mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 16:01:54 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/netsnmp: add patch trailer

Browse Source 
Commit [1] introduced a patch to fix CVE-2022-44792 & CVE-2022-44793.
Since [2] the security patches neeed to reference the vulnerability with
the `CVE: ` trailer in the patch header.

[1] 44243b4c80 package/netsnmp: revert back to 5.9.3, backport security fix
[2] 1167d0ff3d docs/manual: mention CVE trailer

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Thomas Perale
2026-02-26 10:33:51 +01:00
parent 87499e35c4
commit 28d9b4568f
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
package/netsnmp/0001-snmp_agent-disallow-SET-with-NULL-varbind.patch
View File

@@ -4,7 +4,8 @@ Date: Fri, 25 Nov 2022 08:41:24 -0800
Subject: [PATCH] snmp_agent: disallow SET with NULL varbind
Upstream: https://github.com/net-snmp/net-snmp/commit/4589352dac3ae111c7621298cf231742209efd9b
CVE: CVE-2022-44792
CVE: CVE-2022-44793
[Thomas: this commit was merged as part of
https://github.com/net-snmp/net-snmp/pull/490/commits, which fixes
https://github.com/net-snmp/net-snmp/issues/474 (CVE-2022-44792) and