From 28d9b4568fb90aff658371a14645ef23564de5fc Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Thu, 26 Feb 2026 10:33:51 +0100 Subject: [PATCH] package/netsnmp: add patch trailer Commit [1] introduced a patch to fix CVE-2022-44792 & CVE-2022-44793. Since [2] the security patches neeed to reference the vulnerability with the `CVE: ` trailer in the patch header. [1] 44243b4c80 package/netsnmp: revert back to 5.9.3, backport security fix [2] 1167d0ff3d docs/manual: mention CVE trailer Signed-off-by: Thomas Perale --- .../0001-snmp_agent-disallow-SET-with-NULL-varbind.patch | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/netsnmp/0001-snmp_agent-disallow-SET-with-NULL-varbind.patch b/package/netsnmp/0001-snmp_agent-disallow-SET-with-NULL-varbind.patch index 3a6321d7a7..00e6d2e21c 100644 --- a/package/netsnmp/0001-snmp_agent-disallow-SET-with-NULL-varbind.patch +++ b/package/netsnmp/0001-snmp_agent-disallow-SET-with-NULL-varbind.patch @@ -4,7 +4,8 @@ Date: Fri, 25 Nov 2022 08:41:24 -0800 Subject: [PATCH] snmp_agent: disallow SET with NULL varbind Upstream: https://github.com/net-snmp/net-snmp/commit/4589352dac3ae111c7621298cf231742209efd9b - +CVE: CVE-2022-44792 +CVE: CVE-2022-44793 [Thomas: this commit was merged as part of https://github.com/net-snmp/net-snmp/pull/490/commits, which fixes https://github.com/net-snmp/net-snmp/issues/474 (CVE-2022-44792) and