From 21bf261f698f5764859467dfd74f36c173145cfc Mon Sep 17 00:00:00 2001 From: CBL-Mariner-Bot <75509084+CBL-Mariner-Bot@users.noreply.github.com> Date: Fri, 26 Apr 2024 08:21:56 -0700 Subject: [PATCH] [AUTOPATCHER-CORE] Upgrade net-snmp to 5.9.4 Fixes for CVE-2022-44792 and CVE-2022-44793 (#8877) Co-authored-by: Elaheh Dehghani --- SPECS/net-snmp/net-snmp.signatures.json | 12 ++++++------ SPECS/net-snmp/net-snmp.spec | 8 ++++++-- cgmanifest.json | 4 ++-- 3 files changed, 14 insertions(+), 10 deletions(-) diff --git a/SPECS/net-snmp/net-snmp.signatures.json b/SPECS/net-snmp/net-snmp.signatures.json index 2bd2688f7e..b66781eb87 100644 --- a/SPECS/net-snmp/net-snmp.signatures.json +++ b/SPECS/net-snmp/net-snmp.signatures.json @@ -1,7 +1,7 @@ { - "Signatures": { - "net-snmp-5.9.1.tar.gz": "eb7fd4a44de6cddbffd9a92a85ad1309e5c1054fb9d5a7dd93079c8953f48c3f", - "snmpd.service": "5e17bf9f66f2b77e1a6c6dff7356cecb8ed488ce3df361738a72b4436096b694", - "snmptrapd.service": "ef3e3dbe80c8ab455b30cd83db23db136263c1295ce2f23dcc4a1a1b60799229" - } -} \ No newline at end of file + "Signatures": { + "snmpd.service": "5e17bf9f66f2b77e1a6c6dff7356cecb8ed488ce3df361738a72b4436096b694", + "snmptrapd.service": "ef3e3dbe80c8ab455b30cd83db23db136263c1295ce2f23dcc4a1a1b60799229", + "net-snmp-5.9.4.tar.gz": "8b4de01391e74e3c7014beb43961a2d6d6fa03acc34280b9585f4930745b0544" + } +} diff --git a/SPECS/net-snmp/net-snmp.spec b/SPECS/net-snmp/net-snmp.spec index c15b024f9e..1583c9d897 100644 --- a/SPECS/net-snmp/net-snmp.spec +++ b/SPECS/net-snmp/net-snmp.spec @@ -1,8 +1,8 @@ %global __requires_exclude perl\\(.*\\) Summary: Net-SNMP is a suite of applications used to implement SNMP v1, SNMP v2c and SNMP v3 using both IPv4 and IPv6. Name: net-snmp -Version: 5.9.1 -Release: 2%{?dist} +Version: 5.9.4 +Release: 1%{?dist} License: MIT Vendor: Microsoft Corporation Distribution: Mariner @@ -13,6 +13,7 @@ Source1: snmpd.service Source2: snmptrapd.service BuildRequires: openssl-devel BuildRequires: perl +BuildRequires: perl-ExtUtils-MakeMaker BuildRequires: systemd %if %{with_check} BuildRequires: net-tools @@ -122,6 +123,9 @@ popd %{_localstatedir}/run/net-snmp %changelog +* Tue Apr 23 2024 CBL-Mariner Servicing Account - 5.9.4-1 +- Auto-upgrade to 5.9.4 - Fixes for CVE-2022-44792 and CVE-2022-44793 + * Fri Apr 07 2022 Minghe Ren - 5.9.1-2 - Add net-snmp-lib subpackage and UCD-SNMP diff --git a/cgmanifest.json b/cgmanifest.json index b77826e416..c91a61bcb9 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -14133,8 +14133,8 @@ "type": "other", "other": { "name": "net-snmp", - "version": "5.9.1", - "downloadUrl": "https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9.1/net-snmp-5.9.1.tar.gz" + "version": "5.9.4", + "downloadUrl": "https://sourceforge.net/projects/net-snmp/files/net-snmp/5.9.4/net-snmp-5.9.4.tar.gz" } } },