtool support. (#155709) - added option to ignore accepted connections (#86634) net-snmp-5.3.0.1_tcpwrapper_log_severity.patch new sysconfig option: SNMPD_LOG_SUCCESSFUL_CONNECTIONS - pass the correct path to configure to set the desired log file - make smux listen to localhost by default. (#116742) - remove confpath patch. (#147808,#159768) - updated and reenabled the audit patch - ported sysconfig options from sles9 SNMPD_LOGLEVEL -> SPECIFY the log level for the snmpd SNMPD_USE_SMUX -> disable SMUX socket - disable embedded perl for now. - added net-snmp-5.3.0.1_agentx_socket_path_doc.patch: fixes: net-snmp snmpd.conf(5) manpage gives wrong default for AgentXSocket (#129437) - ported fix for bug #129923 from sles9 - suppress the error message in the ucd-snmp upgrade script - we move the configs into /etc/snmp [#77935] - removed debugging packages from the build requires. - added net-snmp-5.3.0.1-smux-trap.diff dont loose the value of string variables via smux traps [#150091] - added net-snmp-5.3.0.1_disman_mib_crash.patch o fixes a crash in the disman mib loading - net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch o dont crash while registering mibs - net-snmp-5.3_perl_agent.xs-pointersize.patch o dont use int if you mean intptr_t(IV) - net-snmp-5.3_perl-printf.patch o unused format specifier in printf - net-snmp-5.3_vendorperl.patch o do make install_vendor - removed net-snmp-5.2.1-cmdline.diff better solution from upstream - converted neededforbuild to BuildRequires - update to version 5.3.0.1 - removed patches that got applied upstream or superseeded by upstream fixes: net-snmp-5.2.1-uptime.diff net-snmp-5.2.1-typeclash.diff net-snmp-5.2.1-gcc.diff net-snmp-5.2.1-dlopen-conf.diff net-snmp-5.2.1-enomedium.diff net-snmp-5.2.1-mktemp.diff net-snmp-5.2.1-close-all-fds.diff net-snmp-5.2.1-more-cpus.diff net-snmp-5.2.1-nowraplibs.patch net-snmp-5.2.1.set-var-value.patch - added 4 new patches: net-snmp-5.3_perl_agent.xs-pointersize.patch - fixes some casts of pointers to ints -> segfaults in the test suite net-snmp-5.3_perl-printf.patch - fixes a printf warning net-snmp-5.3_vendorperl.patch - call perl modules install with install_vendor net-snmp-5.1.1-pie.patch - build snmpd and snmptrapd with pie - no point in running the test suite in QEMU - Added rpm-devel to the requires of the -devel package - added disman/event-mib to the mib list (Bug #91039) - replaced patch25 (asn1 handling fix) with patch from the upstream. (Bug #73804) - build snmpd and snmptrap with with -fpie/-pie - Fixed test suite for boxes with empty arp tables. - Include the right header for compat mode (Bug #64074) - Fix length for type ASN_UNSIGNED (Bug #73804) - Get rid of WRAPLIBS in net-snmp-config (Bug #75879) - Fix ac quotation - moved tkmib and mib2c* to perl subpackage, since they require it. #63992 - Multiple non Intel CPU detection added. - Upgraded to 5.1.2 release. (lots of bugfixes as usual) - overflow counter32 and gauge32 on 64bit systems correctly. #50384 - close all non standard filedescriptors on start. - Upgraded to 5.2 final. - Upgraded to 5.2.1rc2. Dropped merged patches, rediffed old ones. - fixing pre-requires - Upgrade to 5.1.2 final. - Upgraded to upstream 5.1.2.rc2. - Upgraded to 5.1.2.rc1. - Dropped some old patches / parts of old patches. - Fixed problem on little endian 64bit machines. - removed double free on failure in netsnmp_register_old_api(). (bug #42580) - do not specify -c /etc/snmpd.conf (since it is already built in). (bug #41706) - require openssl-devel in -devel package. - replaced undefined C construct (x[n] = y[n++]) which caused the testsuite to fail on i386. - sleep .3 s before starting agents (bug #42588) - Fixed 2 places of file descriptor leakage which lead to segfaults during readdir/fgets. #33958 - remove the #define PACKAGE_ from the included autoconf generated config.h file. #36355 - use stop_on_removal and restart_on_update macros (#36306) - package /var/log/net-snmp as %ghost (#36435) - use mktemp in fixproc (#36103) - avoid segfault in version-info (limit to 300 bytes) - open devices with NONBLOCK, don't wait for cdrom - avoid segfault in proc-cmdline output - previous 64-bit fix went just one bit too far, fixed - added smux mib (for quagga) - fix dlopen detection in configure - added requires for perl-TermReadKey - try to fix at least some 64bit issues (eg. #33958) - update arguments in rc-script - Fix some 64bit critical compiler warnings - Fixed includes for build with evlog. - update to 5.1 - build perl module as perl-SNMP - enable ucd-snmp compatibility - update to 5.1.pre2 - revised audit patch - branched devel subpackage - added rpm support - created package and ported patches from ucd-snmp OBS-URL: https://build.opensuse.org/request/show/849908 OBS-URL: https://build.opensuse.org/package/show/network:utilities/net-snmp?expand=0&rev=27
2020-12-05 18:18:28 +01:00
%define python_subpackage_only 1
%python_subpackages
%else
# same "defaults" for all distributions, used in files section
%define python_files() -n python3-%{**}
%define python_sitearch %{python3_sitearch}
%endif
%description
Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c
and SNMP v3 using both IPv4 and IPv6. The suite includes:
- An extensible agent for responding to SNMP queries including built-in
support for a wide range of MIB information modules
- Command-line applications to retrieve and manipulate information from
SNMP-capable devices
- A daemon application for receiving SNMP notifications
- A library for developing new SNMP applications, with C and Perl APIs
- A graphical MIB browser.
This package was originally based on the CMU 2.1.2.1 snmp code. It was
renamed from cmu-snmp to ucd-snmp in 1995 and later renamed from ucd-snmp
to net-snmp in November 2000.
%package -n %{libname}
Summary: Shared Libraries from net-snmp
License: BSD-3-Clause AND MIT
Group: System/Libraries
Requires: perl-base = %{perl_version}
Requires: snmp-mibs >= %{version}
# Version 5.9.2 was wrongly packaging .so.39 in libsnmp40
Conflicts: libsnmp40 <= 5.9.2
%description -n %{libname}
Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c
and SNMP v3 using both IPv4 and IPv6. The suite includes:
* An extensible agent for responding to SNMP queries including built-in
support for a wide range of MIB information modules
* Command-line applications to retrieve and manipulate information from
SNMP-capable devices
* A daemon application for receiving SNMP notifications
* A library for developing new SNMP applications, with C and Perl APIs
* A graphical MIB browser.
This package holds the shared libraries from the net-snmp package.
%package devel
Summary: Development files from net-snmp
License: BSD-3-Clause AND MIT
Group: Development/Libraries/C and C++
Requires: %{libname} = %{version}
# for mib2c
Requires: perl
Requires: perl-SNMP = %{version}
Requires: rpm-devel
Requires: tcpd-devel
Requires: zlib-devel
Requires: pkgconfig(libssl)
%if 0%{?netsnmp_with_sensors}
Requires: libsensors4-devel
%endif
%description devel
Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c
and SNMP v3 using both IPv4 and IPv6. The suite includes:
* An extensible agent for responding to SNMP queries including built-in
support for a wide range of MIB information modules
* Command-line applications to retrieve and manipulate information from
SNMP-capable devices
* A daemon application for receiving SNMP notifications
* A library for developing new SNMP applications, with C and Perl APIs
* A graphical MIB browser.
This package holds the development headers, libraries and API documentation
from the net-snmp package.
%package -n snmp-mibs
Summary: MIB files from net-snmp
License: BSD-3-Clause AND MIT
Group: Productivity/Networking/Other
%description -n snmp-mibs
Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c
and SNMP v3 using both IPv4 and IPv6. The suite includes:
- An extensible agent for responding to SNMP queries including built-in
support for a wide range of MIB information modules
- Command-line applications to retrieve and manipulate information from
SNMP-capable devices
- A daemon application for receiving SNMP notifications
- A library for developing new SNMP applications, with C and Perl APIs
- A graphical MIB browser.
This package holds the MIB files from the net-snmp package.
%package -n perl-SNMP
Summary: Perl5 SNMP Extension Module
License: GPL-2.0-or-later
Group: Development/Libraries/Perl
Requires: %{name} = %{version}
Requires: perl-base = %{perl_version}
%description -n perl-SNMP
The Perl5 'SNMP' Extension Module v3.1.0 for the UCD SNMPv3 library.
Accepting request 849908 from home:bnavigator:branches:network:utilities - Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79 - Support multiple python 3 flavors in the python subpackage gh#openSUSE/python-rpm-macros#66 - Change /etc/logrotate.d/net-snmp from init.d to systemd fix boo#1173487. - Add -fcommon in order to fix boo#1160404. - Add Lustre filesystem support (bsc#1140341). Add net-snmp-5.8-add-lustre-fs-support.patch - Remove FIRST_ARG usage from spec file (bsc#1126426). - Update to net-snmp-5.8. Fixes included: * Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) * Fix agentx freezing on timeout (bsc#1027353) * swintst_rpm: Protect against unspecified Group name (bsc#1102775) - Add tsm and tlstm MIBs and the USM security module. (bsc#1081164) - Rename and refactor patches and remove those that are already included inside the new version. Added: * net-snmp-5.8-socket-path.patch * net-snmp-5.8-testing-empty-arptable.patch * net-snmp-5.8-pie.patch * net-snmp-5.8-net-snmp-config-headercheck.patch * net-snmp-5.8-perl-tk-warning.patch * net-snmp-5.8-velocity-mib.patch * net-snmp-5.8-netgroups.patch * net-snmp-5.8-snmpstatus-suppress-output.patch * net-snmp-5.8-fix-Makefile.PL.patch * net-snmp-5.8-modern-rpm-api.patch * net-snmp-5.8-fix-python3.patch Removed: * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-velocity-mib.patch * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-netgroups.patch * net-snmp-5.7.3-snmpstatus-suppress-output.patch * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch * net-snmp-5.7.3-Remove-U64-typedef.patch * net-snmp-5.7.3-Fix-Makefile.PL.patch * net-snmp-5.7.3-build-with-openssl-1.1.patch * net-snmp-5.7.3-modern-rpm-api.patch * net-snmp-python3.patch * net-snmp-5.7.2-systemd.patch * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Create /var/agentx via systemd tmpfiles in case of rollback, snapshots and transactional updates [bsc#1098032] - Fix permissions on unit files wrt bsc#1087977 - Use %license (boo#1082318) - Remove executable flags from systemd service files (bsc#1089295). - Fix RPM group for shlib subpackage. - Properly conditionalize the py2 build - Add patch from Fedora to support natively systemd: * net-snmp-5.7.2-systemd.patch - Drop the check phase as whole 90% of the tests fail it makes more sense to run them somewhere localy - Take systemd service files from fedora to replace sysV scripts - Also convert the sysconfig files to match fedora ones, they get bit more terse but it works seamlessly with systemd - Format with spec-cleaner - Drop sle11 support as it fails to build anyway for ages - Rename python packages to be python-%{name} with obsoletes * Use new singlespec macros * Add patch converting the py files to python3/2 compat mode net-snmp-python3.patch - Run full autoreconf instead of partial - Build with threads by building few targets first - Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (>= 4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being removed. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Fix build with OpenSSL 1.1 (bsc#1042664): + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated squash-patch from the following upstream commits: bbed6b86e70b5a3c54f14992696f2308a8d79511 14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8 9641b472ef01208f92631016e91b0a4a518163f0 e4c6937483d4a680570cec05388d2e4b291868a6 b906c60c8a436d7360267a6d242526b33a9aaac8 - Fix build with perl 5.24.0: + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system recursiely loading Makefile.Pl and destroying its internas. See https://rt.perl.org/Public/Bug/Display.html?id=125907 + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef conflicts with a typedef in a Perl header file. Hence remove the U64 typedef from the Net-SNMP header files. Backported from upstream commit 477b4307ef1. - make snmpd and snmptrapd log message destination configurable for syslog or a dedicated log file. (bsc#695677) - make snmpd and snmptrapd listening address(es) configurable via the sysconfig file. - fix build with GNU grep 2.23, use grep -a to force text matching - reenabled md5 and des, as some tools build against it and need the methods :( - added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Disable MD5 authentication method, disable DES support (if something breaks, tell me) - Request pkgconfig(libssl) instead of openssl-devel to support using LibreSSL as well. - update to upstream version 5.7.3 - remove patch that is now present in the upstream release: * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch - rename patches to new version number 5.7.3: delete: * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.2-net-snmp-config-headercheck.patch * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-velocity-mib.patch add: * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-velocity-mib.patch - add build requirement 'procps' to fix a net-snmp-config error (bsc#935863) - enable DTLS and TLS support (FATE#318789) new binary 'snmptls' was added - add support for hostname netgroups (FATE#316305) '@hostgroup' can be specified for multiple hosts * net-snmp-5.7.3-netgroups.patch - suppress network statistics output in snmpstatus (FATE#316289) '-Sn' don't print any info about the network '-Si' don't print the operational status of network interfaces * net-snmp-5.7.3-snmpstatus-suppress-output.patch - also stop snmptrapd on removal - update to upstream version 5.7.3.pre5 - remove patches that are now present in the upstream release: * net-snmp-5.7.2-build-fix-for-strlcat.patch * net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch * net-snmp-5.7.2-fix-perl-trap-handler.patch - net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: refresh and add patch header - added net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: fix remote denial of service problem inside snmptrapd when started with the "-OQ" option (CVE-2014-3565)(bnc#894361) - added net-snmp-5.7.2-fix-perl-trap-handler.patch: fix potential remote denial of service problem inside the snmptrapd Perl trap handler (CVE-2014-2285)(bnc#866942) - merge some old fixes from SLE 11: * init script should provide snmpd. (bnc#466805) * stop all snmp agents when stopping the daemon. (bnc#473328) - recompress .tar.gz - it has trailing garbage, hope we can readd source url on next update - update to upstream version 5.7.2.1, fixing one security issue: * A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. (CVE-2014-2284, bnc#866942) - net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch: fix mib representation of timeout values (bnc#833153) - use _rundir macro - remove old workaround for ppc/ppc64 migrations which is no longer needed (bnc#437293) - add support for python bindings - improve snmptrapd init script (avoid to overwrite the logfile on restart) - Disable parallelism during build. The dependencies between the Perl module and libnetsnmp are not defined correctly and might result in broken linkage (bnc#819497, bnc#818907) - Add Source URL, see https://en.opensuse.org/SourceUrls - net-snmp-5.7.2-build-fix-for-strlcat.patch: fix exported strlcat() prototype that could conflict with other packages (bnc#793548) - update to version 5.7.2: several bug fixes in the agent, client utilities and libraries. The CHANGES file shipped with the package contains a comprehensive list of fixes and improvements - rebase patches to apply cleanly: * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-velocity-mib.patch * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch - remove patches that are now present in the upstream release: * net-snmp-5.7.0-recognize-reiserfs.patch * net-snmp-5.7.1-snmplib-zero-timeout.patch * net-snmp-5.7.1-old-api-double-free.patch * net-snmp-5.7.1-use-pclose-to-close-pipes.patch * net-snmp-5.7.1-fix-handling-of-large-filesystems.patch * net-snmp-5.7.1-snmplib-default-retries.patch * net-snmp-5.7.1-fsys-memory-leak.patch * net-snmp-5.7.1-adjust-copyright-in-agent-txt-file.patch * net-snmp-5.7.1-recognize-ocfs2.patch * net-snmp-5.7.1-properly-clean-up-old-requests-in-subagents.patch * net-snmp-5.7.1-reduce-code-duplication-in-agentx.patch * net-snmp-5.7.1-log-agentx-disconnections.patch * net-snmp-5.7.1-more-robust-handling-of-agentx-errors.patch * net-snmp-5.7.1-report-problems-with-setundo-processing.patch * net-snmp-5.7.1-fix-array-index-error.patch - Remove redundant sections from specfile - Avoid shipping .la files - fix array index error that could lead to a crash (CVE-2012-2141) (bnc#759352) - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - add OCFS2 to the list of known file systems - update copyright notice of AGENT.txt allowing us to redistribute the file in our package (from Dave Shield) (bnc#750704) - fix license to be in spdx.org format - logrotate: use "reload" instead of "try-restart" to avoid an unnecessary stop/start cycle in the agent (bnc#707636) - net-snmp-5.7.1-fsys-memory-leak.patch: fix a memory leak in agent/mibgroup/hardware/fsys (bnc#725766) - net-snmp-5.7.1-snmplib-default-retries.patch: change default number of retries back from 0 to 5 (bnc#725766) - net-snmp-5.7.1-fix-handling-of-large-filesystems.patch: fix bug in handling large (>8TB) filesystems (bnc#725766) - net-snmp-5.7.1-use-pclose-to-close-pipes.patch: use pclose() instead of fclose() to close a pipe (bnc#725766) - net-snmp-5.7.1-old-api-double-free.patch: agent: avoid double free when netsnmp_register_old_api() fails (bnc#725766) - net-snmp-5.7.1-snmplib-zero-timeout.patch: snmplib: avoid waiting indefinitely if a session has timeout zero (bnc#725766) - update to version 5.7.1: minor release including some bug fixes - enable net-snmp-devel on all baselib architectures - make sure all delegated requests are removed before closing an AgentX session (bnc#670789) - update to version 5.7.1.rc1 but keep package version as 5.7.1 to avoid update problems when the final version is released - small fixes to snmpd and snmptrapd init scripts: - if $SNMPD_LOGLEVEL is not defined, use LOG_NOTICE instead of LOG_DEBUG - improve messages printed and service description - write snmptrapd logs to /var/log/net-snmpd.log - update README.SUSE to reflect some recent changes and drop a bit of outdated information - update baselibs to reflect new library version - spec file cleanup: rename some source files for consistency - add ReiserFS to the list of known file systems (bnc#715199) - install snmptrapd init script by default (bnc#712175) - fix logging option in snmptrapd init script (bnc#712174) - update upstream patches from branch V5-7-patches to 20110714 - update to version 5.7: new features and lots of bug fixes - remove patches that are no longer needed: net-snmp-5.6.0-enable-hrh-filesys.patch net-snmp-5.6.1-recognize-jfs-and-xfs.patch net-snmp-5.6.1-rpm490.patch - refresh and rename patches to apply cleanly after update: net-snmp-5.7.0-pie.patch net-snmp-5.7.0-velocity-mib.patch - switch from rpmdb to rpmts to support rpm-4.9.0 - update upstream patches from branch V5-6-patches to 20110512 - add JFS and XFS to the list of known file systems (bnc#687327) - update upstream patches from branch V5-6-patches to 20110328 - fix libsnmp version in baselibs.conf - update to version 5.6.1: new features and lots of bug fixes - update upstream patches from branch V5-6-patches to 20110104 - remove patches that are no longer needed: net-snmp-5.6.0-ethtool-speed.patch - remove /var/adm/perl-modules/net-snmp from the Perl module - update upstream patches from branch V5-6-patches to 20101129 - spec file cleanup: upstream uses -fno-strict-aliasing by default now - remove patches that are no longer needed: net-snmp-5.5.0-rpmdb-h-detect.patch net-snmp-5.6.0-vendorperl.patch - if-mib: add support for more speeds with ethtool (bnc#650558) - update upstream patches from branch V5-6-patches to 20101101, fixing a segmentation fault on shutdown (bnc#650282) - enable new implementation of hrStorage and hrFilesys to fix persistent indexes in FS and Storage tables (bnc#648364) - update upstream patches from branch V5-6-patches to 20101021 - update to version 5.6: new features and lots of bug fixes - refresh and rename patches to apply cleanly after update: net-snmp-5.6.0-pie.patch net-snmp-5.6.0-vendorperl.patch net-snmp-5.6.0-net-snmp-config-headercheck.patch - update upstream patches from branch V5-5-patches to 20100803 - change default log level from DEBUG to NOTICE (bnc#623497) - spec file cleanup: remove old backward compatibility scripts - update upstream patches from branch V5-5-patches to 20100602: fixed potential buffer overflow in parsing OIDs in config files - update upstream patches from branch V5-5-patches to 20100531 - add net-snmp-5.5.0-rpmdb-h-detect.patch: workaround for autoconf failing to detect rpm/rpmdb.h - remove patches that are no longer needed: net-snmp-5.5.0-use-lmsensors-v3.patch - create /var/run/agentx during startup to support systems that mount /var/run as tmpfs - update libsnmp package name to reflect the library version we are currently shipping - remove patches that are obsolete: net-snmp-5.4.rc2-versinfo.diff net-snmp-5.4.2_snmpconf-selinux.patch - refresh all patches to apply as "-p1" - spec file cleanup: remove conditionals to build on unsupported versions of the distribution - update upstream patches from branch V5-5-patches to 20100428 - add net-snmp-5.5.0_upstream-20100405.patch: merge all patches committed to upstream branch V5-5-patches - remove patches that are now upstream: net-snmp-5.4.2_audit.patch net-snmp-5.5.0_autoconf.patch net-snmp-5.4.2_overflow.patch net-snmp-5.4.2.1-rpm4.7.patch net-snmp-5.5.0_gcc45.patch - Fix strncat properly (from Andreas Jaeger) - Fix code errors found by gcc 4.5 - build for libsensors4 instead of libsensors3 - remove sparcv9-specific baselib exceptions (not needed) - remove net-snmp-5.4.1.2-rmon-mib-revised_3.patch from sources (upstream since 5.5) - refresh net-snmp-5.5.0_autoconf.patch - spec file cleanup: update package description - update to version 5.5: new features and lots of bug fixes, including: - fix hrSWRunPath for processes other than init (bnc#486270) - remove patches that are now upstream: Add-Default-Router-Table-support.patch Add-ICMP-Statistics-Tables-support.patch Add-IPv6-Scope-Zone-Index.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Prefix-Table.patch Fix-for-Internet-Address-Table.patch Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Improve-IP-Statistics-tables.patch net-snmp-5.3.0.1_trap-agent-addr_v2.patch net-snmp-5.4.1.2-etherlike-mib-revised_4.patch net-snmp-5.4.x_embedded_perl_error_message.patch - add baselibs.conf as a source - add baselib defs for SPARC - Fix build with rpm 4.7 (net-snmp-5.4.2.1-rpm4.7.patch) - make patch0 usage consistent - updated patches from Dell: Those patches incorporate the latest fixes for remarks from the upstream review old: net-snmp-5.4.1.2-rmon-mib-revised.patch new: net-snmp-5.4.1.2-rmon-mib-revised_3.patch old: net-snmp-5.4.1.2-etherlike-mib-revised_2.patch new: net-snmp-5.4.1.2-etherlike-mib-revised_4.patch - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) - fix the snmptrapd init script: 1. make sure the config isnt loaded twice. 2. do not truncate the net-snmp.log 3. use SNMPD_LOGLEVEL aswell. 4. write a pid - update snmptrapd section in README.SuSE - whitespace cleanup in both init scripts - update patches from Dell: Upstream asked to reduce the logging in the mib module. old name net-snmp-5.4.1.2-etherlike-mib-revised_1.patch new name net-snmp-5.4.1.2-etherlike-mib-revised_2.patch - Remove the recommends on perl-Tk again. We rely on the fixed warning in the perl_tk_warnings.patch. (bnc#443047) - SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf - added net-snmp-5.4.x_embedded_perl_error_message.patch: fix typo in error message (bnc#439857) - update to 5.4.2.1: (bnc#440950) (CVE-2008-4309) fix crash in getbulk handling code - obsolete old -XXbit packages (bnc#437293) - added net-snmp-5.4.2_velocity-mib.patch (FATE#303556) - refreshed patches to apply cleanly: old: net-snmp-5.1.2-snmpconf-selinux.patch new: net-snmp-5.4.2_snmpconf-selinux.patch old: net-snmp-5.2.1-overflow.diff new: net-snmp-5.4.2_overflow.patch old: net-snmp-5.2.1.testing.empty_arptable.patch new: net-snmp-5.4.2_testing.empty_arptable.patch old: net-snmp-5.3.0.1-audit.diff new: nmp-5.4.2_audit.patch old: net-snmp-5.3_vendorperl.patch new: net-snmp-5.4.2_vendorperl.patch old: net-snmp-5.4.1-autoconf.diff new: net-snmp-5.4.2_autoconf.patch old: net-snmp-5.4.1_perl_tk_warning.patch new: net-snmp-5.4.2_perl_tk_warning.patch old: net-snmp-5.4_net-snmp-config_headercheck.patch new: net-snmp-5.4.2_net-snmp-config_headercheck.patch - more IPv6 support from IBM (mainline backports) (bnc#437208) Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Table.patch Add-ICMP-Statistics-Tables-support.patch Add-Default-Router-Table-support.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-Internet-Address-Prefix-Table.patch Add-IPv6-Scope-Zone-Index.patch Improve-IP-Statistics-tables.patch - remove lzma-alpha-devel. rpm-devel has to require it if it is really needed - updated patches from Dell: net-snmp-5.4.1.2-etherlike-mib-revised_1.patch net-snmp-5.4.1.2-rmon-mib-revised.patch Those 2 patches obsolete the previous 3 patches. - fix typo in the init script which breaks loading of agents (bnc#415127) - also restart snmptrapd after logrotate (bnc#378069) - add patches from Dell: (Fate#304310) net-snmp-5.4.1.2-etherlike-mib-revised.patch net-snmp-5.4.1.2-rmon-mib.patch net-snmp-5.4.2_fix_dell_patches.patch - update to version 5.4.2 - [PATCH 1921861]: Avoid endless loop after truncating 64bit int - Better handling of CONTAINER_INSERT failures with multiple indices - [PATCH 2023633]: add SCTP-MIB implementation (Linux only) - suppress annoying "registration != duplicate" warning for root oids - Update to libtool 1.5.26 - add net-snmp-5.4.1_perl_tk_warning.patch (bnc#392695) correctly recommend installing the perl-Tk package instead of referring to cpan. - fix Required-Stop in the init scripts - cleanup the spec file: - moved files from the mibs package to the packages where they really belong (snmpconf-data, mib2c) - move mib2c from the perl package to the devel package - fixed wrong SELinux context (selinux.patch) [Fate#303662] - fix init scripts - use %fillup_only as we dont launch the daemon per default - added baselibs.conf file to build xxbit packages for multilib support - added lzma-alpha-devel to buildreq - libsensors is in a separate package now. - update to 5.4.1 many small fixes. the highlights: - link only needed libraries - memleaks fixed - python bindings (not yet packaged) - rediffed net-snmp-5.4.rc1-autoconf.diff new name net-snmp-5.4.1-autoconf.diff - no longer build against lm_sensors on s390 - split out new packages: libsnmp15, snmp-mibs - update to 5.4.rc2: tons of bugfixes, and new features. just to name a few: - enabled embedded perl - new MIB table to manage net-snmp access control extensions - hal to abstract os specific aspects of the systems - tree matching support for snmptrapd - reworked transport creation in snmplib - using the incoming ip for outgoing packets if possible. - ipv6 aware tcp/udp mibs - removed patches: (all of them are either upstream or obsolete) net-snmp-5.2.1-acinclude.diff net-snmp-5.2.1-acquotation.patch net-snmp-5.2.1-compat.patch net-snmp-5.2.1-localperl.diff net-snmp-5.2.1-perl.diff net-snmp-5.3.0.1-64bit.diff net-snmp-5.3.0.1_agentx_socket_path_doc.patch net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch net-snmp-5.3.0.1_disman_mib_crash.patch net-snmp-5.3.0.1_ethtool.patch net-snmp-5.3.0.1_linux_types_header.patch net-snmp-5.3.0.1_missing_ifNumber.patch net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch net-snmp-5.3.0.1_perl_ld_run_path.patch net-snmp-5.3.0.1_sighup_vacm.patch net-snmp-5.3.0.1-smux-trap.diff net-snmp-5.3.0.1.tar.bz2 net-snmp-5.3.0.1_tcpwrapper_log_severity.patch net-snmp-5.3.0.1_testsuite_no_smux.patch net-snmp-5.3.0.1_tunnel_compilation.patch net-snmp-5.3_perl_agent.xs-pointersize.patch net-snmp-5.3_perl-printf.patch net-snmp-5.4_default_store_return_value.patch oid-names2_5.3.patch - added net-snmp-5.4_net-snmp-config_headercheck.patch: warn if net-snmp-config is used but development files are missing. - updated net-snmp-5.2.1-autoconf.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc1-autoconf.diff - updated net-snmp-5.2.1-versinfo.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc2-versinfo.diff - added net-snmp-5.4.rc2_perl_SNMP_size_t.patch: dont use int if you want size_t. fixes failures in the perl test suite. - added net-snmp-5.4_default_store_return_value.patch: backport my patch from 5.4 so we can get rid of the build errors. the patch removes/disables dead code. - added net-snmp-5.3.0.1_perl_ld_run_path.patch: the old perl replacement line broke linking of the SNMP libraries into the perl modules. the patch sets the LD_RUN_PATH for the build process to LIBDIR. (#180888) - added net-snmp-5.3.0.1_sighup_vacm.patch: The snmp agent was broken on SIGHUP. It lost all its MIB informations. (upstream bug: #1473289) - added net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch: The snmpd used a deprecated sysctl to get the retransmit time from the kernel. We didnt use this module but the mib library triggered the sysctl. The patch uses retrans_time_ms when available and corrects the correction factor for the old sysctl. (bug: #170140, upstream: #1437287) - reenabled the lmsensors support. was disabled for testing and never reenabled. - net-snmp-5.3.0.1_missing_ifNumber.patch: The 5.3 agent on Linux systems did not implement the 'ifNumber' MIB object. (#159501) - logrotate does not like if the postrotate script returns with a non zero returncode. - add missing "-e" in echo line - dont call "/etc/init.d/snmpd restart". this could start the daemon unconditionally (too large log file). switched to "/etc/init.d/snmpd try-restart" - run logrotate on startup if the logfile is too large. (#131072) - fix compilation with ethtool support. (#155709) - added option to ignore accepted connections (#86634) net-snmp-5.3.0.1_tcpwrapper_log_severity.patch new sysconfig option: SNMPD_LOG_SUCCESSFUL_CONNECTIONS - pass the correct path to configure to set the desired log file - make smux listen to localhost by default. (#116742) - remove confpath patch. (#147808,#159768) - updated and reenabled the audit patch - ported sysconfig options from sles9 SNMPD_LOGLEVEL -> SPECIFY the log level for the snmpd SNMPD_USE_SMUX -> disable SMUX socket - disable embedded perl for now. - added net-snmp-5.3.0.1_agentx_socket_path_doc.patch: fixes: net-snmp snmpd.conf(5) manpage gives wrong default for AgentXSocket (#129437) - ported fix for bug #129923 from sles9 - suppress the error message in the ucd-snmp upgrade script - we move the configs into /etc/snmp [#77935] - removed debugging packages from the build requires. - added net-snmp-5.3.0.1-smux-trap.diff dont loose the value of string variables via smux traps [#150091] - added net-snmp-5.3.0.1_disman_mib_crash.patch o fixes a crash in the disman mib loading - net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch o dont crash while registering mibs - net-snmp-5.3_perl_agent.xs-pointersize.patch o dont use int if you mean intptr_t(IV) - net-snmp-5.3_perl-printf.patch o unused format specifier in printf - net-snmp-5.3_vendorperl.patch o do make install_vendor - removed net-snmp-5.2.1-cmdline.diff better solution from upstream - converted neededforbuild to BuildRequires - update to version 5.3.0.1 - removed patches that got applied upstream or superseeded by upstream fixes: net-snmp-5.2.1-uptime.diff net-snmp-5.2.1-typeclash.diff net-snmp-5.2.1-gcc.diff net-snmp-5.2.1-dlopen-conf.diff net-snmp-5.2.1-enomedium.diff net-snmp-5.2.1-mktemp.diff net-snmp-5.2.1-close-all-fds.diff net-snmp-5.2.1-more-cpus.diff net-snmp-5.2.1-nowraplibs.patch net-snmp-5.2.1.set-var-value.patch - added 4 new patches: net-snmp-5.3_perl_agent.xs-pointersize.patch - fixes some casts of pointers to ints -> segfaults in the test suite net-snmp-5.3_perl-printf.patch - fixes a printf warning net-snmp-5.3_vendorperl.patch - call perl modules install with install_vendor net-snmp-5.1.1-pie.patch - build snmpd and snmptrapd with pie - no point in running the test suite in QEMU - Added rpm-devel to the requires of the -devel package - added disman/event-mib to the mib list (Bug #91039) - replaced patch25 (asn1 handling fix) with patch from the upstream. (Bug #73804) - build snmpd and snmptrap with with -fpie/-pie - Fixed test suite for boxes with empty arp tables. - Include the right header for compat mode (Bug #64074) - Fix length for type ASN_UNSIGNED (Bug #73804) - Get rid of WRAPLIBS in net-snmp-config (Bug #75879) - Fix ac quotation - moved tkmib and mib2c* to perl subpackage, since they require it. #63992 - Multiple non Intel CPU detection added. - Upgraded to 5.1.2 release. (lots of bugfixes as usual) - overflow counter32 and gauge32 on 64bit systems correctly. #50384 - close all non standard filedescriptors on start. - Upgraded to 5.2 final. - Upgraded to 5.2.1rc2. Dropped merged patches, rediffed old ones. - fixing pre-requires - Upgrade to 5.1.2 final. - Upgraded to upstream 5.1.2.rc2. - Upgraded to 5.1.2.rc1. - Dropped some old patches / parts of old patches. - Fixed problem on little endian 64bit machines. - removed double free on failure in netsnmp_register_old_api(). (bug #42580) - do not specify -c /etc/snmpd.conf (since it is already built in). (bug #41706) - require openssl-devel in -devel package. - replaced undefined C construct (x[n] = y[n++]) which caused the testsuite to fail on i386. - sleep .3 s before starting agents (bug #42588) - Fixed 2 places of file descriptor leakage which lead to segfaults during readdir/fgets. #33958 - remove the #define PACKAGE_ from the included autoconf generated config.h file. #36355 - use stop_on_removal and restart_on_update macros (#36306) - package /var/log/net-snmp as %ghost (#36435) - use mktemp in fixproc (#36103) - avoid segfault in version-info (limit to 300 bytes) - open devices with NONBLOCK, don't wait for cdrom - avoid segfault in proc-cmdline output - previous 64-bit fix went just one bit too far, fixed - added smux mib (for quagga) - fix dlopen detection in configure - added requires for perl-TermReadKey - try to fix at least some 64bit issues (eg. #33958) - update arguments in rc-script - Fix some 64bit critical compiler warnings - Fixed includes for build with evlog. - update to 5.1 - build perl module as perl-SNMP - enable ucd-snmp compatibility - update to 5.1.pre2 - revised audit patch - branched devel subpackage - added rpm support - created package and ported patches from ucd-snmp OBS-URL: https://build.opensuse.org/request/show/849908 OBS-URL: https://build.opensuse.org/package/show/network:utilities/net-snmp?expand=0&rev=27
2020-12-05 18:18:28 +01:00
%if 0%{?python_subpackage_only}
%package -n python-%{name}
Summary: The Python 3 'netsnmp' module for the Net-SNMP
License: BSD-3-Clause AND MIT
Group: Development/Libraries/Python
Requires: %{libname} = %{version}
%description -n python-%{name}
The 'netsnmp' module provides a full featured, tri-lingual SNMP (SNMPv3,
SNMPv2c, SNMPv1) client API. The 'netsnmp' module internals rely on the
Net-SNMP toolkit library.
%else
%package -n python2-%{name}
Summary: The Python 'netsnmp' module for the Net-SNMP
License: BSD-3-Clause AND MIT
Group: Development/Libraries/Python
Requires: %{libname} = %{version}
Provides: %{name}-python = %{version}
Obsoletes: %{name}-python < %{version}
Provides: python-%{name} = %{version}
%description -n python2-%{name}
The 'netsnmp' module provides a full featured, tri-lingual SNMP (SNMPv3,
SNMPv2c, SNMPv1) client API. The 'netsnmp' module internals rely on the
Net-SNMP toolkit library.
%package -n python3-%{name}
Summary: The Python 3 'netsnmp' module for the Net-SNMP
License: BSD-3-Clause AND MIT
Group: Development/Libraries/Python
Requires: %{libname} = %{version}
%description -n python3-%{name}
The 'netsnmp' module provides a full featured, tri-lingual SNMP (SNMPv3,
SNMPv2c, SNMPv1) client API. The 'netsnmp' module internals rely on the
Net-SNMP toolkit library.
Accepting request 849908 from home:bnavigator:branches:network:utilities - Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79 - Support multiple python 3 flavors in the python subpackage gh#openSUSE/python-rpm-macros#66 - Change /etc/logrotate.d/net-snmp from init.d to systemd fix boo#1173487. - Add -fcommon in order to fix boo#1160404. - Add Lustre filesystem support (bsc#1140341). Add net-snmp-5.8-add-lustre-fs-support.patch - Remove FIRST_ARG usage from spec file (bsc#1126426). - Update to net-snmp-5.8. Fixes included: * Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) * Fix agentx freezing on timeout (bsc#1027353) * swintst_rpm: Protect against unspecified Group name (bsc#1102775) - Add tsm and tlstm MIBs and the USM security module. (bsc#1081164) - Rename and refactor patches and remove those that are already included inside the new version. Added: * net-snmp-5.8-socket-path.patch * net-snmp-5.8-testing-empty-arptable.patch * net-snmp-5.8-pie.patch * net-snmp-5.8-net-snmp-config-headercheck.patch * net-snmp-5.8-perl-tk-warning.patch * net-snmp-5.8-velocity-mib.patch * net-snmp-5.8-netgroups.patch * net-snmp-5.8-snmpstatus-suppress-output.patch * net-snmp-5.8-fix-Makefile.PL.patch * net-snmp-5.8-modern-rpm-api.patch * net-snmp-5.8-fix-python3.patch Removed: * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-velocity-mib.patch * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-netgroups.patch * net-snmp-5.7.3-snmpstatus-suppress-output.patch * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch * net-snmp-5.7.3-Remove-U64-typedef.patch * net-snmp-5.7.3-Fix-Makefile.PL.patch * net-snmp-5.7.3-build-with-openssl-1.1.patch * net-snmp-5.7.3-modern-rpm-api.patch * net-snmp-python3.patch * net-snmp-5.7.2-systemd.patch * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Create /var/agentx via systemd tmpfiles in case of rollback, snapshots and transactional updates [bsc#1098032] - Fix permissions on unit files wrt bsc#1087977 - Use %license (boo#1082318) - Remove executable flags from systemd service files (bsc#1089295). - Fix RPM group for shlib subpackage. - Properly conditionalize the py2 build - Add patch from Fedora to support natively systemd: * net-snmp-5.7.2-systemd.patch - Drop the check phase as whole 90% of the tests fail it makes more sense to run them somewhere localy - Take systemd service files from fedora to replace sysV scripts - Also convert the sysconfig files to match fedora ones, they get bit more terse but it works seamlessly with systemd - Format with spec-cleaner - Drop sle11 support as it fails to build anyway for ages - Rename python packages to be python-%{name} with obsoletes * Use new singlespec macros * Add patch converting the py files to python3/2 compat mode net-snmp-python3.patch - Run full autoreconf instead of partial - Build with threads by building few targets first - Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (>= 4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being removed. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Fix build with OpenSSL 1.1 (bsc#1042664): + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated squash-patch from the following upstream commits: bbed6b86e70b5a3c54f14992696f2308a8d79511 14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8 9641b472ef01208f92631016e91b0a4a518163f0 e4c6937483d4a680570cec05388d2e4b291868a6 b906c60c8a436d7360267a6d242526b33a9aaac8 - Fix build with perl 5.24.0: + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system recursiely loading Makefile.Pl and destroying its internas. See https://rt.perl.org/Public/Bug/Display.html?id=125907 + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef conflicts with a typedef in a Perl header file. Hence remove the U64 typedef from the Net-SNMP header files. Backported from upstream commit 477b4307ef1. - make snmpd and snmptrapd log message destination configurable for syslog or a dedicated log file. (bsc#695677) - make snmpd and snmptrapd listening address(es) configurable via the sysconfig file. - fix build with GNU grep 2.23, use grep -a to force text matching - reenabled md5 and des, as some tools build against it and need the methods :( - added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Disable MD5 authentication method, disable DES support (if something breaks, tell me) - Request pkgconfig(libssl) instead of openssl-devel to support using LibreSSL as well. - update to upstream version 5.7.3 - remove patch that is now present in the upstream release: * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch - rename patches to new version number 5.7.3: delete: * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.2-net-snmp-config-headercheck.patch * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-velocity-mib.patch add: * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-velocity-mib.patch - add build requirement 'procps' to fix a net-snmp-config error (bsc#935863) - enable DTLS and TLS support (FATE#318789) new binary 'snmptls' was added - add support for hostname netgroups (FATE#316305) '@hostgroup' can be specified for multiple hosts * net-snmp-5.7.3-netgroups.patch - suppress network statistics output in snmpstatus (FATE#316289) '-Sn' don't print any info about the network '-Si' don't print the operational status of network interfaces * net-snmp-5.7.3-snmpstatus-suppress-output.patch - also stop snmptrapd on removal - update to upstream version 5.7.3.pre5 - remove patches that are now present in the upstream release: * net-snmp-5.7.2-build-fix-for-strlcat.patch * net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch * net-snmp-5.7.2-fix-perl-trap-handler.patch - net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: refresh and add patch header - added net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: fix remote denial of service problem inside snmptrapd when started with the "-OQ" option (CVE-2014-3565)(bnc#894361) - added net-snmp-5.7.2-fix-perl-trap-handler.patch: fix potential remote denial of service problem inside the snmptrapd Perl trap handler (CVE-2014-2285)(bnc#866942) - merge some old fixes from SLE 11: * init script should provide snmpd. (bnc#466805) * stop all snmp agents when stopping the daemon. (bnc#473328) - recompress .tar.gz - it has trailing garbage, hope we can readd source url on next update - update to upstream version 5.7.2.1, fixing one security issue: * A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. (CVE-2014-2284, bnc#866942) - net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch: fix mib representation of timeout values (bnc#833153) - use _rundir macro - remove old workaround for ppc/ppc64 migrations which is no longer needed (bnc#437293) - add support for python bindings - improve snmptrapd init script (avoid to overwrite the logfile on restart) - Disable parallelism during build. The dependencies between the Perl module and libnetsnmp are not defined correctly and might result in broken linkage (bnc#819497, bnc#818907) - Add Source URL, see https://en.opensuse.org/SourceUrls - net-snmp-5.7.2-build-fix-for-strlcat.patch: fix exported strlcat() prototype that could conflict with other packages (bnc#793548) - update to version 5.7.2: several bug fixes in the agent, client utilities and libraries. The CHANGES file shipped with the package contains a comprehensive list of fixes and improvements - rebase patches to apply cleanly: * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-velocity-mib.patch * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch - remove patches that are now present in the upstream release: * net-snmp-5.7.0-recognize-reiserfs.patch * net-snmp-5.7.1-snmplib-zero-timeout.patch * net-snmp-5.7.1-old-api-double-free.patch * net-snmp-5.7.1-use-pclose-to-close-pipes.patch * net-snmp-5.7.1-fix-handling-of-large-filesystems.patch * net-snmp-5.7.1-snmplib-default-retries.patch * net-snmp-5.7.1-fsys-memory-leak.patch * net-snmp-5.7.1-adjust-copyright-in-agent-txt-file.patch * net-snmp-5.7.1-recognize-ocfs2.patch * net-snmp-5.7.1-properly-clean-up-old-requests-in-subagents.patch * net-snmp-5.7.1-reduce-code-duplication-in-agentx.patch * net-snmp-5.7.1-log-agentx-disconnections.patch * net-snmp-5.7.1-more-robust-handling-of-agentx-errors.patch * net-snmp-5.7.1-report-problems-with-setundo-processing.patch * net-snmp-5.7.1-fix-array-index-error.patch - Remove redundant sections from specfile - Avoid shipping .la files - fix array index error that could lead to a crash (CVE-2012-2141) (bnc#759352) - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - add OCFS2 to the list of known file systems - update copyright notice of AGENT.txt allowing us to redistribute the file in our package (from Dave Shield) (bnc#750704) - fix license to be in spdx.org format - logrotate: use "reload" instead of "try-restart" to avoid an unnecessary stop/start cycle in the agent (bnc#707636) - net-snmp-5.7.1-fsys-memory-leak.patch: fix a memory leak in agent/mibgroup/hardware/fsys (bnc#725766) - net-snmp-5.7.1-snmplib-default-retries.patch: change default number of retries back from 0 to 5 (bnc#725766) - net-snmp-5.7.1-fix-handling-of-large-filesystems.patch: fix bug in handling large (>8TB) filesystems (bnc#725766) - net-snmp-5.7.1-use-pclose-to-close-pipes.patch: use pclose() instead of fclose() to close a pipe (bnc#725766) - net-snmp-5.7.1-old-api-double-free.patch: agent: avoid double free when netsnmp_register_old_api() fails (bnc#725766) - net-snmp-5.7.1-snmplib-zero-timeout.patch: snmplib: avoid waiting indefinitely if a session has timeout zero (bnc#725766) - update to version 5.7.1: minor release including some bug fixes - enable net-snmp-devel on all baselib architectures - make sure all delegated requests are removed before closing an AgentX session (bnc#670789) - update to version 5.7.1.rc1 but keep package version as 5.7.1 to avoid update problems when the final version is released - small fixes to snmpd and snmptrapd init scripts: - if $SNMPD_LOGLEVEL is not defined, use LOG_NOTICE instead of LOG_DEBUG - improve messages printed and service description - write snmptrapd logs to /var/log/net-snmpd.log - update README.SUSE to reflect some recent changes and drop a bit of outdated information - update baselibs to reflect new library version - spec file cleanup: rename some source files for consistency - add ReiserFS to the list of known file systems (bnc#715199) - install snmptrapd init script by default (bnc#712175) - fix logging option in snmptrapd init script (bnc#712174) - update upstream patches from branch V5-7-patches to 20110714 - update to version 5.7: new features and lots of bug fixes - remove patches that are no longer needed: net-snmp-5.6.0-enable-hrh-filesys.patch net-snmp-5.6.1-recognize-jfs-and-xfs.patch net-snmp-5.6.1-rpm490.patch - refresh and rename patches to apply cleanly after update: net-snmp-5.7.0-pie.patch net-snmp-5.7.0-velocity-mib.patch - switch from rpmdb to rpmts to support rpm-4.9.0 - update upstream patches from branch V5-6-patches to 20110512 - add JFS and XFS to the list of known file systems (bnc#687327) - update upstream patches from branch V5-6-patches to 20110328 - fix libsnmp version in baselibs.conf - update to version 5.6.1: new features and lots of bug fixes - update upstream patches from branch V5-6-patches to 20110104 - remove patches that are no longer needed: net-snmp-5.6.0-ethtool-speed.patch - remove /var/adm/perl-modules/net-snmp from the Perl module - update upstream patches from branch V5-6-patches to 20101129 - spec file cleanup: upstream uses -fno-strict-aliasing by default now - remove patches that are no longer needed: net-snmp-5.5.0-rpmdb-h-detect.patch net-snmp-5.6.0-vendorperl.patch - if-mib: add support for more speeds with ethtool (bnc#650558) - update upstream patches from branch V5-6-patches to 20101101, fixing a segmentation fault on shutdown (bnc#650282) - enable new implementation of hrStorage and hrFilesys to fix persistent indexes in FS and Storage tables (bnc#648364) - update upstream patches from branch V5-6-patches to 20101021 - update to version 5.6: new features and lots of bug fixes - refresh and rename patches to apply cleanly after update: net-snmp-5.6.0-pie.patch net-snmp-5.6.0-vendorperl.patch net-snmp-5.6.0-net-snmp-config-headercheck.patch - update upstream patches from branch V5-5-patches to 20100803 - change default log level from DEBUG to NOTICE (bnc#623497) - spec file cleanup: remove old backward compatibility scripts - update upstream patches from branch V5-5-patches to 20100602: fixed potential buffer overflow in parsing OIDs in config files - update upstream patches from branch V5-5-patches to 20100531 - add net-snmp-5.5.0-rpmdb-h-detect.patch: workaround for autoconf failing to detect rpm/rpmdb.h - remove patches that are no longer needed: net-snmp-5.5.0-use-lmsensors-v3.patch - create /var/run/agentx during startup to support systems that mount /var/run as tmpfs - update libsnmp package name to reflect the library version we are currently shipping - remove patches that are obsolete: net-snmp-5.4.rc2-versinfo.diff net-snmp-5.4.2_snmpconf-selinux.patch - refresh all patches to apply as "-p1" - spec file cleanup: remove conditionals to build on unsupported versions of the distribution - update upstream patches from branch V5-5-patches to 20100428 - add net-snmp-5.5.0_upstream-20100405.patch: merge all patches committed to upstream branch V5-5-patches - remove patches that are now upstream: net-snmp-5.4.2_audit.patch net-snmp-5.5.0_autoconf.patch net-snmp-5.4.2_overflow.patch net-snmp-5.4.2.1-rpm4.7.patch net-snmp-5.5.0_gcc45.patch - Fix strncat properly (from Andreas Jaeger) - Fix code errors found by gcc 4.5 - build for libsensors4 instead of libsensors3 - remove sparcv9-specific baselib exceptions (not needed) - remove net-snmp-5.4.1.2-rmon-mib-revised_3.patch from sources (upstream since 5.5) - refresh net-snmp-5.5.0_autoconf.patch - spec file cleanup: update package description - update to version 5.5: new features and lots of bug fixes, including: - fix hrSWRunPath for processes other than init (bnc#486270) - remove patches that are now upstream: Add-Default-Router-Table-support.patch Add-ICMP-Statistics-Tables-support.patch Add-IPv6-Scope-Zone-Index.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Prefix-Table.patch Fix-for-Internet-Address-Table.patch Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Improve-IP-Statistics-tables.patch net-snmp-5.3.0.1_trap-agent-addr_v2.patch net-snmp-5.4.1.2-etherlike-mib-revised_4.patch net-snmp-5.4.x_embedded_perl_error_message.patch - add baselibs.conf as a source - add baselib defs for SPARC - Fix build with rpm 4.7 (net-snmp-5.4.2.1-rpm4.7.patch) - make patch0 usage consistent - updated patches from Dell: Those patches incorporate the latest fixes for remarks from the upstream review old: net-snmp-5.4.1.2-rmon-mib-revised.patch new: net-snmp-5.4.1.2-rmon-mib-revised_3.patch old: net-snmp-5.4.1.2-etherlike-mib-revised_2.patch new: net-snmp-5.4.1.2-etherlike-mib-revised_4.patch - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) - fix the snmptrapd init script: 1. make sure the config isnt loaded twice. 2. do not truncate the net-snmp.log 3. use SNMPD_LOGLEVEL aswell. 4. write a pid - update snmptrapd section in README.SuSE - whitespace cleanup in both init scripts - update patches from Dell: Upstream asked to reduce the logging in the mib module. old name net-snmp-5.4.1.2-etherlike-mib-revised_1.patch new name net-snmp-5.4.1.2-etherlike-mib-revised_2.patch - Remove the recommends on perl-Tk again. We rely on the fixed warning in the perl_tk_warnings.patch. (bnc#443047) - SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf - added net-snmp-5.4.x_embedded_perl_error_message.patch: fix typo in error message (bnc#439857) - update to 5.4.2.1: (bnc#440950) (CVE-2008-4309) fix crash in getbulk handling code - obsolete old -XXbit packages (bnc#437293) - added net-snmp-5.4.2_velocity-mib.patch (FATE#303556) - refreshed patches to apply cleanly: old: net-snmp-5.1.2-snmpconf-selinux.patch new: net-snmp-5.4.2_snmpconf-selinux.patch old: net-snmp-5.2.1-overflow.diff new: net-snmp-5.4.2_overflow.patch old: net-snmp-5.2.1.testing.empty_arptable.patch new: net-snmp-5.4.2_testing.empty_arptable.patch old: net-snmp-5.3.0.1-audit.diff new: nmp-5.4.2_audit.patch old: net-snmp-5.3_vendorperl.patch new: net-snmp-5.4.2_vendorperl.patch old: net-snmp-5.4.1-autoconf.diff new: net-snmp-5.4.2_autoconf.patch old: net-snmp-5.4.1_perl_tk_warning.patch new: net-snmp-5.4.2_perl_tk_warning.patch old: net-snmp-5.4_net-snmp-config_headercheck.patch new: net-snmp-5.4.2_net-snmp-config_headercheck.patch - more IPv6 support from IBM (mainline backports) (bnc#437208) Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Table.patch Add-ICMP-Statistics-Tables-support.patch Add-Default-Router-Table-support.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-Internet-Address-Prefix-Table.patch Add-IPv6-Scope-Zone-Index.patch Improve-IP-Statistics-tables.patch - remove lzma-alpha-devel. rpm-devel has to require it if it is really needed - updated patches from Dell: net-snmp-5.4.1.2-etherlike-mib-revised_1.patch net-snmp-5.4.1.2-rmon-mib-revised.patch Those 2 patches obsolete the previous 3 patches. - fix typo in the init script which breaks loading of agents (bnc#415127) - also restart snmptrapd after logrotate (bnc#378069) - add patches from Dell: (Fate#304310) net-snmp-5.4.1.2-etherlike-mib-revised.patch net-snmp-5.4.1.2-rmon-mib.patch net-snmp-5.4.2_fix_dell_patches.patch - update to version 5.4.2 - [PATCH 1921861]: Avoid endless loop after truncating 64bit int - Better handling of CONTAINER_INSERT failures with multiple indices - [PATCH 2023633]: add SCTP-MIB implementation (Linux only) - suppress annoying "registration != duplicate" warning for root oids - Update to libtool 1.5.26 - add net-snmp-5.4.1_perl_tk_warning.patch (bnc#392695) correctly recommend installing the perl-Tk package instead of referring to cpan. - fix Required-Stop in the init scripts - cleanup the spec file: - moved files from the mibs package to the packages where they really belong (snmpconf-data, mib2c) - move mib2c from the perl package to the devel package - fixed wrong SELinux context (selinux.patch) [Fate#303662] - fix init scripts - use %fillup_only as we dont launch the daemon per default - added baselibs.conf file to build xxbit packages for multilib support - added lzma-alpha-devel to buildreq - libsensors is in a separate package now. - update to 5.4.1 many small fixes. the highlights: - link only needed libraries - memleaks fixed - python bindings (not yet packaged) - rediffed net-snmp-5.4.rc1-autoconf.diff new name net-snmp-5.4.1-autoconf.diff - no longer build against lm_sensors on s390 - split out new packages: libsnmp15, snmp-mibs - update to 5.4.rc2: tons of bugfixes, and new features. just to name a few: - enabled embedded perl - new MIB table to manage net-snmp access control extensions - hal to abstract os specific aspects of the systems - tree matching support for snmptrapd - reworked transport creation in snmplib - using the incoming ip for outgoing packets if possible. - ipv6 aware tcp/udp mibs - removed patches: (all of them are either upstream or obsolete) net-snmp-5.2.1-acinclude.diff net-snmp-5.2.1-acquotation.patch net-snmp-5.2.1-compat.patch net-snmp-5.2.1-localperl.diff net-snmp-5.2.1-perl.diff net-snmp-5.3.0.1-64bit.diff net-snmp-5.3.0.1_agentx_socket_path_doc.patch net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch net-snmp-5.3.0.1_disman_mib_crash.patch net-snmp-5.3.0.1_ethtool.patch net-snmp-5.3.0.1_linux_types_header.patch net-snmp-5.3.0.1_missing_ifNumber.patch net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch net-snmp-5.3.0.1_perl_ld_run_path.patch net-snmp-5.3.0.1_sighup_vacm.patch net-snmp-5.3.0.1-smux-trap.diff net-snmp-5.3.0.1.tar.bz2 net-snmp-5.3.0.1_tcpwrapper_log_severity.patch net-snmp-5.3.0.1_testsuite_no_smux.patch net-snmp-5.3.0.1_tunnel_compilation.patch net-snmp-5.3_perl_agent.xs-pointersize.patch net-snmp-5.3_perl-printf.patch net-snmp-5.4_default_store_return_value.patch oid-names2_5.3.patch - added net-snmp-5.4_net-snmp-config_headercheck.patch: warn if net-snmp-config is used but development files are missing. - updated net-snmp-5.2.1-autoconf.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc1-autoconf.diff - updated net-snmp-5.2.1-versinfo.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc2-versinfo.diff - added net-snmp-5.4.rc2_perl_SNMP_size_t.patch: dont use int if you want size_t. fixes failures in the perl test suite. - added net-snmp-5.4_default_store_return_value.patch: backport my patch from 5.4 so we can get rid of the build errors. the patch removes/disables dead code. - added net-snmp-5.3.0.1_perl_ld_run_path.patch: the old perl replacement line broke linking of the SNMP libraries into the perl modules. the patch sets the LD_RUN_PATH for the build process to LIBDIR. (#180888) - added net-snmp-5.3.0.1_sighup_vacm.patch: The snmp agent was broken on SIGHUP. It lost all its MIB informations. (upstream bug: #1473289) - added net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch: The snmpd used a deprecated sysctl to get the retransmit time from the kernel. We didnt use this module but the mib library triggered the sysctl. The patch uses retrans_time_ms when available and corrects the correction factor for the old sysctl. (bug: #170140, upstream: #1437287) - reenabled the lmsensors support. was disabled for testing and never reenabled. - net-snmp-5.3.0.1_missing_ifNumber.patch: The 5.3 agent on Linux systems did not implement the 'ifNumber' MIB object. (#159501) - logrotate does not like if the postrotate script returns with a non zero returncode. - add missing "-e" in echo line - dont call "/etc/init.d/snmpd restart". this could start the daemon unconditionally (too large log file). switched to "/etc/init.d/snmpd try-restart" - run logrotate on startup if the logfile is too large. (#131072) - fix compilation with ethtool support. (#155709) - added option to ignore accepted connections (#86634) net-snmp-5.3.0.1_tcpwrapper_log_severity.patch new sysconfig option: SNMPD_LOG_SUCCESSFUL_CONNECTIONS - pass the correct path to configure to set the desired log file - make smux listen to localhost by default. (#116742) - remove confpath patch. (#147808,#159768) - updated and reenabled the audit patch - ported sysconfig options from sles9 SNMPD_LOGLEVEL -> SPECIFY the log level for the snmpd SNMPD_USE_SMUX -> disable SMUX socket - disable embedded perl for now. - added net-snmp-5.3.0.1_agentx_socket_path_doc.patch: fixes: net-snmp snmpd.conf(5) manpage gives wrong default for AgentXSocket (#129437) - ported fix for bug #129923 from sles9 - suppress the error message in the ucd-snmp upgrade script - we move the configs into /etc/snmp [#77935] - removed debugging packages from the build requires. - added net-snmp-5.3.0.1-smux-trap.diff dont loose the value of string variables via smux traps [#150091] - added net-snmp-5.3.0.1_disman_mib_crash.patch o fixes a crash in the disman mib loading - net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch o dont crash while registering mibs - net-snmp-5.3_perl_agent.xs-pointersize.patch o dont use int if you mean intptr_t(IV) - net-snmp-5.3_perl-printf.patch o unused format specifier in printf - net-snmp-5.3_vendorperl.patch o do make install_vendor - removed net-snmp-5.2.1-cmdline.diff better solution from upstream - converted neededforbuild to BuildRequires - update to version 5.3.0.1 - removed patches that got applied upstream or superseeded by upstream fixes: net-snmp-5.2.1-uptime.diff net-snmp-5.2.1-typeclash.diff net-snmp-5.2.1-gcc.diff net-snmp-5.2.1-dlopen-conf.diff net-snmp-5.2.1-enomedium.diff net-snmp-5.2.1-mktemp.diff net-snmp-5.2.1-close-all-fds.diff net-snmp-5.2.1-more-cpus.diff net-snmp-5.2.1-nowraplibs.patch net-snmp-5.2.1.set-var-value.patch - added 4 new patches: net-snmp-5.3_perl_agent.xs-pointersize.patch - fixes some casts of pointers to ints -> segfaults in the test suite net-snmp-5.3_perl-printf.patch - fixes a printf warning net-snmp-5.3_vendorperl.patch - call perl modules install with install_vendor net-snmp-5.1.1-pie.patch - build snmpd and snmptrapd with pie - no point in running the test suite in QEMU - Added rpm-devel to the requires of the -devel package - added disman/event-mib to the mib list (Bug #91039) - replaced patch25 (asn1 handling fix) with patch from the upstream. (Bug #73804) - build snmpd and snmptrap with with -fpie/-pie - Fixed test suite for boxes with empty arp tables. - Include the right header for compat mode (Bug #64074) - Fix length for type ASN_UNSIGNED (Bug #73804) - Get rid of WRAPLIBS in net-snmp-config (Bug #75879) - Fix ac quotation - moved tkmib and mib2c* to perl subpackage, since they require it. #63992 - Multiple non Intel CPU detection added. - Upgraded to 5.1.2 release. (lots of bugfixes as usual) - overflow counter32 and gauge32 on 64bit systems correctly. #50384 - close all non standard filedescriptors on start. - Upgraded to 5.2 final. - Upgraded to 5.2.1rc2. Dropped merged patches, rediffed old ones. - fixing pre-requires - Upgrade to 5.1.2 final. - Upgraded to upstream 5.1.2.rc2. - Upgraded to 5.1.2.rc1. - Dropped some old patches / parts of old patches. - Fixed problem on little endian 64bit machines. - removed double free on failure in netsnmp_register_old_api(). (bug #42580) - do not specify -c /etc/snmpd.conf (since it is already built in). (bug #41706) - require openssl-devel in -devel package. - replaced undefined C construct (x[n] = y[n++]) which caused the testsuite to fail on i386. - sleep .3 s before starting agents (bug #42588) - Fixed 2 places of file descriptor leakage which lead to segfaults during readdir/fgets. #33958 - remove the #define PACKAGE_ from the included autoconf generated config.h file. #36355 - use stop_on_removal and restart_on_update macros (#36306) - package /var/log/net-snmp as %ghost (#36435) - use mktemp in fixproc (#36103) - avoid segfault in version-info (limit to 300 bytes) - open devices with NONBLOCK, don't wait for cdrom - avoid segfault in proc-cmdline output - previous 64-bit fix went just one bit too far, fixed - added smux mib (for quagga) - fix dlopen detection in configure - added requires for perl-TermReadKey - try to fix at least some 64bit issues (eg. #33958) - update arguments in rc-script - Fix some 64bit critical compiler warnings - Fixed includes for build with evlog. - update to 5.1 - build perl module as perl-SNMP - enable ucd-snmp compatibility - update to 5.1.pre2 - revised audit patch - branched devel subpackage - added rpm support - created package and ported patches from ucd-snmp OBS-URL: https://build.opensuse.org/request/show/849908 OBS-URL: https://build.opensuse.org/package/show/network:utilities/net-snmp?expand=0&rev=27
2020-12-05 18:18:28 +01:00
%endif
%prep
%setup -q
%autopatch -p1
%build
MIBS="misc/ipfwacc ucd-snmp/diskio etherlike-mib rmon-mib smux \
ip-mib/ipv4InterfaceTable ip-mib/ipv6InterfaceTable \
ip-mib/ipDefaultRouterTable ip-mib/ipAddressPrefixTable \
ip-mib/ipv6ScopeZoneIndexTable ip-mib/ipIfStatsTable \
tsm-mib tlstm-mib"
%if 0%{?netsnmp_with_sensors}
MIBS="$MIBS ucd-snmp/lmsensorsMib"
%endif
%configure \
--with-sys-contact="root@localhost" \
--with-sys-location="unknown" \
--with-mib-modules="$MIBS" \
--with-cflags="%{optflags} -fcommon" \
--with-ldflags="-Wl,-z,relro -Wl,-z,now" \
--with-persistent-directory="%{_localstatedir}/lib/net-snmp" \
--with-agentx-socket="%{netsnmp_agentx_socket_dir_fhs}/master" \
--with-temp-file-pattern=%{_localstatedir}/run/net-snmp/snmp-tmp-XXXXXX \
--with-logfile="%{netsnmp_logfile}" \
--with-libwrap="%{_prefix}" \
--with-perl-modules="INSTALLDIRS=vendor" \
--with-defaults \
--with-pic \
--sysconfdir=%{_sysconfdir} \
--enable-shared \
--disable-static \
--enable-as-needed \
--without-root-access \
--enable-local-smux \
--enable-ipv6 \
--enable-ucd-snmp-compatibility \
--enable-mfd-rewrites \
--with-security-modules=tsm,usm \
--with-transports=TLSTCP,DTLSUDP \
--with-systemd \
--with-openssl \
--enable-blumenthal-aes \
--disable-des \
--disable-md5
# Parallel build deps not properly stated
%make_build -j1
pushd python
%python_exec setup.py build --basedir="../"
popd
%install
%make_install INSTALL_PREFIX=%{buildroot}
install -Dd %{buildroot}%{_localstatedir}/log %{buildroot}%{_localstatedir}/lib/net-snmp %{buildroot}%{_libexecdir}/net-snmp/agents %{buildroot}%{netsnmp_agentx_socket_dir_fhs}
install -D -m 0644 dist/snmpd.service %{buildroot}%{_unitdir}/snmpd.service
install -D -m 0644 dist/snmptrapd.service %{buildroot}%{_unitdir}/snmptrapd.service
install -D -m 0600 %{SOURCE1} %{buildroot}%{_sysconfdir}/snmp/snmpd.conf
install -m 0644 %{SOURCE2} .
%if 0%{?suse_version} > 1500
mkdir -p %{buildroot}%{_distconfdir}/logrotate.d
install -D -m 0644 %{SOURCE3} %{buildroot}%{_distconfdir}/logrotate.d/net-snmp
%else
install -D -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/logrotate.d/net-snmp
%endif
install -m 0744 %{SOURCE4} testing/
ln -sf service %{buildroot}%{_sbindir}/rcsnmpd
ln -sf service %{buildroot}%{_sbindir}/rcsnmptrapd
install -m 0644 /dev/null %{buildroot}%{netsnmp_logfile}
pushd perl
%perl_make_install
%perl_process_packlist
rm -f %{buildroot}/%{perl_vendorarch}/Bundle/Makefile.subs.pl
popd
pushd python
%python_install
popd
grep -a -v "^#define PACKAGE" %{buildroot}%{_includedir}/net-snmp/net-snmp-config.h > \
%{buildroot}%{_includedir}/net-snmp/net-snmp-config.h.new
mv %{buildroot}%{_includedir}/net-snmp/net-snmp-config.h{.new,}
install -D -m 0644 %{SOURCE10} %{buildroot}%{_fillupdir}/sysconfig.snmpd
install -D -m 0644 %{SOURCE11} %{buildroot}%{_fillupdir}/sysconfig.snmptrapd
# tmpfiles
install -m 755 -d %{buildroot}/%{_tmpfilesdir}
install -m 644 %{SOURCE20} %{buildroot}/%{_tmpfilesdir}/net-snmp.conf
#
ln -s -f %{netsnmp_agentx_socket_dir_fhs} %{buildroot}%{netsnmp_agentx_socket_dir_rfc}
#
find %{buildroot} -type f -name "*.la" -delete -print
%pre
%service_add_pre snmpd.service snmptrapd.service
%if 0%{?suse_version} > 1500
# Prepare for migration to /usr/etc; save any old .rpmsave
for i in logrotate.d/net-snmp ; do
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i}.rpmsave.old ||:
done
%endif
%if 0%{?suse_version} > 1500
%posttrans
# Migration to /usr/etc, restore just created .rpmsave
for i in logrotate.d/net-snmp ; do
test -f %{_sysconfdir}/${i}.rpmsave && mv -v %{_sysconfdir}/${i}.rpmsave %{_sysconfdir}/${i} ||:
done
%endif
%post
%fillup_only -n snmpd
%fillup_only -n snmptrapd
%tmpfiles_create %{_tmpfilesdir}/net-snmp.conf
%service_add_post snmpd.service snmptrapd.service
%preun
%service_del_preun snmpd.service snmptrapd.service
%postun
%service_del_postun snmpd.service snmptrapd.service
%post -n %{libname} -p /sbin/ldconfig
%postun -n %{libname} -p /sbin/ldconfig
%files
%license COPYING
%doc AGENT.txt EXAMPLE.conf EXAMPLE.conf.def
%doc FAQ NEWS TODO CHANGES
%doc README README.agent-mibs README.agentx README.krb5 README.snmpv3 README.thread
%dir %{_sysconfdir}/snmp
%config(noreplace) %{_sysconfdir}/snmp/snmpd.conf
%{_unitdir}/snmpd.service
%{_unitdir}/snmptrapd.service
%{_tmpfilesdir}/net-snmp.conf
%{_bindir}/encode_keychange
%{_bindir}/fixproc
%{_bindir}/ipf-mod.pl
%{_bindir}/net-snmp-config
%{_bindir}/snmpbulkget
%{_bindir}/snmpbulkwalk
%{_bindir}/snmpcheck
%{_bindir}/snmpconf
%{_bindir}/snmpdelta
%{_bindir}/snmpdf
%{_bindir}/snmpget
%{_bindir}/snmpgetnext
%{_bindir}/snmpinform
%{_bindir}/snmpnetstat
%{_bindir}/snmpset
%{_bindir}/snmpstatus
%{_bindir}/snmptable
%{_bindir}/snmptest
%{_bindir}/snmptls
%{_bindir}/snmptranslate
%{_bindir}/snmptrap
%{_bindir}/snmpusm
%{_bindir}/snmpvacm
%{_bindir}/snmpwalk
%{_bindir}/traptoemail
%{_bindir}/net-snmp-create-v3-user
%{_bindir}/net-snmp-cert
%{_bindir}/agentxtrap
%{_bindir}/snmp-bridge-mib
%{_bindir}/checkbandwidth
%{_bindir}/snmpping
%{_bindir}/snmpps
%{_bindir}/snmptop
%dir %{_libexecdir}/net-snmp
%dir %{_libexecdir}/net-snmp/agents
%{_mandir}/man[158]/*
%{_sbindir}/*
%{_localstatedir}/lib/net-snmp
%dir %ghost %attr(700,root,root) %{netsnmp_agentx_socket_dir_fhs}
%ghost %{netsnmp_logfile}
%if 0%{?suse_version} > 1500
%{_distconfdir}/logrotate.d/net-snmp
%else
%config(noreplace) %{_sysconfdir}/logrotate.d/net-snmp
%endif
%{_fillupdir}/sysconfig.snmpd
%{_fillupdir}/sysconfig.snmptrapd
%{netsnmp_agentx_socket_dir_rfc}
%{_datadir}/snmp/snmpconf-data/
%{_datadir}/snmp/snmp_perl.pl
%{_datadir}/snmp/snmp_perl_trapd.pl
%files -n snmp-mibs
%dir %{_datadir}/snmp
%{_datadir}/snmp/mibs/
%files -n %{libname}
%license COPYING
%{_libdir}/libsnmp*.so.*
%{_libdir}/libnetsnmp*.so.*
%files devel
%doc ChangeLog PORTING
%{_mandir}/man3/*
%{_includedir}/ucd-snmp
%{_includedir}/net-snmp
%{_libdir}/libsnmp*.so
%{_libdir}/libnetsnmp*.so
%{_libdir}/pkgconfig/netsnmp-agent.pc
%{_libdir}/pkgconfig/netsnmp.pc
%{_bindir}/mib2c
%{_bindir}/mib2c-update
%{_datadir}/snmp/mib2c*
%files -n perl-SNMP
%{perl_vendorarch}/auto/SNMP
%{perl_vendorarch}/auto/NetSNMP
%{perl_vendorarch}/Bundle
%{perl_vendorarch}/SNMP.pm
%{perl_vendorarch}/NetSNMP
%{_bindir}/tkmib
Accepting request 849908 from home:bnavigator:branches:network:utilities - Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79 - Support multiple python 3 flavors in the python subpackage gh#openSUSE/python-rpm-macros#66 - Change /etc/logrotate.d/net-snmp from init.d to systemd fix boo#1173487. - Add -fcommon in order to fix boo#1160404. - Add Lustre filesystem support (bsc#1140341). Add net-snmp-5.8-add-lustre-fs-support.patch - Remove FIRST_ARG usage from spec file (bsc#1126426). - Update to net-snmp-5.8. Fixes included: * Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) * Fix agentx freezing on timeout (bsc#1027353) * swintst_rpm: Protect against unspecified Group name (bsc#1102775) - Add tsm and tlstm MIBs and the USM security module. (bsc#1081164) - Rename and refactor patches and remove those that are already included inside the new version. Added: * net-snmp-5.8-socket-path.patch * net-snmp-5.8-testing-empty-arptable.patch * net-snmp-5.8-pie.patch * net-snmp-5.8-net-snmp-config-headercheck.patch * net-snmp-5.8-perl-tk-warning.patch * net-snmp-5.8-velocity-mib.patch * net-snmp-5.8-netgroups.patch * net-snmp-5.8-snmpstatus-suppress-output.patch * net-snmp-5.8-fix-Makefile.PL.patch * net-snmp-5.8-modern-rpm-api.patch * net-snmp-5.8-fix-python3.patch Removed: * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-velocity-mib.patch * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-netgroups.patch * net-snmp-5.7.3-snmpstatus-suppress-output.patch * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch * net-snmp-5.7.3-Remove-U64-typedef.patch * net-snmp-5.7.3-Fix-Makefile.PL.patch * net-snmp-5.7.3-build-with-openssl-1.1.patch * net-snmp-5.7.3-modern-rpm-api.patch * net-snmp-python3.patch * net-snmp-5.7.2-systemd.patch * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Create /var/agentx via systemd tmpfiles in case of rollback, snapshots and transactional updates [bsc#1098032] - Fix permissions on unit files wrt bsc#1087977 - Use %license (boo#1082318) - Remove executable flags from systemd service files (bsc#1089295). - Fix RPM group for shlib subpackage. - Properly conditionalize the py2 build - Add patch from Fedora to support natively systemd: * net-snmp-5.7.2-systemd.patch - Drop the check phase as whole 90% of the tests fail it makes more sense to run them somewhere localy - Take systemd service files from fedora to replace sysV scripts - Also convert the sysconfig files to match fedora ones, they get bit more terse but it works seamlessly with systemd - Format with spec-cleaner - Drop sle11 support as it fails to build anyway for ages - Rename python packages to be python-%{name} with obsoletes * Use new singlespec macros * Add patch converting the py files to python3/2 compat mode net-snmp-python3.patch - Run full autoreconf instead of partial - Build with threads by building few targets first - Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (>= 4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being removed. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Fix build with OpenSSL 1.1 (bsc#1042664): + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated squash-patch from the following upstream commits: bbed6b86e70b5a3c54f14992696f2308a8d79511 14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8 9641b472ef01208f92631016e91b0a4a518163f0 e4c6937483d4a680570cec05388d2e4b291868a6 b906c60c8a436d7360267a6d242526b33a9aaac8 - Fix build with perl 5.24.0: + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system recursiely loading Makefile.Pl and destroying its internas. See https://rt.perl.org/Public/Bug/Display.html?id=125907 + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef conflicts with a typedef in a Perl header file. Hence remove the U64 typedef from the Net-SNMP header files. Backported from upstream commit 477b4307ef1. - make snmpd and snmptrapd log message destination configurable for syslog or a dedicated log file. (bsc#695677) - make snmpd and snmptrapd listening address(es) configurable via the sysconfig file. - fix build with GNU grep 2.23, use grep -a to force text matching - reenabled md5 and des, as some tools build against it and need the methods :( - added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Disable MD5 authentication method, disable DES support (if something breaks, tell me) - Request pkgconfig(libssl) instead of openssl-devel to support using LibreSSL as well. - update to upstream version 5.7.3 - remove patch that is now present in the upstream release: * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch - rename patches to new version number 5.7.3: delete: * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.2-net-snmp-config-headercheck.patch * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-velocity-mib.patch add: * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-velocity-mib.patch - add build requirement 'procps' to fix a net-snmp-config error (bsc#935863) - enable DTLS and TLS support (FATE#318789) new binary 'snmptls' was added - add support for hostname netgroups (FATE#316305) '@hostgroup' can be specified for multiple hosts * net-snmp-5.7.3-netgroups.patch - suppress network statistics output in snmpstatus (FATE#316289) '-Sn' don't print any info about the network '-Si' don't print the operational status of network interfaces * net-snmp-5.7.3-snmpstatus-suppress-output.patch - also stop snmptrapd on removal - update to upstream version 5.7.3.pre5 - remove patches that are now present in the upstream release: * net-snmp-5.7.2-build-fix-for-strlcat.patch * net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch * net-snmp-5.7.2-fix-perl-trap-handler.patch - net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: refresh and add patch header - added net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: fix remote denial of service problem inside snmptrapd when started with the "-OQ" option (CVE-2014-3565)(bnc#894361) - added net-snmp-5.7.2-fix-perl-trap-handler.patch: fix potential remote denial of service problem inside the snmptrapd Perl trap handler (CVE-2014-2285)(bnc#866942) - merge some old fixes from SLE 11: * init script should provide snmpd. (bnc#466805) * stop all snmp agents when stopping the daemon. (bnc#473328) - recompress .tar.gz - it has trailing garbage, hope we can readd source url on next update - update to upstream version 5.7.2.1, fixing one security issue: * A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. (CVE-2014-2284, bnc#866942) - net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch: fix mib representation of timeout values (bnc#833153) - use _rundir macro - remove old workaround for ppc/ppc64 migrations which is no longer needed (bnc#437293) - add support for python bindings - improve snmptrapd init script (avoid to overwrite the logfile on restart) - Disable parallelism during build. The dependencies between the Perl module and libnetsnmp are not defined correctly and might result in broken linkage (bnc#819497, bnc#818907) - Add Source URL, see https://en.opensuse.org/SourceUrls - net-snmp-5.7.2-build-fix-for-strlcat.patch: fix exported strlcat() prototype that could conflict with other packages (bnc#793548) - update to version 5.7.2: several bug fixes in the agent, client utilities and libraries. The CHANGES file shipped with the package contains a comprehensive list of fixes and improvements - rebase patches to apply cleanly: * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-velocity-mib.patch * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch - remove patches that are now present in the upstream release: * net-snmp-5.7.0-recognize-reiserfs.patch * net-snmp-5.7.1-snmplib-zero-timeout.patch * net-snmp-5.7.1-old-api-double-free.patch * net-snmp-5.7.1-use-pclose-to-close-pipes.patch * net-snmp-5.7.1-fix-handling-of-large-filesystems.patch * net-snmp-5.7.1-snmplib-default-retries.patch * net-snmp-5.7.1-fsys-memory-leak.patch * net-snmp-5.7.1-adjust-copyright-in-agent-txt-file.patch * net-snmp-5.7.1-recognize-ocfs2.patch * net-snmp-5.7.1-properly-clean-up-old-requests-in-subagents.patch * net-snmp-5.7.1-reduce-code-duplication-in-agentx.patch * net-snmp-5.7.1-log-agentx-disconnections.patch * net-snmp-5.7.1-more-robust-handling-of-agentx-errors.patch * net-snmp-5.7.1-report-problems-with-setundo-processing.patch * net-snmp-5.7.1-fix-array-index-error.patch - Remove redundant sections from specfile - Avoid shipping .la files - fix array index error that could lead to a crash (CVE-2012-2141) (bnc#759352) - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - add OCFS2 to the list of known file systems - update copyright notice of AGENT.txt allowing us to redistribute the file in our package (from Dave Shield) (bnc#750704) - fix license to be in spdx.org format - logrotate: use "reload" instead of "try-restart" to avoid an unnecessary stop/start cycle in the agent (bnc#707636) - net-snmp-5.7.1-fsys-memory-leak.patch: fix a memory leak in agent/mibgroup/hardware/fsys (bnc#725766) - net-snmp-5.7.1-snmplib-default-retries.patch: change default number of retries back from 0 to 5 (bnc#725766) - net-snmp-5.7.1-fix-handling-of-large-filesystems.patch: fix bug in handling large (>8TB) filesystems (bnc#725766) - net-snmp-5.7.1-use-pclose-to-close-pipes.patch: use pclose() instead of fclose() to close a pipe (bnc#725766) - net-snmp-5.7.1-old-api-double-free.patch: agent: avoid double free when netsnmp_register_old_api() fails (bnc#725766) - net-snmp-5.7.1-snmplib-zero-timeout.patch: snmplib: avoid waiting indefinitely if a session has timeout zero (bnc#725766) - update to version 5.7.1: minor release including some bug fixes - enable net-snmp-devel on all baselib architectures - make sure all delegated requests are removed before closing an AgentX session (bnc#670789) - update to version 5.7.1.rc1 but keep package version as 5.7.1 to avoid update problems when the final version is released - small fixes to snmpd and snmptrapd init scripts: - if $SNMPD_LOGLEVEL is not defined, use LOG_NOTICE instead of LOG_DEBUG - improve messages printed and service description - write snmptrapd logs to /var/log/net-snmpd.log - update README.SUSE to reflect some recent changes and drop a bit of outdated information - update baselibs to reflect new library version - spec file cleanup: rename some source files for consistency - add ReiserFS to the list of known file systems (bnc#715199) - install snmptrapd init script by default (bnc#712175) - fix logging option in snmptrapd init script (bnc#712174) - update upstream patches from branch V5-7-patches to 20110714 - update to version 5.7: new features and lots of bug fixes - remove patches that are no longer needed: net-snmp-5.6.0-enable-hrh-filesys.patch net-snmp-5.6.1-recognize-jfs-and-xfs.patch net-snmp-5.6.1-rpm490.patch - refresh and rename patches to apply cleanly after update: net-snmp-5.7.0-pie.patch net-snmp-5.7.0-velocity-mib.patch - switch from rpmdb to rpmts to support rpm-4.9.0 - update upstream patches from branch V5-6-patches to 20110512 - add JFS and XFS to the list of known file systems (bnc#687327) - update upstream patches from branch V5-6-patches to 20110328 - fix libsnmp version in baselibs.conf - update to version 5.6.1: new features and lots of bug fixes - update upstream patches from branch V5-6-patches to 20110104 - remove patches that are no longer needed: net-snmp-5.6.0-ethtool-speed.patch - remove /var/adm/perl-modules/net-snmp from the Perl module - update upstream patches from branch V5-6-patches to 20101129 - spec file cleanup: upstream uses -fno-strict-aliasing by default now - remove patches that are no longer needed: net-snmp-5.5.0-rpmdb-h-detect.patch net-snmp-5.6.0-vendorperl.patch - if-mib: add support for more speeds with ethtool (bnc#650558) - update upstream patches from branch V5-6-patches to 20101101, fixing a segmentation fault on shutdown (bnc#650282) - enable new implementation of hrStorage and hrFilesys to fix persistent indexes in FS and Storage tables (bnc#648364) - update upstream patches from branch V5-6-patches to 20101021 - update to version 5.6: new features and lots of bug fixes - refresh and rename patches to apply cleanly after update: net-snmp-5.6.0-pie.patch net-snmp-5.6.0-vendorperl.patch net-snmp-5.6.0-net-snmp-config-headercheck.patch - update upstream patches from branch V5-5-patches to 20100803 - change default log level from DEBUG to NOTICE (bnc#623497) - spec file cleanup: remove old backward compatibility scripts - update upstream patches from branch V5-5-patches to 20100602: fixed potential buffer overflow in parsing OIDs in config files - update upstream patches from branch V5-5-patches to 20100531 - add net-snmp-5.5.0-rpmdb-h-detect.patch: workaround for autoconf failing to detect rpm/rpmdb.h - remove patches that are no longer needed: net-snmp-5.5.0-use-lmsensors-v3.patch - create /var/run/agentx during startup to support systems that mount /var/run as tmpfs - update libsnmp package name to reflect the library version we are currently shipping - remove patches that are obsolete: net-snmp-5.4.rc2-versinfo.diff net-snmp-5.4.2_snmpconf-selinux.patch - refresh all patches to apply as "-p1" - spec file cleanup: remove conditionals to build on unsupported versions of the distribution - update upstream patches from branch V5-5-patches to 20100428 - add net-snmp-5.5.0_upstream-20100405.patch: merge all patches committed to upstream branch V5-5-patches - remove patches that are now upstream: net-snmp-5.4.2_audit.patch net-snmp-5.5.0_autoconf.patch net-snmp-5.4.2_overflow.patch net-snmp-5.4.2.1-rpm4.7.patch net-snmp-5.5.0_gcc45.patch - Fix strncat properly (from Andreas Jaeger) - Fix code errors found by gcc 4.5 - build for libsensors4 instead of libsensors3 - remove sparcv9-specific baselib exceptions (not needed) - remove net-snmp-5.4.1.2-rmon-mib-revised_3.patch from sources (upstream since 5.5) - refresh net-snmp-5.5.0_autoconf.patch - spec file cleanup: update package description - update to version 5.5: new features and lots of bug fixes, including: - fix hrSWRunPath for processes other than init (bnc#486270) - remove patches that are now upstream: Add-Default-Router-Table-support.patch Add-ICMP-Statistics-Tables-support.patch Add-IPv6-Scope-Zone-Index.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Prefix-Table.patch Fix-for-Internet-Address-Table.patch Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Improve-IP-Statistics-tables.patch net-snmp-5.3.0.1_trap-agent-addr_v2.patch net-snmp-5.4.1.2-etherlike-mib-revised_4.patch net-snmp-5.4.x_embedded_perl_error_message.patch - add baselibs.conf as a source - add baselib defs for SPARC - Fix build with rpm 4.7 (net-snmp-5.4.2.1-rpm4.7.patch) - make patch0 usage consistent - updated patches from Dell: Those patches incorporate the latest fixes for remarks from the upstream review old: net-snmp-5.4.1.2-rmon-mib-revised.patch new: net-snmp-5.4.1.2-rmon-mib-revised_3.patch old: net-snmp-5.4.1.2-etherlike-mib-revised_2.patch new: net-snmp-5.4.1.2-etherlike-mib-revised_4.patch - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) - fix the snmptrapd init script: 1. make sure the config isnt loaded twice. 2. do not truncate the net-snmp.log 3. use SNMPD_LOGLEVEL aswell. 4. write a pid - update snmptrapd section in README.SuSE - whitespace cleanup in both init scripts - update patches from Dell: Upstream asked to reduce the logging in the mib module. old name net-snmp-5.4.1.2-etherlike-mib-revised_1.patch new name net-snmp-5.4.1.2-etherlike-mib-revised_2.patch - Remove the recommends on perl-Tk again. We rely on the fixed warning in the perl_tk_warnings.patch. (bnc#443047) - SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf - added net-snmp-5.4.x_embedded_perl_error_message.patch: fix typo in error message (bnc#439857) - update to 5.4.2.1: (bnc#440950) (CVE-2008-4309) fix crash in getbulk handling code - obsolete old -XXbit packages (bnc#437293) - added net-snmp-5.4.2_velocity-mib.patch (FATE#303556) - refreshed patches to apply cleanly: old: net-snmp-5.1.2-snmpconf-selinux.patch new: net-snmp-5.4.2_snmpconf-selinux.patch old: net-snmp-5.2.1-overflow.diff new: net-snmp-5.4.2_overflow.patch old: net-snmp-5.2.1.testing.empty_arptable.patch new: net-snmp-5.4.2_testing.empty_arptable.patch old: net-snmp-5.3.0.1-audit.diff new: nmp-5.4.2_audit.patch old: net-snmp-5.3_vendorperl.patch new: net-snmp-5.4.2_vendorperl.patch old: net-snmp-5.4.1-autoconf.diff new: net-snmp-5.4.2_autoconf.patch old: net-snmp-5.4.1_perl_tk_warning.patch new: net-snmp-5.4.2_perl_tk_warning.patch old: net-snmp-5.4_net-snmp-config_headercheck.patch new: net-snmp-5.4.2_net-snmp-config_headercheck.patch - more IPv6 support from IBM (mainline backports) (bnc#437208) Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Table.patch Add-ICMP-Statistics-Tables-support.patch Add-Default-Router-Table-support.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-Internet-Address-Prefix-Table.patch Add-IPv6-Scope-Zone-Index.patch Improve-IP-Statistics-tables.patch - remove lzma-alpha-devel. rpm-devel has to require it if it is really needed - updated patches from Dell: net-snmp-5.4.1.2-etherlike-mib-revised_1.patch net-snmp-5.4.1.2-rmon-mib-revised.patch Those 2 patches obsolete the previous 3 patches. - fix typo in the init script which breaks loading of agents (bnc#415127) - also restart snmptrapd after logrotate (bnc#378069) - add patches from Dell: (Fate#304310) net-snmp-5.4.1.2-etherlike-mib-revised.patch net-snmp-5.4.1.2-rmon-mib.patch net-snmp-5.4.2_fix_dell_patches.patch - update to version 5.4.2 - [PATCH 1921861]: Avoid endless loop after truncating 64bit int - Better handling of CONTAINER_INSERT failures with multiple indices - [PATCH 2023633]: add SCTP-MIB implementation (Linux only) - suppress annoying "registration != duplicate" warning for root oids - Update to libtool 1.5.26 - add net-snmp-5.4.1_perl_tk_warning.patch (bnc#392695) correctly recommend installing the perl-Tk package instead of referring to cpan. - fix Required-Stop in the init scripts - cleanup the spec file: - moved files from the mibs package to the packages where they really belong (snmpconf-data, mib2c) - move mib2c from the perl package to the devel package - fixed wrong SELinux context (selinux.patch) [Fate#303662] - fix init scripts - use %fillup_only as we dont launch the daemon per default - added baselibs.conf file to build xxbit packages for multilib support - added lzma-alpha-devel to buildreq - libsensors is in a separate package now. - update to 5.4.1 many small fixes. the highlights: - link only needed libraries - memleaks fixed - python bindings (not yet packaged) - rediffed net-snmp-5.4.rc1-autoconf.diff new name net-snmp-5.4.1-autoconf.diff - no longer build against lm_sensors on s390 - split out new packages: libsnmp15, snmp-mibs - update to 5.4.rc2: tons of bugfixes, and new features. just to name a few: - enabled embedded perl - new MIB table to manage net-snmp access control extensions - hal to abstract os specific aspects of the systems - tree matching support for snmptrapd - reworked transport creation in snmplib - using the incoming ip for outgoing packets if possible. - ipv6 aware tcp/udp mibs - removed patches: (all of them are either upstream or obsolete) net-snmp-5.2.1-acinclude.diff net-snmp-5.2.1-acquotation.patch net-snmp-5.2.1-compat.patch net-snmp-5.2.1-localperl.diff net-snmp-5.2.1-perl.diff net-snmp-5.3.0.1-64bit.diff net-snmp-5.3.0.1_agentx_socket_path_doc.patch net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch net-snmp-5.3.0.1_disman_mib_crash.patch net-snmp-5.3.0.1_ethtool.patch net-snmp-5.3.0.1_linux_types_header.patch net-snmp-5.3.0.1_missing_ifNumber.patch net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch net-snmp-5.3.0.1_perl_ld_run_path.patch net-snmp-5.3.0.1_sighup_vacm.patch net-snmp-5.3.0.1-smux-trap.diff net-snmp-5.3.0.1.tar.bz2 net-snmp-5.3.0.1_tcpwrapper_log_severity.patch net-snmp-5.3.0.1_testsuite_no_smux.patch net-snmp-5.3.0.1_tunnel_compilation.patch net-snmp-5.3_perl_agent.xs-pointersize.patch net-snmp-5.3_perl-printf.patch net-snmp-5.4_default_store_return_value.patch oid-names2_5.3.patch - added net-snmp-5.4_net-snmp-config_headercheck.patch: warn if net-snmp-config is used but development files are missing. - updated net-snmp-5.2.1-autoconf.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc1-autoconf.diff - updated net-snmp-5.2.1-versinfo.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc2-versinfo.diff - added net-snmp-5.4.rc2_perl_SNMP_size_t.patch: dont use int if you want size_t. fixes failures in the perl test suite. - added net-snmp-5.4_default_store_return_value.patch: backport my patch from 5.4 so we can get rid of the build errors. the patch removes/disables dead code. - added net-snmp-5.3.0.1_perl_ld_run_path.patch: the old perl replacement line broke linking of the SNMP libraries into the perl modules. the patch sets the LD_RUN_PATH for the build process to LIBDIR. (#180888) - added net-snmp-5.3.0.1_sighup_vacm.patch: The snmp agent was broken on SIGHUP. It lost all its MIB informations. (upstream bug: #1473289) - added net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch: The snmpd used a deprecated sysctl to get the retransmit time from the kernel. We didnt use this module but the mib library triggered the sysctl. The patch uses retrans_time_ms when available and corrects the correction factor for the old sysctl. (bug: #170140, upstream: #1437287) - reenabled the lmsensors support. was disabled for testing and never reenabled. - net-snmp-5.3.0.1_missing_ifNumber.patch: The 5.3 agent on Linux systems did not implement the 'ifNumber' MIB object. (#159501) - logrotate does not like if the postrotate script returns with a non zero returncode. - add missing "-e" in echo line - dont call "/etc/init.d/snmpd restart". this could start the daemon unconditionally (too large log file). switched to "/etc/init.d/snmpd try-restart" - run logrotate on startup if the logfile is too large. (#131072) - fix compilation with ethtool support. (#155709) - added option to ignore accepted connections (#86634) net-snmp-5.3.0.1_tcpwrapper_log_severity.patch new sysconfig option: SNMPD_LOG_SUCCESSFUL_CONNECTIONS - pass the correct path to configure to set the desired log file - make smux listen to localhost by default. (#116742) - remove confpath patch. (#147808,#159768) - updated and reenabled the audit patch - ported sysconfig options from sles9 SNMPD_LOGLEVEL -> SPECIFY the log level for the snmpd SNMPD_USE_SMUX -> disable SMUX socket - disable embedded perl for now. - added net-snmp-5.3.0.1_agentx_socket_path_doc.patch: fixes: net-snmp snmpd.conf(5) manpage gives wrong default for AgentXSocket (#129437) - ported fix for bug #129923 from sles9 - suppress the error message in the ucd-snmp upgrade script - we move the configs into /etc/snmp [#77935] - removed debugging packages from the build requires. - added net-snmp-5.3.0.1-smux-trap.diff dont loose the value of string variables via smux traps [#150091] - added net-snmp-5.3.0.1_disman_mib_crash.patch o fixes a crash in the disman mib loading - net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch o dont crash while registering mibs - net-snmp-5.3_perl_agent.xs-pointersize.patch o dont use int if you mean intptr_t(IV) - net-snmp-5.3_perl-printf.patch o unused format specifier in printf - net-snmp-5.3_vendorperl.patch o do make install_vendor - removed net-snmp-5.2.1-cmdline.diff better solution from upstream - converted neededforbuild to BuildRequires - update to version 5.3.0.1 - removed patches that got applied upstream or superseeded by upstream fixes: net-snmp-5.2.1-uptime.diff net-snmp-5.2.1-typeclash.diff net-snmp-5.2.1-gcc.diff net-snmp-5.2.1-dlopen-conf.diff net-snmp-5.2.1-enomedium.diff net-snmp-5.2.1-mktemp.diff net-snmp-5.2.1-close-all-fds.diff net-snmp-5.2.1-more-cpus.diff net-snmp-5.2.1-nowraplibs.patch net-snmp-5.2.1.set-var-value.patch - added 4 new patches: net-snmp-5.3_perl_agent.xs-pointersize.patch - fixes some casts of pointers to ints -> segfaults in the test suite net-snmp-5.3_perl-printf.patch - fixes a printf warning net-snmp-5.3_vendorperl.patch - call perl modules install with install_vendor net-snmp-5.1.1-pie.patch - build snmpd and snmptrapd with pie - no point in running the test suite in QEMU - Added rpm-devel to the requires of the -devel package - added disman/event-mib to the mib list (Bug #91039) - replaced patch25 (asn1 handling fix) with patch from the upstream. (Bug #73804) - build snmpd and snmptrap with with -fpie/-pie - Fixed test suite for boxes with empty arp tables. - Include the right header for compat mode (Bug #64074) - Fix length for type ASN_UNSIGNED (Bug #73804) - Get rid of WRAPLIBS in net-snmp-config (Bug #75879) - Fix ac quotation - moved tkmib and mib2c* to perl subpackage, since they require it. #63992 - Multiple non Intel CPU detection added. - Upgraded to 5.1.2 release. (lots of bugfixes as usual) - overflow counter32 and gauge32 on 64bit systems correctly. #50384 - close all non standard filedescriptors on start. - Upgraded to 5.2 final. - Upgraded to 5.2.1rc2. Dropped merged patches, rediffed old ones. - fixing pre-requires - Upgrade to 5.1.2 final. - Upgraded to upstream 5.1.2.rc2. - Upgraded to 5.1.2.rc1. - Dropped some old patches / parts of old patches. - Fixed problem on little endian 64bit machines. - removed double free on failure in netsnmp_register_old_api(). (bug #42580) - do not specify -c /etc/snmpd.conf (since it is already built in). (bug #41706) - require openssl-devel in -devel package. - replaced undefined C construct (x[n] = y[n++]) which caused the testsuite to fail on i386. - sleep .3 s before starting agents (bug #42588) - Fixed 2 places of file descriptor leakage which lead to segfaults during readdir/fgets. #33958 - remove the #define PACKAGE_ from the included autoconf generated config.h file. #36355 - use stop_on_removal and restart_on_update macros (#36306) - package /var/log/net-snmp as %ghost (#36435) - use mktemp in fixproc (#36103) - avoid segfault in version-info (limit to 300 bytes) - open devices with NONBLOCK, don't wait for cdrom - avoid segfault in proc-cmdline output - previous 64-bit fix went just one bit too far, fixed - added smux mib (for quagga) - fix dlopen detection in configure - added requires for perl-TermReadKey - try to fix at least some 64bit issues (eg. #33958) - update arguments in rc-script - Fix some 64bit critical compiler warnings - Fixed includes for build with evlog. - update to 5.1 - build perl module as perl-SNMP - enable ucd-snmp compatibility - update to 5.1.pre2 - revised audit patch - branched devel subpackage - added rpm support - created package and ported patches from ucd-snmp OBS-URL: https://build.opensuse.org/request/show/849908 OBS-URL: https://build.opensuse.org/package/show/network:utilities/net-snmp?expand=0&rev=27
2020-12-05 18:18:28 +01:00
%if %{with python2} && ! 0%{?python_subpackage_only}
%files -n python2-%{name}
%doc README
%{python2_sitearch}/*
%endif
Accepting request 849908 from home:bnavigator:branches:network:utilities - Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79 - Support multiple python 3 flavors in the python subpackage gh#openSUSE/python-rpm-macros#66 - Change /etc/logrotate.d/net-snmp from init.d to systemd fix boo#1173487. - Add -fcommon in order to fix boo#1160404. - Add Lustre filesystem support (bsc#1140341). Add net-snmp-5.8-add-lustre-fs-support.patch - Remove FIRST_ARG usage from spec file (bsc#1126426). - Update to net-snmp-5.8. Fixes included: * Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) * Fix agentx freezing on timeout (bsc#1027353) * swintst_rpm: Protect against unspecified Group name (bsc#1102775) - Add tsm and tlstm MIBs and the USM security module. (bsc#1081164) - Rename and refactor patches and remove those that are already included inside the new version. Added: * net-snmp-5.8-socket-path.patch * net-snmp-5.8-testing-empty-arptable.patch * net-snmp-5.8-pie.patch * net-snmp-5.8-net-snmp-config-headercheck.patch * net-snmp-5.8-perl-tk-warning.patch * net-snmp-5.8-velocity-mib.patch * net-snmp-5.8-netgroups.patch * net-snmp-5.8-snmpstatus-suppress-output.patch * net-snmp-5.8-fix-Makefile.PL.patch * net-snmp-5.8-modern-rpm-api.patch * net-snmp-5.8-fix-python3.patch Removed: * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-velocity-mib.patch * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-netgroups.patch * net-snmp-5.7.3-snmpstatus-suppress-output.patch * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch * net-snmp-5.7.3-Remove-U64-typedef.patch * net-snmp-5.7.3-Fix-Makefile.PL.patch * net-snmp-5.7.3-build-with-openssl-1.1.patch * net-snmp-5.7.3-modern-rpm-api.patch * net-snmp-python3.patch * net-snmp-5.7.2-systemd.patch * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Create /var/agentx via systemd tmpfiles in case of rollback, snapshots and transactional updates [bsc#1098032] - Fix permissions on unit files wrt bsc#1087977 - Use %license (boo#1082318) - Remove executable flags from systemd service files (bsc#1089295). - Fix RPM group for shlib subpackage. - Properly conditionalize the py2 build - Add patch from Fedora to support natively systemd: * net-snmp-5.7.2-systemd.patch - Drop the check phase as whole 90% of the tests fail it makes more sense to run them somewhere localy - Take systemd service files from fedora to replace sysV scripts - Also convert the sysconfig files to match fedora ones, they get bit more terse but it works seamlessly with systemd - Format with spec-cleaner - Drop sle11 support as it fails to build anyway for ages - Rename python packages to be python-%{name} with obsoletes * Use new singlespec macros * Add patch converting the py files to python3/2 compat mode net-snmp-python3.patch - Run full autoreconf instead of partial - Build with threads by building few targets first - Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (>= 4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being removed. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Fix build with OpenSSL 1.1 (bsc#1042664): + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated squash-patch from the following upstream commits: bbed6b86e70b5a3c54f14992696f2308a8d79511 14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8 9641b472ef01208f92631016e91b0a4a518163f0 e4c6937483d4a680570cec05388d2e4b291868a6 b906c60c8a436d7360267a6d242526b33a9aaac8 - Fix build with perl 5.24.0: + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system recursiely loading Makefile.Pl and destroying its internas. See https://rt.perl.org/Public/Bug/Display.html?id=125907 + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef conflicts with a typedef in a Perl header file. Hence remove the U64 typedef from the Net-SNMP header files. Backported from upstream commit 477b4307ef1. - make snmpd and snmptrapd log message destination configurable for syslog or a dedicated log file. (bsc#695677) - make snmpd and snmptrapd listening address(es) configurable via the sysconfig file. - fix build with GNU grep 2.23, use grep -a to force text matching - reenabled md5 and des, as some tools build against it and need the methods :( - added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Disable MD5 authentication method, disable DES support (if something breaks, tell me) - Request pkgconfig(libssl) instead of openssl-devel to support using LibreSSL as well. - update to upstream version 5.7.3 - remove patch that is now present in the upstream release: * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch - rename patches to new version number 5.7.3: delete: * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.2-net-snmp-config-headercheck.patch * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-velocity-mib.patch add: * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-velocity-mib.patch - add build requirement 'procps' to fix a net-snmp-config error (bsc#935863) - enable DTLS and TLS support (FATE#318789) new binary 'snmptls' was added - add support for hostname netgroups (FATE#316305) '@hostgroup' can be specified for multiple hosts * net-snmp-5.7.3-netgroups.patch - suppress network statistics output in snmpstatus (FATE#316289) '-Sn' don't print any info about the network '-Si' don't print the operational status of network interfaces * net-snmp-5.7.3-snmpstatus-suppress-output.patch - also stop snmptrapd on removal - update to upstream version 5.7.3.pre5 - remove patches that are now present in the upstream release: * net-snmp-5.7.2-build-fix-for-strlcat.patch * net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch * net-snmp-5.7.2-fix-perl-trap-handler.patch - net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: refresh and add patch header - added net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: fix remote denial of service problem inside snmptrapd when started with the "-OQ" option (CVE-2014-3565)(bnc#894361) - added net-snmp-5.7.2-fix-perl-trap-handler.patch: fix potential remote denial of service problem inside the snmptrapd Perl trap handler (CVE-2014-2285)(bnc#866942) - merge some old fixes from SLE 11: * init script should provide snmpd. (bnc#466805) * stop all snmp agents when stopping the daemon. (bnc#473328) - recompress .tar.gz - it has trailing garbage, hope we can readd source url on next update - update to upstream version 5.7.2.1, fixing one security issue: * A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. (CVE-2014-2284, bnc#866942) - net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch: fix mib representation of timeout values (bnc#833153) - use _rundir macro - remove old workaround for ppc/ppc64 migrations which is no longer needed (bnc#437293) - add support for python bindings - improve snmptrapd init script (avoid to overwrite the logfile on restart) - Disable parallelism during build. The dependencies between the Perl module and libnetsnmp are not defined correctly and might result in broken linkage (bnc#819497, bnc#818907) - Add Source URL, see https://en.opensuse.org/SourceUrls - net-snmp-5.7.2-build-fix-for-strlcat.patch: fix exported strlcat() prototype that could conflict with other packages (bnc#793548) - update to version 5.7.2: several bug fixes in the agent, client utilities and libraries. The CHANGES file shipped with the package contains a comprehensive list of fixes and improvements - rebase patches to apply cleanly: * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-velocity-mib.patch * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch - remove patches that are now present in the upstream release: * net-snmp-5.7.0-recognize-reiserfs.patch * net-snmp-5.7.1-snmplib-zero-timeout.patch * net-snmp-5.7.1-old-api-double-free.patch * net-snmp-5.7.1-use-pclose-to-close-pipes.patch * net-snmp-5.7.1-fix-handling-of-large-filesystems.patch * net-snmp-5.7.1-snmplib-default-retries.patch * net-snmp-5.7.1-fsys-memory-leak.patch * net-snmp-5.7.1-adjust-copyright-in-agent-txt-file.patch * net-snmp-5.7.1-recognize-ocfs2.patch * net-snmp-5.7.1-properly-clean-up-old-requests-in-subagents.patch * net-snmp-5.7.1-reduce-code-duplication-in-agentx.patch * net-snmp-5.7.1-log-agentx-disconnections.patch * net-snmp-5.7.1-more-robust-handling-of-agentx-errors.patch * net-snmp-5.7.1-report-problems-with-setundo-processing.patch * net-snmp-5.7.1-fix-array-index-error.patch - Remove redundant sections from specfile - Avoid shipping .la files - fix array index error that could lead to a crash (CVE-2012-2141) (bnc#759352) - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - add OCFS2 to the list of known file systems - update copyright notice of AGENT.txt allowing us to redistribute the file in our package (from Dave Shield) (bnc#750704) - fix license to be in spdx.org format - logrotate: use "reload" instead of "try-restart" to avoid an unnecessary stop/start cycle in the agent (bnc#707636) - net-snmp-5.7.1-fsys-memory-leak.patch: fix a memory leak in agent/mibgroup/hardware/fsys (bnc#725766) - net-snmp-5.7.1-snmplib-default-retries.patch: change default number of retries back from 0 to 5 (bnc#725766) - net-snmp-5.7.1-fix-handling-of-large-filesystems.patch: fix bug in handling large (>8TB) filesystems (bnc#725766) - net-snmp-5.7.1-use-pclose-to-close-pipes.patch: use pclose() instead of fclose() to close a pipe (bnc#725766) - net-snmp-5.7.1-old-api-double-free.patch: agent: avoid double free when netsnmp_register_old_api() fails (bnc#725766) - net-snmp-5.7.1-snmplib-zero-timeout.patch: snmplib: avoid waiting indefinitely if a session has timeout zero (bnc#725766) - update to version 5.7.1: minor release including some bug fixes - enable net-snmp-devel on all baselib architectures - make sure all delegated requests are removed before closing an AgentX session (bnc#670789) - update to version 5.7.1.rc1 but keep package version as 5.7.1 to avoid update problems when the final version is released - small fixes to snmpd and snmptrapd init scripts: - if $SNMPD_LOGLEVEL is not defined, use LOG_NOTICE instead of LOG_DEBUG - improve messages printed and service description - write snmptrapd logs to /var/log/net-snmpd.log - update README.SUSE to reflect some recent changes and drop a bit of outdated information - update baselibs to reflect new library version - spec file cleanup: rename some source files for consistency - add ReiserFS to the list of known file systems (bnc#715199) - install snmptrapd init script by default (bnc#712175) - fix logging option in snmptrapd init script (bnc#712174) - update upstream patches from branch V5-7-patches to 20110714 - update to version 5.7: new features and lots of bug fixes - remove patches that are no longer needed: net-snmp-5.6.0-enable-hrh-filesys.patch net-snmp-5.6.1-recognize-jfs-and-xfs.patch net-snmp-5.6.1-rpm490.patch - refresh and rename patches to apply cleanly after update: net-snmp-5.7.0-pie.patch net-snmp-5.7.0-velocity-mib.patch - switch from rpmdb to rpmts to support rpm-4.9.0 - update upstream patches from branch V5-6-patches to 20110512 - add JFS and XFS to the list of known file systems (bnc#687327) - update upstream patches from branch V5-6-patches to 20110328 - fix libsnmp version in baselibs.conf - update to version 5.6.1: new features and lots of bug fixes - update upstream patches from branch V5-6-patches to 20110104 - remove patches that are no longer needed: net-snmp-5.6.0-ethtool-speed.patch - remove /var/adm/perl-modules/net-snmp from the Perl module - update upstream patches from branch V5-6-patches to 20101129 - spec file cleanup: upstream uses -fno-strict-aliasing by default now - remove patches that are no longer needed: net-snmp-5.5.0-rpmdb-h-detect.patch net-snmp-5.6.0-vendorperl.patch - if-mib: add support for more speeds with ethtool (bnc#650558) - update upstream patches from branch V5-6-patches to 20101101, fixing a segmentation fault on shutdown (bnc#650282) - enable new implementation of hrStorage and hrFilesys to fix persistent indexes in FS and Storage tables (bnc#648364) - update upstream patches from branch V5-6-patches to 20101021 - update to version 5.6: new features and lots of bug fixes - refresh and rename patches to apply cleanly after update: net-snmp-5.6.0-pie.patch net-snmp-5.6.0-vendorperl.patch net-snmp-5.6.0-net-snmp-config-headercheck.patch - update upstream patches from branch V5-5-patches to 20100803 - change default log level from DEBUG to NOTICE (bnc#623497) - spec file cleanup: remove old backward compatibility scripts - update upstream patches from branch V5-5-patches to 20100602: fixed potential buffer overflow in parsing OIDs in config files - update upstream patches from branch V5-5-patches to 20100531 - add net-snmp-5.5.0-rpmdb-h-detect.patch: workaround for autoconf failing to detect rpm/rpmdb.h - remove patches that are no longer needed: net-snmp-5.5.0-use-lmsensors-v3.patch - create /var/run/agentx during startup to support systems that mount /var/run as tmpfs - update libsnmp package name to reflect the library version we are currently shipping - remove patches that are obsolete: net-snmp-5.4.rc2-versinfo.diff net-snmp-5.4.2_snmpconf-selinux.patch - refresh all patches to apply as "-p1" - spec file cleanup: remove conditionals to build on unsupported versions of the distribution - update upstream patches from branch V5-5-patches to 20100428 - add net-snmp-5.5.0_upstream-20100405.patch: merge all patches committed to upstream branch V5-5-patches - remove patches that are now upstream: net-snmp-5.4.2_audit.patch net-snmp-5.5.0_autoconf.patch net-snmp-5.4.2_overflow.patch net-snmp-5.4.2.1-rpm4.7.patch net-snmp-5.5.0_gcc45.patch - Fix strncat properly (from Andreas Jaeger) - Fix code errors found by gcc 4.5 - build for libsensors4 instead of libsensors3 - remove sparcv9-specific baselib exceptions (not needed) - remove net-snmp-5.4.1.2-rmon-mib-revised_3.patch from sources (upstream since 5.5) - refresh net-snmp-5.5.0_autoconf.patch - spec file cleanup: update package description - update to version 5.5: new features and lots of bug fixes, including: - fix hrSWRunPath for processes other than init (bnc#486270) - remove patches that are now upstream: Add-Default-Router-Table-support.patch Add-ICMP-Statistics-Tables-support.patch Add-IPv6-Scope-Zone-Index.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Prefix-Table.patch Fix-for-Internet-Address-Table.patch Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Improve-IP-Statistics-tables.patch net-snmp-5.3.0.1_trap-agent-addr_v2.patch net-snmp-5.4.1.2-etherlike-mib-revised_4.patch net-snmp-5.4.x_embedded_perl_error_message.patch - add baselibs.conf as a source - add baselib defs for SPARC - Fix build with rpm 4.7 (net-snmp-5.4.2.1-rpm4.7.patch) - make patch0 usage consistent - updated patches from Dell: Those patches incorporate the latest fixes for remarks from the upstream review old: net-snmp-5.4.1.2-rmon-mib-revised.patch new: net-snmp-5.4.1.2-rmon-mib-revised_3.patch old: net-snmp-5.4.1.2-etherlike-mib-revised_2.patch new: net-snmp-5.4.1.2-etherlike-mib-revised_4.patch - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) - fix the snmptrapd init script: 1. make sure the config isnt loaded twice. 2. do not truncate the net-snmp.log 3. use SNMPD_LOGLEVEL aswell. 4. write a pid - update snmptrapd section in README.SuSE - whitespace cleanup in both init scripts - update patches from Dell: Upstream asked to reduce the logging in the mib module. old name net-snmp-5.4.1.2-etherlike-mib-revised_1.patch new name net-snmp-5.4.1.2-etherlike-mib-revised_2.patch - Remove the recommends on perl-Tk again. We rely on the fixed warning in the perl_tk_warnings.patch. (bnc#443047) - SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf - added net-snmp-5.4.x_embedded_perl_error_message.patch: fix typo in error message (bnc#439857) - update to 5.4.2.1: (bnc#440950) (CVE-2008-4309) fix crash in getbulk handling code - obsolete old -XXbit packages (bnc#437293) - added net-snmp-5.4.2_velocity-mib.patch (FATE#303556) - refreshed patches to apply cleanly: old: net-snmp-5.1.2-snmpconf-selinux.patch new: net-snmp-5.4.2_snmpconf-selinux.patch old: net-snmp-5.2.1-overflow.diff new: net-snmp-5.4.2_overflow.patch old: net-snmp-5.2.1.testing.empty_arptable.patch new: net-snmp-5.4.2_testing.empty_arptable.patch old: net-snmp-5.3.0.1-audit.diff new: nmp-5.4.2_audit.patch old: net-snmp-5.3_vendorperl.patch new: net-snmp-5.4.2_vendorperl.patch old: net-snmp-5.4.1-autoconf.diff new: net-snmp-5.4.2_autoconf.patch old: net-snmp-5.4.1_perl_tk_warning.patch new: net-snmp-5.4.2_perl_tk_warning.patch old: net-snmp-5.4_net-snmp-config_headercheck.patch new: net-snmp-5.4.2_net-snmp-config_headercheck.patch - more IPv6 support from IBM (mainline backports) (bnc#437208) Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Table.patch Add-ICMP-Statistics-Tables-support.patch Add-Default-Router-Table-support.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-Internet-Address-Prefix-Table.patch Add-IPv6-Scope-Zone-Index.patch Improve-IP-Statistics-tables.patch - remove lzma-alpha-devel. rpm-devel has to require it if it is really needed - updated patches from Dell: net-snmp-5.4.1.2-etherlike-mib-revised_1.patch net-snmp-5.4.1.2-rmon-mib-revised.patch Those 2 patches obsolete the previous 3 patches. - fix typo in the init script which breaks loading of agents (bnc#415127) - also restart snmptrapd after logrotate (bnc#378069) - add patches from Dell: (Fate#304310) net-snmp-5.4.1.2-etherlike-mib-revised.patch net-snmp-5.4.1.2-rmon-mib.patch net-snmp-5.4.2_fix_dell_patches.patch - update to version 5.4.2 - [PATCH 1921861]: Avoid endless loop after truncating 64bit int - Better handling of CONTAINER_INSERT failures with multiple indices - [PATCH 2023633]: add SCTP-MIB implementation (Linux only) - suppress annoying "registration != duplicate" warning for root oids - Update to libtool 1.5.26 - add net-snmp-5.4.1_perl_tk_warning.patch (bnc#392695) correctly recommend installing the perl-Tk package instead of referring to cpan. - fix Required-Stop in the init scripts - cleanup the spec file: - moved files from the mibs package to the packages where they really belong (snmpconf-data, mib2c) - move mib2c from the perl package to the devel package - fixed wrong SELinux context (selinux.patch) [Fate#303662] - fix init scripts - use %fillup_only as we dont launch the daemon per default - added baselibs.conf file to build xxbit packages for multilib support - added lzma-alpha-devel to buildreq - libsensors is in a separate package now. - update to 5.4.1 many small fixes. the highlights: - link only needed libraries - memleaks fixed - python bindings (not yet packaged) - rediffed net-snmp-5.4.rc1-autoconf.diff new name net-snmp-5.4.1-autoconf.diff - no longer build against lm_sensors on s390 - split out new packages: libsnmp15, snmp-mibs - update to 5.4.rc2: tons of bugfixes, and new features. just to name a few: - enabled embedded perl - new MIB table to manage net-snmp access control extensions - hal to abstract os specific aspects of the systems - tree matching support for snmptrapd - reworked transport creation in snmplib - using the incoming ip for outgoing packets if possible. - ipv6 aware tcp/udp mibs - removed patches: (all of them are either upstream or obsolete) net-snmp-5.2.1-acinclude.diff net-snmp-5.2.1-acquotation.patch net-snmp-5.2.1-compat.patch net-snmp-5.2.1-localperl.diff net-snmp-5.2.1-perl.diff net-snmp-5.3.0.1-64bit.diff net-snmp-5.3.0.1_agentx_socket_path_doc.patch net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch net-snmp-5.3.0.1_disman_mib_crash.patch net-snmp-5.3.0.1_ethtool.patch net-snmp-5.3.0.1_linux_types_header.patch net-snmp-5.3.0.1_missing_ifNumber.patch net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch net-snmp-5.3.0.1_perl_ld_run_path.patch net-snmp-5.3.0.1_sighup_vacm.patch net-snmp-5.3.0.1-smux-trap.diff net-snmp-5.3.0.1.tar.bz2 net-snmp-5.3.0.1_tcpwrapper_log_severity.patch net-snmp-5.3.0.1_testsuite_no_smux.patch net-snmp-5.3.0.1_tunnel_compilation.patch net-snmp-5.3_perl_agent.xs-pointersize.patch net-snmp-5.3_perl-printf.patch net-snmp-5.4_default_store_return_value.patch oid-names2_5.3.patch - added net-snmp-5.4_net-snmp-config_headercheck.patch: warn if net-snmp-config is used but development files are missing. - updated net-snmp-5.2.1-autoconf.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc1-autoconf.diff - updated net-snmp-5.2.1-versinfo.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc2-versinfo.diff - added net-snmp-5.4.rc2_perl_SNMP_size_t.patch: dont use int if you want size_t. fixes failures in the perl test suite. - added net-snmp-5.4_default_store_return_value.patch: backport my patch from 5.4 so we can get rid of the build errors. the patch removes/disables dead code. - added net-snmp-5.3.0.1_perl_ld_run_path.patch: the old perl replacement line broke linking of the SNMP libraries into the perl modules. the patch sets the LD_RUN_PATH for the build process to LIBDIR. (#180888) - added net-snmp-5.3.0.1_sighup_vacm.patch: The snmp agent was broken on SIGHUP. It lost all its MIB informations. (upstream bug: #1473289) - added net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch: The snmpd used a deprecated sysctl to get the retransmit time from the kernel. We didnt use this module but the mib library triggered the sysctl. The patch uses retrans_time_ms when available and corrects the correction factor for the old sysctl. (bug: #170140, upstream: #1437287) - reenabled the lmsensors support. was disabled for testing and never reenabled. - net-snmp-5.3.0.1_missing_ifNumber.patch: The 5.3 agent on Linux systems did not implement the 'ifNumber' MIB object. (#159501) - logrotate does not like if the postrotate script returns with a non zero returncode. - add missing "-e" in echo line - dont call "/etc/init.d/snmpd restart". this could start the daemon unconditionally (too large log file). switched to "/etc/init.d/snmpd try-restart" - run logrotate on startup if the logfile is too large. (#131072) - fix compilation with ethtool support. (#155709) - added option to ignore accepted connections (#86634) net-snmp-5.3.0.1_tcpwrapper_log_severity.patch new sysconfig option: SNMPD_LOG_SUCCESSFUL_CONNECTIONS - pass the correct path to configure to set the desired log file - make smux listen to localhost by default. (#116742) - remove confpath patch. (#147808,#159768) - updated and reenabled the audit patch - ported sysconfig options from sles9 SNMPD_LOGLEVEL -> SPECIFY the log level for the snmpd SNMPD_USE_SMUX -> disable SMUX socket - disable embedded perl for now. - added net-snmp-5.3.0.1_agentx_socket_path_doc.patch: fixes: net-snmp snmpd.conf(5) manpage gives wrong default for AgentXSocket (#129437) - ported fix for bug #129923 from sles9 - suppress the error message in the ucd-snmp upgrade script - we move the configs into /etc/snmp [#77935] - removed debugging packages from the build requires. - added net-snmp-5.3.0.1-smux-trap.diff dont loose the value of string variables via smux traps [#150091] - added net-snmp-5.3.0.1_disman_mib_crash.patch o fixes a crash in the disman mib loading - net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch o dont crash while registering mibs - net-snmp-5.3_perl_agent.xs-pointersize.patch o dont use int if you mean intptr_t(IV) - net-snmp-5.3_perl-printf.patch o unused format specifier in printf - net-snmp-5.3_vendorperl.patch o do make install_vendor - removed net-snmp-5.2.1-cmdline.diff better solution from upstream - converted neededforbuild to BuildRequires - update to version 5.3.0.1 - removed patches that got applied upstream or superseeded by upstream fixes: net-snmp-5.2.1-uptime.diff net-snmp-5.2.1-typeclash.diff net-snmp-5.2.1-gcc.diff net-snmp-5.2.1-dlopen-conf.diff net-snmp-5.2.1-enomedium.diff net-snmp-5.2.1-mktemp.diff net-snmp-5.2.1-close-all-fds.diff net-snmp-5.2.1-more-cpus.diff net-snmp-5.2.1-nowraplibs.patch net-snmp-5.2.1.set-var-value.patch - added 4 new patches: net-snmp-5.3_perl_agent.xs-pointersize.patch - fixes some casts of pointers to ints -> segfaults in the test suite net-snmp-5.3_perl-printf.patch - fixes a printf warning net-snmp-5.3_vendorperl.patch - call perl modules install with install_vendor net-snmp-5.1.1-pie.patch - build snmpd and snmptrapd with pie - no point in running the test suite in QEMU - Added rpm-devel to the requires of the -devel package - added disman/event-mib to the mib list (Bug #91039) - replaced patch25 (asn1 handling fix) with patch from the upstream. (Bug #73804) - build snmpd and snmptrap with with -fpie/-pie - Fixed test suite for boxes with empty arp tables. - Include the right header for compat mode (Bug #64074) - Fix length for type ASN_UNSIGNED (Bug #73804) - Get rid of WRAPLIBS in net-snmp-config (Bug #75879) - Fix ac quotation - moved tkmib and mib2c* to perl subpackage, since they require it. #63992 - Multiple non Intel CPU detection added. - Upgraded to 5.1.2 release. (lots of bugfixes as usual) - overflow counter32 and gauge32 on 64bit systems correctly. #50384 - close all non standard filedescriptors on start. - Upgraded to 5.2 final. - Upgraded to 5.2.1rc2. Dropped merged patches, rediffed old ones. - fixing pre-requires - Upgrade to 5.1.2 final. - Upgraded to upstream 5.1.2.rc2. - Upgraded to 5.1.2.rc1. - Dropped some old patches / parts of old patches. - Fixed problem on little endian 64bit machines. - removed double free on failure in netsnmp_register_old_api(). (bug #42580) - do not specify -c /etc/snmpd.conf (since it is already built in). (bug #41706) - require openssl-devel in -devel package. - replaced undefined C construct (x[n] = y[n++]) which caused the testsuite to fail on i386. - sleep .3 s before starting agents (bug #42588) - Fixed 2 places of file descriptor leakage which lead to segfaults during readdir/fgets. #33958 - remove the #define PACKAGE_ from the included autoconf generated config.h file. #36355 - use stop_on_removal and restart_on_update macros (#36306) - package /var/log/net-snmp as %ghost (#36435) - use mktemp in fixproc (#36103) - avoid segfault in version-info (limit to 300 bytes) - open devices with NONBLOCK, don't wait for cdrom - avoid segfault in proc-cmdline output - previous 64-bit fix went just one bit too far, fixed - added smux mib (for quagga) - fix dlopen detection in configure - added requires for perl-TermReadKey - try to fix at least some 64bit issues (eg. #33958) - update arguments in rc-script - Fix some 64bit critical compiler warnings - Fixed includes for build with evlog. - update to 5.1 - build perl module as perl-SNMP - enable ucd-snmp compatibility - update to 5.1.pre2 - revised audit patch - branched devel subpackage - added rpm support - created package and ported patches from ucd-snmp OBS-URL: https://build.opensuse.org/request/show/849908 OBS-URL: https://build.opensuse.org/package/show/network:utilities/net-snmp?expand=0&rev=27
2020-12-05 18:18:28 +01:00
%files %{python_files %{name}}
%doc README
Accepting request 849908 from home:bnavigator:branches:network:utilities - Fix the python subpackage generation gh#openSUSE/python-rpm-macros#79 - Support multiple python 3 flavors in the python subpackage gh#openSUSE/python-rpm-macros#66 - Change /etc/logrotate.d/net-snmp from init.d to systemd fix boo#1173487. - Add -fcommon in order to fix boo#1160404. - Add Lustre filesystem support (bsc#1140341). Add net-snmp-5.8-add-lustre-fs-support.patch - Remove FIRST_ARG usage from spec file (bsc#1126426). - Update to net-snmp-5.8. Fixes included: * Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) * Fix agentx freezing on timeout (bsc#1027353) * swintst_rpm: Protect against unspecified Group name (bsc#1102775) - Add tsm and tlstm MIBs and the USM security module. (bsc#1081164) - Rename and refactor patches and remove those that are already included inside the new version. Added: * net-snmp-5.8-socket-path.patch * net-snmp-5.8-testing-empty-arptable.patch * net-snmp-5.8-pie.patch * net-snmp-5.8-net-snmp-config-headercheck.patch * net-snmp-5.8-perl-tk-warning.patch * net-snmp-5.8-velocity-mib.patch * net-snmp-5.8-netgroups.patch * net-snmp-5.8-snmpstatus-suppress-output.patch * net-snmp-5.8-fix-Makefile.PL.patch * net-snmp-5.8-modern-rpm-api.patch * net-snmp-5.8-fix-python3.patch Removed: * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-velocity-mib.patch * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-netgroups.patch * net-snmp-5.7.3-snmpstatus-suppress-output.patch * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch * net-snmp-5.7.3-Remove-U64-typedef.patch * net-snmp-5.7.3-Fix-Makefile.PL.patch * net-snmp-5.7.3-build-with-openssl-1.1.patch * net-snmp-5.7.3-modern-rpm-api.patch * net-snmp-python3.patch * net-snmp-5.7.2-systemd.patch * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065) Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch - Create /var/agentx via systemd tmpfiles in case of rollback, snapshots and transactional updates [bsc#1098032] - Fix permissions on unit files wrt bsc#1087977 - Use %license (boo#1082318) - Remove executable flags from systemd service files (bsc#1089295). - Fix RPM group for shlib subpackage. - Properly conditionalize the py2 build - Add patch from Fedora to support natively systemd: * net-snmp-5.7.2-systemd.patch - Drop the check phase as whole 90% of the tests fail it makes more sense to run them somewhere localy - Take systemd service files from fedora to replace sysV scripts - Also convert the sysconfig files to match fedora ones, they get bit more terse but it works seamlessly with systemd - Format with spec-cleaner - Drop sle11 support as it fails to build anyway for ages - Rename python packages to be python-%{name} with obsoletes * Use new singlespec macros * Add patch converting the py files to python3/2 compat mode net-snmp-python3.patch - Run full autoreconf instead of partial - Build with threads by building few targets first - Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (>= 4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being removed. - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Fix build with OpenSSL 1.1 (bsc#1042664): + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated squash-patch from the following upstream commits: bbed6b86e70b5a3c54f14992696f2308a8d79511 14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8 9641b472ef01208f92631016e91b0a4a518163f0 e4c6937483d4a680570cec05388d2e4b291868a6 b906c60c8a436d7360267a6d242526b33a9aaac8 - Fix build with perl 5.24.0: + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system recursiely loading Makefile.Pl and destroying its internas. See https://rt.perl.org/Public/Bug/Display.html?id=125907 + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef conflicts with a typedef in a Perl header file. Hence remove the U64 typedef from the Net-SNMP header files. Backported from upstream commit 477b4307ef1. - make snmpd and snmptrapd log message destination configurable for syslog or a dedicated log file. (bsc#695677) - make snmpd and snmptrapd listening address(es) configurable via the sysconfig file. - fix build with GNU grep 2.23, use grep -a to force text matching - reenabled md5 and des, as some tools build against it and need the methods :( - added net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch: to fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Disable MD5 authentication method, disable DES support (if something breaks, tell me) - Request pkgconfig(libssl) instead of openssl-devel to support using LibreSSL as well. - update to upstream version 5.7.3 - remove patch that is now present in the upstream release: * net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch - rename patches to new version number 5.7.3: delete: * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.2-net-snmp-config-headercheck.patch * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-velocity-mib.patch add: * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch * net-snmp-5.7.3-net-snmp-config-headercheck.patch * net-snmp-5.7.3-perl-tk-warning.patch * net-snmp-5.7.3-pie.patch * net-snmp-5.7.3-socket-path.patch * net-snmp-5.7.3-testing-empty-arptable.patch * net-snmp-5.7.3-velocity-mib.patch - add build requirement 'procps' to fix a net-snmp-config error (bsc#935863) - enable DTLS and TLS support (FATE#318789) new binary 'snmptls' was added - add support for hostname netgroups (FATE#316305) '@hostgroup' can be specified for multiple hosts * net-snmp-5.7.3-netgroups.patch - suppress network statistics output in snmpstatus (FATE#316289) '-Sn' don't print any info about the network '-Si' don't print the operational status of network interfaces * net-snmp-5.7.3-snmpstatus-suppress-output.patch - also stop snmptrapd on removal - update to upstream version 5.7.3.pre5 - remove patches that are now present in the upstream release: * net-snmp-5.7.2-build-fix-for-strlcat.patch * net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch * net-snmp-5.7.2-fix-perl-trap-handler.patch - net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: refresh and add patch header - added net-snmp-5.7.2-fix-snmptrapd-remote-denial-of-service.patch: fix remote denial of service problem inside snmptrapd when started with the "-OQ" option (CVE-2014-3565)(bnc#894361) - added net-snmp-5.7.2-fix-perl-trap-handler.patch: fix potential remote denial of service problem inside the snmptrapd Perl trap handler (CVE-2014-2285)(bnc#866942) - merge some old fixes from SLE 11: * init script should provide snmpd. (bnc#466805) * stop all snmp agents when stopping the daemon. (bnc#473328) - recompress .tar.gz - it has trailing garbage, hope we can readd source url on next update - update to upstream version 5.7.2.1, fixing one security issue: * A denial of service attack vector was discovered on the Linux implementation of the ICMP-MIB. (CVE-2014-2284, bnc#866942) - net-snmp-5.7.2-fix-mib-representation-of-timeout-values.patch: fix mib representation of timeout values (bnc#833153) - use _rundir macro - remove old workaround for ppc/ppc64 migrations which is no longer needed (bnc#437293) - add support for python bindings - improve snmptrapd init script (avoid to overwrite the logfile on restart) - Disable parallelism during build. The dependencies between the Perl module and libnetsnmp are not defined correctly and might result in broken linkage (bnc#819497, bnc#818907) - Add Source URL, see https://en.opensuse.org/SourceUrls - net-snmp-5.7.2-build-fix-for-strlcat.patch: fix exported strlcat() prototype that could conflict with other packages (bnc#793548) - update to version 5.7.2: several bug fixes in the agent, client utilities and libraries. The CHANGES file shipped with the package contains a comprehensive list of fixes and improvements - rebase patches to apply cleanly: * net-snmp-5.7.2-perl-tk-warning.patch * net-snmp-5.7.2-socket-path.patch * net-snmp-5.7.2-testing-empty-arptable.patch * net-snmp-5.7.2-pie.patch * net-snmp-5.7.2-velocity-mib.patch * net-snmp-5.7.2-fix-snmpd-crashing-when-an-agentx-disconnects.patch - remove patches that are now present in the upstream release: * net-snmp-5.7.0-recognize-reiserfs.patch * net-snmp-5.7.1-snmplib-zero-timeout.patch * net-snmp-5.7.1-old-api-double-free.patch * net-snmp-5.7.1-use-pclose-to-close-pipes.patch * net-snmp-5.7.1-fix-handling-of-large-filesystems.patch * net-snmp-5.7.1-snmplib-default-retries.patch * net-snmp-5.7.1-fsys-memory-leak.patch * net-snmp-5.7.1-adjust-copyright-in-agent-txt-file.patch * net-snmp-5.7.1-recognize-ocfs2.patch * net-snmp-5.7.1-properly-clean-up-old-requests-in-subagents.patch * net-snmp-5.7.1-reduce-code-duplication-in-agentx.patch * net-snmp-5.7.1-log-agentx-disconnections.patch * net-snmp-5.7.1-more-robust-handling-of-agentx-errors.patch * net-snmp-5.7.1-report-problems-with-setundo-processing.patch * net-snmp-5.7.1-fix-array-index-error.patch - Remove redundant sections from specfile - Avoid shipping .la files - fix array index error that could lead to a crash (CVE-2012-2141) (bnc#759352) - fix agent crash when reloading a subagent (AgentX) during a query (bnc#670789) - add OCFS2 to the list of known file systems - update copyright notice of AGENT.txt allowing us to redistribute the file in our package (from Dave Shield) (bnc#750704) - fix license to be in spdx.org format - logrotate: use "reload" instead of "try-restart" to avoid an unnecessary stop/start cycle in the agent (bnc#707636) - net-snmp-5.7.1-fsys-memory-leak.patch: fix a memory leak in agent/mibgroup/hardware/fsys (bnc#725766) - net-snmp-5.7.1-snmplib-default-retries.patch: change default number of retries back from 0 to 5 (bnc#725766) - net-snmp-5.7.1-fix-handling-of-large-filesystems.patch: fix bug in handling large (>8TB) filesystems (bnc#725766) - net-snmp-5.7.1-use-pclose-to-close-pipes.patch: use pclose() instead of fclose() to close a pipe (bnc#725766) - net-snmp-5.7.1-old-api-double-free.patch: agent: avoid double free when netsnmp_register_old_api() fails (bnc#725766) - net-snmp-5.7.1-snmplib-zero-timeout.patch: snmplib: avoid waiting indefinitely if a session has timeout zero (bnc#725766) - update to version 5.7.1: minor release including some bug fixes - enable net-snmp-devel on all baselib architectures - make sure all delegated requests are removed before closing an AgentX session (bnc#670789) - update to version 5.7.1.rc1 but keep package version as 5.7.1 to avoid update problems when the final version is released - small fixes to snmpd and snmptrapd init scripts: - if $SNMPD_LOGLEVEL is not defined, use LOG_NOTICE instead of LOG_DEBUG - improve messages printed and service description - write snmptrapd logs to /var/log/net-snmpd.log - update README.SUSE to reflect some recent changes and drop a bit of outdated information - update baselibs to reflect new library version - spec file cleanup: rename some source files for consistency - add ReiserFS to the list of known file systems (bnc#715199) - install snmptrapd init script by default (bnc#712175) - fix logging option in snmptrapd init script (bnc#712174) - update upstream patches from branch V5-7-patches to 20110714 - update to version 5.7: new features and lots of bug fixes - remove patches that are no longer needed: net-snmp-5.6.0-enable-hrh-filesys.patch net-snmp-5.6.1-recognize-jfs-and-xfs.patch net-snmp-5.6.1-rpm490.patch - refresh and rename patches to apply cleanly after update: net-snmp-5.7.0-pie.patch net-snmp-5.7.0-velocity-mib.patch - switch from rpmdb to rpmts to support rpm-4.9.0 - update upstream patches from branch V5-6-patches to 20110512 - add JFS and XFS to the list of known file systems (bnc#687327) - update upstream patches from branch V5-6-patches to 20110328 - fix libsnmp version in baselibs.conf - update to version 5.6.1: new features and lots of bug fixes - update upstream patches from branch V5-6-patches to 20110104 - remove patches that are no longer needed: net-snmp-5.6.0-ethtool-speed.patch - remove /var/adm/perl-modules/net-snmp from the Perl module - update upstream patches from branch V5-6-patches to 20101129 - spec file cleanup: upstream uses -fno-strict-aliasing by default now - remove patches that are no longer needed: net-snmp-5.5.0-rpmdb-h-detect.patch net-snmp-5.6.0-vendorperl.patch - if-mib: add support for more speeds with ethtool (bnc#650558) - update upstream patches from branch V5-6-patches to 20101101, fixing a segmentation fault on shutdown (bnc#650282) - enable new implementation of hrStorage and hrFilesys to fix persistent indexes in FS and Storage tables (bnc#648364) - update upstream patches from branch V5-6-patches to 20101021 - update to version 5.6: new features and lots of bug fixes - refresh and rename patches to apply cleanly after update: net-snmp-5.6.0-pie.patch net-snmp-5.6.0-vendorperl.patch net-snmp-5.6.0-net-snmp-config-headercheck.patch - update upstream patches from branch V5-5-patches to 20100803 - change default log level from DEBUG to NOTICE (bnc#623497) - spec file cleanup: remove old backward compatibility scripts - update upstream patches from branch V5-5-patches to 20100602: fixed potential buffer overflow in parsing OIDs in config files - update upstream patches from branch V5-5-patches to 20100531 - add net-snmp-5.5.0-rpmdb-h-detect.patch: workaround for autoconf failing to detect rpm/rpmdb.h - remove patches that are no longer needed: net-snmp-5.5.0-use-lmsensors-v3.patch - create /var/run/agentx during startup to support systems that mount /var/run as tmpfs - update libsnmp package name to reflect the library version we are currently shipping - remove patches that are obsolete: net-snmp-5.4.rc2-versinfo.diff net-snmp-5.4.2_snmpconf-selinux.patch - refresh all patches to apply as "-p1" - spec file cleanup: remove conditionals to build on unsupported versions of the distribution - update upstream patches from branch V5-5-patches to 20100428 - add net-snmp-5.5.0_upstream-20100405.patch: merge all patches committed to upstream branch V5-5-patches - remove patches that are now upstream: net-snmp-5.4.2_audit.patch net-snmp-5.5.0_autoconf.patch net-snmp-5.4.2_overflow.patch net-snmp-5.4.2.1-rpm4.7.patch net-snmp-5.5.0_gcc45.patch - Fix strncat properly (from Andreas Jaeger) - Fix code errors found by gcc 4.5 - build for libsensors4 instead of libsensors3 - remove sparcv9-specific baselib exceptions (not needed) - remove net-snmp-5.4.1.2-rmon-mib-revised_3.patch from sources (upstream since 5.5) - refresh net-snmp-5.5.0_autoconf.patch - spec file cleanup: update package description - update to version 5.5: new features and lots of bug fixes, including: - fix hrSWRunPath for processes other than init (bnc#486270) - remove patches that are now upstream: Add-Default-Router-Table-support.patch Add-ICMP-Statistics-Tables-support.patch Add-IPv6-Scope-Zone-Index.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Prefix-Table.patch Fix-for-Internet-Address-Table.patch Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Improve-IP-Statistics-tables.patch net-snmp-5.3.0.1_trap-agent-addr_v2.patch net-snmp-5.4.1.2-etherlike-mib-revised_4.patch net-snmp-5.4.x_embedded_perl_error_message.patch - add baselibs.conf as a source - add baselib defs for SPARC - Fix build with rpm 4.7 (net-snmp-5.4.2.1-rpm4.7.patch) - make patch0 usage consistent - updated patches from Dell: Those patches incorporate the latest fixes for remarks from the upstream review old: net-snmp-5.4.1.2-rmon-mib-revised.patch new: net-snmp-5.4.1.2-rmon-mib-revised_3.patch old: net-snmp-5.4.1.2-etherlike-mib-revised_2.patch new: net-snmp-5.4.1.2-etherlike-mib-revised_4.patch - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) - fix the snmptrapd init script: 1. make sure the config isnt loaded twice. 2. do not truncate the net-snmp.log 3. use SNMPD_LOGLEVEL aswell. 4. write a pid - update snmptrapd section in README.SuSE - whitespace cleanup in both init scripts - update patches from Dell: Upstream asked to reduce the logging in the mib module. old name net-snmp-5.4.1.2-etherlike-mib-revised_1.patch new name net-snmp-5.4.1.2-etherlike-mib-revised_2.patch - Remove the recommends on perl-Tk again. We rely on the fixed warning in the perl_tk_warnings.patch. (bnc#443047) - SLE-11 uses PPC64 instead of PPC, adapt baselibs.conf - added net-snmp-5.4.x_embedded_perl_error_message.patch: fix typo in error message (bnc#439857) - update to 5.4.2.1: (bnc#440950) (CVE-2008-4309) fix crash in getbulk handling code - obsolete old -XXbit packages (bnc#437293) - added net-snmp-5.4.2_velocity-mib.patch (FATE#303556) - refreshed patches to apply cleanly: old: net-snmp-5.1.2-snmpconf-selinux.patch new: net-snmp-5.4.2_snmpconf-selinux.patch old: net-snmp-5.2.1-overflow.diff new: net-snmp-5.4.2_overflow.patch old: net-snmp-5.2.1.testing.empty_arptable.patch new: net-snmp-5.4.2_testing.empty_arptable.patch old: net-snmp-5.3.0.1-audit.diff new: nmp-5.4.2_audit.patch old: net-snmp-5.3_vendorperl.patch new: net-snmp-5.4.2_vendorperl.patch old: net-snmp-5.4.1-autoconf.diff new: net-snmp-5.4.2_autoconf.patch old: net-snmp-5.4.1_perl_tk_warning.patch new: net-snmp-5.4.2_perl_tk_warning.patch old: net-snmp-5.4_net-snmp-config_headercheck.patch new: net-snmp-5.4.2_net-snmp-config_headercheck.patch - more IPv6 support from IBM (mainline backports) (bnc#437208) Fix-for-tcpConnnectionTable-tcpListenerTable-udpEn.patch Fix-for-IPv6-Interface-Table.patch Fix-for-Internet-Address-Table.patch Add-ICMP-Statistics-Tables-support.patch Add-Default-Router-Table-support.patch Add-IPv6-support-on-Internet-Address-Translation-Tab.patch Fix-for-Internet-Address-Prefix-Table.patch Add-IPv6-Scope-Zone-Index.patch Improve-IP-Statistics-tables.patch - remove lzma-alpha-devel. rpm-devel has to require it if it is really needed - updated patches from Dell: net-snmp-5.4.1.2-etherlike-mib-revised_1.patch net-snmp-5.4.1.2-rmon-mib-revised.patch Those 2 patches obsolete the previous 3 patches. - fix typo in the init script which breaks loading of agents (bnc#415127) - also restart snmptrapd after logrotate (bnc#378069) - add patches from Dell: (Fate#304310) net-snmp-5.4.1.2-etherlike-mib-revised.patch net-snmp-5.4.1.2-rmon-mib.patch net-snmp-5.4.2_fix_dell_patches.patch - update to version 5.4.2 - [PATCH 1921861]: Avoid endless loop after truncating 64bit int - Better handling of CONTAINER_INSERT failures with multiple indices - [PATCH 2023633]: add SCTP-MIB implementation (Linux only) - suppress annoying "registration != duplicate" warning for root oids - Update to libtool 1.5.26 - add net-snmp-5.4.1_perl_tk_warning.patch (bnc#392695) correctly recommend installing the perl-Tk package instead of referring to cpan. - fix Required-Stop in the init scripts - cleanup the spec file: - moved files from the mibs package to the packages where they really belong (snmpconf-data, mib2c) - move mib2c from the perl package to the devel package - fixed wrong SELinux context (selinux.patch) [Fate#303662] - fix init scripts - use %fillup_only as we dont launch the daemon per default - added baselibs.conf file to build xxbit packages for multilib support - added lzma-alpha-devel to buildreq - libsensors is in a separate package now. - update to 5.4.1 many small fixes. the highlights: - link only needed libraries - memleaks fixed - python bindings (not yet packaged) - rediffed net-snmp-5.4.rc1-autoconf.diff new name net-snmp-5.4.1-autoconf.diff - no longer build against lm_sensors on s390 - split out new packages: libsnmp15, snmp-mibs - update to 5.4.rc2: tons of bugfixes, and new features. just to name a few: - enabled embedded perl - new MIB table to manage net-snmp access control extensions - hal to abstract os specific aspects of the systems - tree matching support for snmptrapd - reworked transport creation in snmplib - using the incoming ip for outgoing packets if possible. - ipv6 aware tcp/udp mibs - removed patches: (all of them are either upstream or obsolete) net-snmp-5.2.1-acinclude.diff net-snmp-5.2.1-acquotation.patch net-snmp-5.2.1-compat.patch net-snmp-5.2.1-localperl.diff net-snmp-5.2.1-perl.diff net-snmp-5.3.0.1-64bit.diff net-snmp-5.3.0.1_agentx_socket_path_doc.patch net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch net-snmp-5.3.0.1_disman_mib_crash.patch net-snmp-5.3.0.1_ethtool.patch net-snmp-5.3.0.1_linux_types_header.patch net-snmp-5.3.0.1_missing_ifNumber.patch net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch net-snmp-5.3.0.1_perl_ld_run_path.patch net-snmp-5.3.0.1_sighup_vacm.patch net-snmp-5.3.0.1-smux-trap.diff net-snmp-5.3.0.1.tar.bz2 net-snmp-5.3.0.1_tcpwrapper_log_severity.patch net-snmp-5.3.0.1_testsuite_no_smux.patch net-snmp-5.3.0.1_tunnel_compilation.patch net-snmp-5.3_perl_agent.xs-pointersize.patch net-snmp-5.3_perl-printf.patch net-snmp-5.4_default_store_return_value.patch oid-names2_5.3.patch - added net-snmp-5.4_net-snmp-config_headercheck.patch: warn if net-snmp-config is used but development files are missing. - updated net-snmp-5.2.1-autoconf.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc1-autoconf.diff - updated net-snmp-5.2.1-versinfo.diff to apply cleanly against 5.4 new name: net-snmp-5.4.rc2-versinfo.diff - added net-snmp-5.4.rc2_perl_SNMP_size_t.patch: dont use int if you want size_t. fixes failures in the perl test suite. - added net-snmp-5.4_default_store_return_value.patch: backport my patch from 5.4 so we can get rid of the build errors. the patch removes/disables dead code. - added net-snmp-5.3.0.1_perl_ld_run_path.patch: the old perl replacement line broke linking of the SNMP libraries into the perl modules. the patch sets the LD_RUN_PATH for the build process to LIBDIR. (#180888) - added net-snmp-5.3.0.1_sighup_vacm.patch: The snmp agent was broken on SIGHUP. It lost all its MIB informations. (upstream bug: #1473289) - added net-snmp-5.3.0.1_deprecated_sysctl_retrans_time.patch: The snmpd used a deprecated sysctl to get the retransmit time from the kernel. We didnt use this module but the mib library triggered the sysctl. The patch uses retrans_time_ms when available and corrects the correction factor for the old sysctl. (bug: #170140, upstream: #1437287) - reenabled the lmsensors support. was disabled for testing and never reenabled. - net-snmp-5.3.0.1_missing_ifNumber.patch: The 5.3 agent on Linux systems did not implement the 'ifNumber' MIB object. (#159501) - logrotate does not like if the postrotate script returns with a non zero returncode. - add missing "-e" in echo line - dont call "/etc/init.d/snmpd restart". this could start the daemon unconditionally (too large log file). switched to "/etc/init.d/snmpd try-restart" - run logrotate on startup if the logfile is too large. (#131072) - fix compilation with ethtool support. (#155709) - added option to ignore accepted connections (#86634) net-snmp-5.3.0.1_tcpwrapper_log_severity.patch new sysconfig option: SNMPD_LOG_SUCCESSFUL_CONNECTIONS - pass the correct path to configure to set the desired log file - make smux listen to localhost by default. (#116742) - remove confpath patch. (#147808,#159768) - updated and reenabled the audit patch - ported sysconfig options from sles9 SNMPD_LOGLEVEL -> SPECIFY the log level for the snmpd SNMPD_USE_SMUX -> disable SMUX socket - disable embedded perl for now. - added net-snmp-5.3.0.1_agentx_socket_path_doc.patch: fixes: net-snmp snmpd.conf(5) manpage gives wrong default for AgentXSocket (#129437) - ported fix for bug #129923 from sles9 - suppress the error message in the ucd-snmp upgrade script - we move the configs into /etc/snmp [#77935] - removed debugging packages from the build requires. - added net-snmp-5.3.0.1-smux-trap.diff dont loose the value of string variables via smux traps [#150091] - added net-snmp-5.3.0.1_disman_mib_crash.patch o fixes a crash in the disman mib loading - net-snmp-5.3.0.1_netsnmp_register_mib_crash.patch o dont crash while registering mibs - net-snmp-5.3_perl_agent.xs-pointersize.patch o dont use int if you mean intptr_t(IV) - net-snmp-5.3_perl-printf.patch o unused format specifier in printf - net-snmp-5.3_vendorperl.patch o do make install_vendor - removed net-snmp-5.2.1-cmdline.diff better solution from upstream - converted neededforbuild to BuildRequires - update to version 5.3.0.1 - removed patches that got applied upstream or superseeded by upstream fixes: net-snmp-5.2.1-uptime.diff net-snmp-5.2.1-typeclash.diff net-snmp-5.2.1-gcc.diff net-snmp-5.2.1-dlopen-conf.diff net-snmp-5.2.1-enomedium.diff net-snmp-5.2.1-mktemp.diff net-snmp-5.2.1-close-all-fds.diff net-snmp-5.2.1-more-cpus.diff net-snmp-5.2.1-nowraplibs.patch net-snmp-5.2.1.set-var-value.patch - added 4 new patches: net-snmp-5.3_perl_agent.xs-pointersize.patch - fixes some casts of pointers to ints -> segfaults in the test suite net-snmp-5.3_perl-printf.patch - fixes a printf warning net-snmp-5.3_vendorperl.patch - call perl modules install with install_vendor net-snmp-5.1.1-pie.patch - build snmpd and snmptrapd with pie - no point in running the test suite in QEMU - Added rpm-devel to the requires of the -devel package - added disman/event-mib to the mib list (Bug #91039) - replaced patch25 (asn1 handling fix) with patch from the upstream. (Bug #73804) - build snmpd and snmptrap with with -fpie/-pie - Fixed test suite for boxes with empty arp tables. - Include the right header for compat mode (Bug #64074) - Fix length for type ASN_UNSIGNED (Bug #73804) - Get rid of WRAPLIBS in net-snmp-config (Bug #75879) - Fix ac quotation - moved tkmib and mib2c* to perl subpackage, since they require it. #63992 - Multiple non Intel CPU detection added. - Upgraded to 5.1.2 release. (lots of bugfixes as usual) - overflow counter32 and gauge32 on 64bit systems correctly. #50384 - close all non standard filedescriptors on start. - Upgraded to 5.2 final. - Upgraded to 5.2.1rc2. Dropped merged patches, rediffed old ones. - fixing pre-requires - Upgrade to 5.1.2 final. - Upgraded to upstream 5.1.2.rc2. - Upgraded to 5.1.2.rc1. - Dropped some old patches / parts of old patches. - Fixed problem on little endian 64bit machines. - removed double free on failure in netsnmp_register_old_api(). (bug #42580) - do not specify -c /etc/snmpd.conf (since it is already built in). (bug #41706) - require openssl-devel in -devel package. - replaced undefined C construct (x[n] = y[n++]) which caused the testsuite to fail on i386. - sleep .3 s before starting agents (bug #42588) - Fixed 2 places of file descriptor leakage which lead to segfaults during readdir/fgets. #33958 - remove the #define PACKAGE_ from the included autoconf generated config.h file. #36355 - use stop_on_removal and restart_on_update macros (#36306) - package /var/log/net-snmp as %ghost (#36435) - use mktemp in fixproc (#36103) - avoid segfault in version-info (limit to 300 bytes) - open devices with NONBLOCK, don't wait for cdrom - avoid segfault in proc-cmdline output - previous 64-bit fix went just one bit too far, fixed - added smux mib (for quagga) - fix dlopen detection in configure - added requires for perl-TermReadKey - try to fix at least some 64bit issues (eg. #33958) - update arguments in rc-script - Fix some 64bit critical compiler warnings - Fixed includes for build with evlog. - update to 5.1 - build perl module as perl-SNMP - enable ucd-snmp compatibility - update to 5.1.pre2 - revised audit patch - branched devel subpackage - added rpm support - created package and ported patches from ucd-snmp OBS-URL: https://build.opensuse.org/request/show/849908 OBS-URL: https://build.opensuse.org/package/show/network:utilities/net-snmp?expand=0&rev=27
2020-12-05 18:18:28 +01:00
%{python_sitearch}/*
%changelog