summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-protocols/net-snmp/net-snmp_5.8.bb
Commit message (Collapse)AuthorAgeFilesLines
* net-snmp: CVE-2022-44792 & CVE-2022-44793 Fix NULL Pointer ExceptionHitendra Prajapati2023-02-221-0/+1
| | | | | | | Upstream-Status: Backport from https://github.com/net-snmp/net-snmp/commit/be804106fd0771a7d05236cff36e199af077af57 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* net-snmp: Fix CVE-2020-15861 and CVE-2020-15862Ovidiu Panait2020-09-031-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following. Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root. References: https://nvd.nist.gov/vuln/detail/CVE-2020-15861 https://nvd.nist.gov/vuln/detail/CVE-2020-15862 Upstream patches: https://github.com/net-snmp/net-snmp/commit/2b3e300ade4add03b889e61d610b0db77d300fc3 https://github.com/net-snmp/net-snmp/commit/9cfb38b0aa95363da1466ca81dd929989ba27c1f https://github.com/net-snmp/net-snmp/commit/114e4c2cec2601ca56e8afb1f441520f75a9a312 https://github.com/net-snmp/net-snmp/commit/2968b455e6f182f329746e2bca1043f368618c73 https://github.com/net-snmp/net-snmp/commit/4fd9a450444a434a993bc72f7c3486ccce41f602 https://github.com/net-snmp/net-snmp/commit/77f6c60f57dba0aaea5d8ef1dd94bcd0c8e6d205 CVE-2020-15861-0005.patch is the actual fix for CVE-2020-15861 and CVE-2020-15861-0001.patch through CVE-2020-15861-0004.patch are context patches needed by the fix to apply cleanly. Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* net-snmp: Security fix CVE-2019-20892Armin Kuster2020-07-121-0/+1
| | | | | | | | | | | | | | | | | | | Source: net-snmp.org MR: 104509 Type: Security Fix Disposition: Backport from https://github.com/net-snmp/net-snmp/commit/5f881d3bf24599b90d67a45cae7a3eb099cd71c9 ChangeID: 206d822029d48d904864f23fd1b1af69dffc26c8 Description: Fixes CVE-2019-20892 which affect net-snmp <= 5.8pre1 Had to fix up some file do to later code restructioning. "int refcnt;" addition was done in include/net-snmp/library/snmpusm.h Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 96a63b1ecf321c9a63880a963ed257086998133b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* net-snmp: fix reproducibilty issues in net-snmp-configJeremy Puhlman2020-03-061-0/+3
| | | | | | | Both STAGING_HOST_DIR and -fmacro-prefix-map path to WORKDIR were encoded in the config. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: multilib fixesJeremy Puhlman2020-03-061-1/+5
| | | | | | | | | | | net-snmp/net-snmp-config.h: - encodes type sizes - encodes pathing into the libdir net-snmp-config: - encodes build configuration data and lib pathing. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Add pkgconfig file supportJeremy Puhlman2020-02-201-0/+1
| | | | | Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Fix PACKAGECONFIG for perlRobert Yang2019-09-301-4/+5
| | | | | | | | | | | | | | | | * Remove perl-lib since it had been removed by oe-core: commit 68552c353255188de3d5b42135360a30e7eac535 Author: Alexander Kanavin <alex.kanavin@gmail.com> Date: Sun Dec 2 12:46:37 2018 +0100 perl: remove the previous version of the recipe Now the files are in perl pacakge. * Fix perl paths when perl is enabled. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: update SRC_URIKai Kang2019-07-261-3/+3
| | | | | | | Replace source zip ball with tarball for net-snmp to avoid zip bomb issue. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: split net-snmp-config to package net-snmp-devHongxu Jia2019-06-151-1/+5
| | | | | | | | | | | | | | | | Move net-snmp-config in which contains build path from package net-snmp to net-snmp-dev. It refers ubuntu, here are we got from Ubuntu 18.04 $ dpkg -c /var/cache/apt/archives/libsnmp-dev_5.7.3+dfsg-1.8ubuntu3.1_amd64.deb drwxr-xr-x root/root 0 2018-10-15 22:16 ./usr/bin/ -rwxr-xr-x root/root 43797 2018-10-15 22:16 ./usr/bin/mib2c -rwxr-xr-x root/root 8780 2018-10-15 22:16 ./usr/bin/mib2c-update -rwxr-xr-x root/root 29427 2018-10-15 22:16 ./usr/bin/net-snmp-config -rwxr-xr-x root/root 3688 2018-10-15 22:16 ./usr/bin/net-snmp-create-v3-user Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Licenses are in the COPYING filedouglas.royds2019-03-071-2/+2
| | | | | | | | | | | A bit of an unholy mixture of MIT, BSD 3-clause, and too old to really know BSD-style, with a wide variety of copyright holders. I'm open to better suggestions on how to handle this. Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Add PACKAGECONFIG desChangqing Li2019-03-011-2/+2
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: fix compile error with --disable-desChangqing Li2019-02-261-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | scapi.c: In function 'sc_encrypt': | scapi.c:1256:5: error: 'pad_size' undeclared (first use in this function); did you mean 'dysize'? | pad_size = pai->pad_size; | ^~~~~~~~ | dysize pad_size is defined only without --disable-des [snip] int pad, plast, pad_size = 0; but used when disable-des [snip] QUITFUN(SNMPERR_GENERR, sc_encrypt_quit); } pad_size = pai->pad_size; memset(my_iv, 0, sizeof(my_iv)); if (USM_CREATE_USER_PRIV_DES == (pai->type & USM_PRIV_MASK_ALG)) { /* fix by move it into #ifndef NETSNMP_DISABLE_DES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: reproducibility: Strip host paths from ptest filesdouglas.royds2018-12-131-0/+2
| | | | | | | net-snmp also installs net-snmp-config and gen-variables files that need to have host paths stripped. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: inherit ptestKai Kang2018-11-271-1/+1
| | | | | | | | Inherit ptest for net-snmp to create ${PN}-ptest. Update run-ptest as well to avoid only could be run in the same directory. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Simplify sed expressionsdouglas.royds2018-11-261-6/+6
| | | | | | | | | Readability. The existing patterns allowed each pattern to be matched multiple times (with no intevening spaces), but the "g" modifier achieves this anyway. Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Reproducibility: Set NETSNMP_CONFIGURE_OPTIONS nulldouglas.royds2018-11-261-0/+2
| | | | | | | | | To avoid build host paths being written into binaries, accept a null NETSNMP_CONFIGURE_OPTIONS from the environment. Upstream-Status: Submitted https://sourceforge.net/p/net-snmp/patches/1384/ Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Reproducibility: Don't check build host for /etc/printcapdouglas.royds2018-11-261-0/+2
| | | | | | | | | | | | | | Don't check for /etc/printcap on the build machine when cross-compiling. Use AC_CHECK_FILE to set the cached variable ac_cv_file__etc_printcap instead. When cross-compiling, this variable should be set in the environment to "yes" or "no" as appropriate for the target platform. I have taken the simple expedient of setting ac_cv_file__etc_printcap=no. If this proves to be a problem, we can easily add a new variable, HAS_PRINTCAP. Upstream-Status: Submitted https://sourceforge.net/p/net-snmp/patches/1385/ Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Reproducibility: Remove PKG_CONFIG paths from net-snmp-configdouglas.royds2018-11-261-5/+7
| | | | | | | | PKG_CONFIG_PATH and PKG_CONFIG_LIBDIR point into the net-snmp recipe-sysroot. Careful not to trim trailing quotes from the CFLAGS Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Reproducibility: Fixed path to /bin/unamedouglas.royds2018-11-261-0/+1
| | | | | Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Revert "net-snmp: improve reproducibility"douglas.royds2018-11-261-7/+0
| | | | | | | This reverts commit 57d8e2c673d5f5686bbf411333f1d39c3e29690e. Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: improve reproducibilityHongxu Jia2018-09-291-0/+7
| | | | | | | | | - Remoe prefix ${RECIPE_SYSROOT} from net-snmp-config - Remove configure options from versioninfo Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* split net-snmp-libs into smaller packagesAlexander Filippov2018-09-101-4/+19
| | | | | | | | | | By default `net-snmp-libs` contains all compiled libs. This commit splits `net-snmp-libs` into subpackages for each library. This allows for smaller resulting image due to finer packaging. Signed-off-by: Alexander Filippov <a.filippov@yadro.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Fix host contaminationChangqing Li2018-08-241-0/+1
| | | | | | | | | | | | | | If "/usr/local/ssl/include" directory exists on the host machine, net-snmp will also search the host openssl headers: x86_64-wrs-linux-libtool: compile: x86_64-wrs-linux-gcc ... -I/usr/local/ssl/include Fix this by selecting the proper sysroot headers using --with-openssl=${STAGING_EXECPREFIXDIR} Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: upgrade 5.7.3 -> 5.8Changqing Li2018-08-111-0/+238
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>