[AUTOPATCHER-CORE] Upgrade net-snmp to 5.9.4 Fixes for CVE-2022-44792 and CVE-2022-44793 (#8877)

Co-authored-by: Elaheh Dehghani <edehghani@microsoft.com>

SPECS/net-snmp/net-snmp.signatures.json

@@ -1,7 +1,7 @@
 {
- "Signatures": {
-  "net-snmp-5.9.1.tar.gz": "eb7fd4a44de6cddbffd9a92a85ad1309e5c1054fb9d5a7dd93079c8953f48c3f",
-  "snmpd.service": "5e17bf9f66f2b77e1a6c6dff7356cecb8ed488ce3df361738a72b4436096b694",
-  "snmptrapd.service": "ef3e3dbe80c8ab455b30cd83db23db136263c1295ce2f23dcc4a1a1b60799229"
- }
-}
+  "Signatures": {
+    "snmpd.service": "5e17bf9f66f2b77e1a6c6dff7356cecb8ed488ce3df361738a72b4436096b694",
+    "snmptrapd.service": "ef3e3dbe80c8ab455b30cd83db23db136263c1295ce2f23dcc4a1a1b60799229",
+    "net-snmp-5.9.4.tar.gz": "8b4de01391e74e3c7014beb43961a2d6d6fa03acc34280b9585f4930745b0544"
+  }
+}

SPECS/net-snmp/net-snmp.spec

@@ -1,8 +1,8 @@
 %global __requires_exclude perl\\(.*\\)
 Summary:        Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6.
 Name:           net-snmp
-Version:        5.9.1
-Release:        2%{?dist}
+Version:        5.9.4
+Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -13,6 +13,7 @@ Source1:        snmpd.service
 Source2:        snmptrapd.service
 BuildRequires:  openssl-devel
 BuildRequires:  perl
+BuildRequires:  perl-ExtUtils-MakeMaker
 BuildRequires:  systemd
 %if %{with_check}
 BuildRequires:  net-tools
@@ -122,6 +123,9 @@ popd
 %{_localstatedir}/run/net-snmp
 
 %changelog
+* Tue Apr 23 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 5.9.4-1
+- Auto-upgrade to 5.9.4 - Fixes for CVE-2022-44792 and CVE-2022-44793
+
 * Fri Apr 07 2022 Minghe Ren <mingheren@microsoft.com> - 5.9.1-2
 - Add net-snmp-lib subpackage and UCD-SNMP
 

cgmanifest.json

@@ -14133,8 +14133,8 @@
         "type": "other",
         "other": {
           "name": "net-snmp",
-          "version": "5.9.1",
-          "downloadUrl": "https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9.1/net-snmp-5.9.1.tar.gz"
+          "version": "5.9.4",
+          "downloadUrl": "https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9.4/net-snmp-5.9.4.tar.gz"
         }
       }
     },