[ubuntu/artful-proposed] net-snmp 5.7.3+dfsg-1.7ubuntu1 (Accepted)

[Andreas Hasenack]

net-snmp (5.7.3+dfsg-1.7ubuntu1) artful; urgency=medium

  * Merge with Debian unstable (LP: #1712569). Remaining changes:
    - Add apport hook.
      + d/control: add dh-apport to Build-Depends
      + d/rules: install the apport hook via debhelper
      + d/source.apport: apport hook
    - Avoid installing links in rc[06].d.
    - d/p/my_load_defaults: use my_load_defaults instead of the
      libmysqlclient-internal load_defaults (LP #1565003). Thanks to Lars
      Tangvald.
  * Drop:
    - SECURITY UPDATE: denial of service and possible code execution via
      incompletely parsed varBind variables
      + debian/patches/CVE-2015-5621.patch: don't return incorrectly parsed
        varbinds in snmplib/snmp_api.c.
      + CVE-2015-5621
      [Added by Debian as 0025-Bug-788964-net-snmp-snmp_pdu_parse-DoS.patch
      in 5.7.3+dfsg-1.1]
    - debian/snmp.preinst:
      It turns out that the original motivation why killall was added is gone.
      So we can just remove the killall introduced by Ubuntu LP #573391
      (Closes: #781257, LP #1245604)
      [Fixed in Debian 5.7.3+dfsg-1.1]
    - Fix "FTBFS with Perl 5.24: error: conflicting types for 'U64'":
      add patch from upstream git which removes the U64 typedef from the
      Net-SNMP header files.
      Thanks to Niky Tyni for extracting the patch.
      (Closes: #825014)
      [Fixed in Debian 5.7.3+dfsg-1.5]
    - Additionally add another patch from upstream git which fixes
      perl/*/Makefile.PL to fix build failures with Perl 5.24.
      Cf. https://sourceforge.net/p/net-snmp/bugs/2712/
      [Fixed in Debian 5.7.3+dfsg-1.5]

Date: Wed, 23 Aug 2017 10:29:35 -0300
Changed-By: Andreas Hasenack <andreas at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Nish Aravamudan <nish.aravamudan at canonical.com>
https://launchpad.net/ubuntu/+source/net-snmp/5.7.3+dfsg-1.7ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 23 Aug 2017 10:29:35 -0300
Source: net-snmp
Binary: snmpd snmptrapd snmp libsnmp-base libsnmp30 libsnmp30-dbg libsnmp-dev libsnmp-perl python-netsnmp tkmib
Architecture: source
Version: 5.7.3+dfsg-1.7ubuntu1
Distribution: artful
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andreas Hasenack <andreas at canonical.com>
Description:
 libsnmp-base - SNMP configuration script, MIBs and documentation
 libsnmp-dev - SNMP (Simple Network Management Protocol) development files
 libsnmp-perl - SNMP (Simple Network Management Protocol) Perl5 support
 libsnmp30  - SNMP (Simple Network Management Protocol) library
 libsnmp30-dbg - SNMP (Simple Network Management Protocol) library debug
 python-netsnmp - SNMP (Simple Network Management Protocol) Python support
 snmp       - SNMP (Simple Network Management Protocol) applications
 snmpd      - SNMP (Simple Network Management Protocol) agents
 snmptrapd  - Net-SNMP notification receiver
 tkmib      - SNMP (Simple Network Management Protocol) MIB browser
Closes: 781257 825014
Launchpad-Bugs-Fixed: 1712569
Changes:
 net-snmp (5.7.3+dfsg-1.7ubuntu1) artful; urgency=medium
 .
   * Merge with Debian unstable (LP: #1712569). Remaining changes:
     - Add apport hook.
       + d/control: add dh-apport to Build-Depends
       + d/rules: install the apport hook via debhelper
       + d/source.apport: apport hook
     - Avoid installing links in rc[06].d.
     - d/p/my_load_defaults: use my_load_defaults instead of the
       libmysqlclient-internal load_defaults (LP #1565003). Thanks to Lars
       Tangvald.
   * Drop:
     - SECURITY UPDATE: denial of service and possible code execution via
       incompletely parsed varBind variables
       + debian/patches/CVE-2015-5621.patch: don't return incorrectly parsed
         varbinds in snmplib/snmp_api.c.
       + CVE-2015-5621
       [Added by Debian as 0025-Bug-788964-net-snmp-snmp_pdu_parse-DoS.patch
       in 5.7.3+dfsg-1.1]
     - debian/snmp.preinst:
       It turns out that the original motivation why killall was added is gone.
       So we can just remove the killall introduced by Ubuntu LP #573391
       (Closes: #781257, LP #1245604)
       [Fixed in Debian 5.7.3+dfsg-1.1]
     - Fix "FTBFS with Perl 5.24: error: conflicting types for 'U64'":
       add patch from upstream git which removes the U64 typedef from the
       Net-SNMP header files.
       Thanks to Niky Tyni for extracting the patch.
       (Closes: #825014)
       [Fixed in Debian 5.7.3+dfsg-1.5]
     - Additionally add another patch from upstream git which fixes
       perl/*/Makefile.PL to fix build failures with Perl 5.24.
       Cf. https://sourceforge.net/p/net-snmp/bugs/2712/
       [Fixed in Debian 5.7.3+dfsg-1.5]
Checksums-Sha1:
 bc96fe562fad1dfab0cd6f882cc2741b0afc554c 2914 net-snmp_5.7.3+dfsg-1.7ubuntu1.dsc
 ebbbc5e9fc5006edd3e62d595366497592d964a2 3371224 net-snmp_5.7.3+dfsg.orig.tar.xz
 afc00155a26290c0b09d37ce05b969f61de73134 79072 net-snmp_5.7.3+dfsg-1.7ubuntu1.debian.tar.xz
 78ce276c920d605fbfc82efcdd51ab07efd8e6fe 7092 net-snmp_5.7.3+dfsg-1.7ubuntu1_source.buildinfo
Checksums-Sha256:
 f023d7d5ac2f9c98221ebf510f6fef51de73b4c356b933f0c6f7c1b6b9c786bd 2914 net-snmp_5.7.3+dfsg-1.7ubuntu1.dsc
 073eb05b926a9d23a2eba3270c4e52dd94c0aa27e8b7cf7f1a4e59a4d3da3fb5 3371224 net-snmp_5.7.3+dfsg.orig.tar.xz
 59f3eccdf0034956e2ed19c6cba65a55248ba72951d4ff49a15c1e30b9bb734e 79072 net-snmp_5.7.3+dfsg-1.7ubuntu1.debian.tar.xz
 71fbca8b814cf4693e4e2175f731e4790590630b670c86e8fe868680b5ef58fd 7092 net-snmp_5.7.3+dfsg-1.7ubuntu1_source.buildinfo
Files:
 a84c9856f88e8f3d6c49341252fb1b47 2914 net optional net-snmp_5.7.3+dfsg-1.7ubuntu1.dsc
 6391ae27eb1ae34ff5530712bb1c4209 3371224 net optional net-snmp_5.7.3+dfsg.orig.tar.xz
 c492ae26cb8609019b43841d3691b667 79072 net optional net-snmp_5.7.3+dfsg-1.7ubuntu1.debian.tar.xz
 060bc17373d2f4635225e86c3ad4fdb5 7092 net optional net-snmp_5.7.3+dfsg-1.7ubuntu1_source.buildinfo
Original-Maintainer: Net-SNMP Packaging Team <pkg-net-snmp-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----

iQE7BAEBCAAlBQJZnfpvHhxuaXNoLmFyYXZhbXVkYW5AY2Fub25pY2FsLmNvbQAK
CRADRGyeZjIE+N4dCACgDiDHHZDFajZJ2O3++sWrLSTz+VXWdASzuBjLkFXQMKm7
/x4Ms9EmvMFi8kqnikuPi54Hgnrd32Glvw4vRsFbHtF0tZ9TYOic60/ziKfcrfCB
ZEb3pgi6wVhanI3u2gWwPxQpZwMTKN+5YX7352I1fVC4Qc7+zGQMLytPeT+IDA/C
lKeFUicPwvi0X9Em2IyH7PtztbDEN3jeJuPuI+QjmnqMv1XaF9AKxg5+N9eOor4n
GgODZVocTDIW9mM0Mryvk2Yo0SGXNZum9LP/JIg6xaZvzJENBGlBsEife/MF8P+3
GRylmZquOgNfaT+zQp2Ni5eg5lVGqcRameVjMyVA
=c4PR
-----END PGP SIGNATURE-----