CVS commit: [pkgsrc-2026Q3] pkgsrc/net

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: [pkgsrc-2026Q3] pkgsrc/net
From: "Benny Siegert" <bsiegert%netbsd.org@localhost>
Date: Thu, 1 Oct 2026 18:53:04 +0000

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Thu Oct  1 18:53:04 UTC 2026

Modified Files:
        pkgsrc/net/net-snmp [pkgsrc-2026Q3]: Makefile Makefile.common distinfo
        pkgsrc/net/net-snmp/patches [pkgsrc-2026Q3]: patch-configure
        pkgsrc/net/py-netsnmp [pkgsrc-2026Q3]: Makefile PLIST

Log Message:
Pullup ticket #7250 - requested by taca
net/net-snmp: security fix
net/py-netsnmp: security fix

Revisions pulled up:
- net/net-snmp/Makefile                                         1.149
- net/net-snmp/Makefile.common                                  1.10
- net/net-snmp/distinfo                                         1.108
- net/net-snmp/patches/patch-configure                          1.7
- net/py-netsnmp/Makefile                                       1.15
- net/py-netsnmp/PLIST                                          1.2

---
   Module Name: pkgsrc
   Committed By:        adam
   Date:                Tue Sep 22 07:42:22 UTC 2026

   Modified Files:
        pkgsrc/net/net-snmp: Makefile Makefile.common distinfo
        pkgsrc/net/net-snmp/patches: patch-configure
        pkgsrc/net/py-netsnmp: Makefile PLIST

   Log Message:
   net-snmp py-netsnmp: updated to 5.9.5.2

   *5.9.5.2*

   building:
     - Fix an issue with needing limits.h included.
     - update to autoconf 2.72

   *5.9.5.1*

   Only a version numbering fix.

   *5.9.5*

   snmptrapd:
     - fixed a critical vulnerability (CVE-2025-68615) which can be triggered
       by a specially crafted trap

   snmplib:
     - Add support for IPV6_RECVPKTINFO
     - Port the SSH domain transport to FreeBSD
     - Improve error handling in parse_enumlist and other parsing functions
     - Filter out non-ASCII characters from output
     - Fix multiple memory leaks in MIB parsing, OID handling, and transport filters
     - Fix multiple buffer overflows triggered when creating ASN packets
     - Fix handling of large/negative values (integer underflows/overflows)
     - Fix segmentation faults when `varbind` cannot be constructed or buf is null
     - Fix crash in netsnmp_parse_args when passing invalid argument lists
     - Fix SNMPv3 multithreading support for snmp_sess_open()

   snmpd:
     - Make UCD-SNMP::dskTable dynamic if includeAllDisks is set.") added
       a verification that drops all filesystems not present in other_fs[]
       table. So add 'ubifs' in other_fs[] to fix it.
     - Fix SIGHUP handling for engineID changes and agent port changes
     - Fix a use-after-free in unregister_mib_context()
     - Fix regression of memory leak when using RPMDB macros
     - Improve cache management: clear timer_id on stop, keep cache flags unchanged
     - Always open libkvm in "safe mode" on FreeBSD
     - Fix crash when snmptrapd subagent terminates the TCP connection

   apps:
     - snmpusm: Improve error handling and fix memory leaks
     - sshtosnmp: Avoid EINVAL when passing credentials over SSH unix domain socket
     - snmptest: Plug a possible memory leak
     - snmpget: Avoid leak if parsing OID fails

   MIBs:
     - EtherLike-MIB: Optimize Linux implementation to use netlink statistics
     - IP-MIB: Add Linux 6.7 compatibility for parsing /proc/net/snmp
     - LM-SENSORS-MIB: Support negative temperatures
     - SNMP-TLS-TM-MIB: Update to RFC 9456 and allow TLS protocols higher than TLS1.0
     - HOST-RESOURCES-MIB: Add support for RPM SQLite DB background

   building:
     - Add support for Windows on ARM
     - Support OpenBSD 8, FreeBSD 15/16, and DragonflyBSD
     - Fix build for OS/X versions prior to 10.6.0
     - Windows: Bump OpenSSL version and fix library paths
     - MinGW64: Switch from pkg-config to pkgconf
     - Add --with-wolfssl Add support for building and linking with the
       wolfSSL library instead of OpenSSL. Other changes that have been
       included in this patch are: - Only enable AES support if
       EVP_aes_128_cfb() is available. - Add support for detecting SSL
       functions if these have been defined as macros.


To generate a diff of this commit:
cvs rdiff -u -r1.148 -r1.148.2.1 pkgsrc/net/net-snmp/Makefile
cvs rdiff -u -r1.9 -r1.9.6.1 pkgsrc/net/net-snmp/Makefile.common
cvs rdiff -u -r1.107 -r1.107.6.1 pkgsrc/net/net-snmp/distinfo
cvs rdiff -u -r1.6 -r1.6.6.1 pkgsrc/net/net-snmp/patches/patch-configure
cvs rdiff -u -r1.14 -r1.14.22.1 pkgsrc/net/py-netsnmp/Makefile
cvs rdiff -u -r1.1 -r1.1.98.1 pkgsrc/net/py-netsnmp/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/net-snmp/Makefile
diff -u pkgsrc/net/net-snmp/Makefile:1.148 pkgsrc/net/net-snmp/Makefile:1.148.2.1
--- pkgsrc/net/net-snmp/Makefile:1.148  Thu Jul 16 19:04:22 2026
+++ pkgsrc/net/net-snmp/Makefile        Thu Oct  1 18:53:04 2026
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.148 2026/07/16 19:04:22 wiz Exp $
+# $NetBSD: Makefile,v 1.148.2.1 2026/10/01 18:53:04 bsiegert Exp $
 
-PKGREVISION= 1
 .include "Makefile.common"
+
 CATEGORIES=    net
 
 MAINTAINER=    adam%NetBSD.org@localhost

Index: pkgsrc/net/net-snmp/Makefile.common
diff -u pkgsrc/net/net-snmp/Makefile.common:1.9 pkgsrc/net/net-snmp/Makefile.common:1.9.6.1
--- pkgsrc/net/net-snmp/Makefile.common:1.9     Sun Jan 11 05:07:59 2026
+++ pkgsrc/net/net-snmp/Makefile.common Thu Oct  1 18:53:04 2026
@@ -1,11 +1,11 @@
-# $NetBSD: Makefile.common,v 1.9 2026/01/11 05:07:59 wiz Exp $
+# $NetBSD: Makefile.common,v 1.9.6.1 2026/10/01 18:53:04 bsiegert Exp $
 # used by net/net-snmp/Makefile
 # used by net/py-netsnmp/Makefile
 
-DISTNAME=      net-snmp-5.9.5
+DISTNAME=      net-snmp-5.9.5.2
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=net-snmp/}
 
-HOMEPAGE=      http://www.net-snmp.org/
+HOMEPAGE=      https://www.net-snmp.org/
 LICENSE=       modified-bsd
 
 DISTINFO_FILE= ${.CURDIR}/../../net/net-snmp/distinfo

Index: pkgsrc/net/net-snmp/distinfo
diff -u pkgsrc/net/net-snmp/distinfo:1.107 pkgsrc/net/net-snmp/distinfo:1.107.6.1
--- pkgsrc/net/net-snmp/distinfo:1.107  Mon Jan 12 13:05:57 2026
+++ pkgsrc/net/net-snmp/distinfo        Thu Oct  1 18:53:04 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.107 2026/01/12 13:05:57 tnn Exp $
+$NetBSD: distinfo,v 1.107.6.1 2026/10/01 18:53:04 bsiegert Exp $
 
-BLAKE2s (net-snmp-5.9.5.tar.gz) = 47f5d457d41a5a54534a9223d30eee6247609d93cd9af134f31db76f518784f4
-SHA512 (net-snmp-5.9.5.tar.gz) = a9801dd83cf7a800942327358654977856a20fd16af703c110dfff2b8baa345ea44ed19131b78a2b31076503a9478da91722eefa139783e6908896673d24dbf2
-Size (net-snmp-5.9.5.tar.gz) = 6728907 bytes
+BLAKE2s (net-snmp-5.9.5.2.tar.gz) = f5133fac1849a30e5f9cc284e5cf82f3ccd3b4a45f798cc4b6aeb7a9671e3a91
+SHA512 (net-snmp-5.9.5.2.tar.gz) = c320c90e01377651fdff3aa9c373b9013f142fab23810d821174e546716ef2fa6499a805728710c67ca7fe238679111df392754c24ea4e01768faa5535ac7db2
+Size (net-snmp-5.9.5.2.tar.gz) = 6826866 bytes
 SHA1 (patch-agent_auto__nlist.c) = a8fe703d8902c2847ca6692af4400ddbf9cbe74b
 SHA1 (patch-agent_mibgroup_hardware_cpu_cpu__sysctl.c) = 418a4568098ee8c5a01b7efe1bc7b3db81599799
 SHA1 (patch-agent_mibgroup_hardware_memory_memory__freebsd.c) = e07e733912b8906cb168415a1768f9939b7f1bde
@@ -19,7 +19,7 @@ SHA1 (patch-agent_mibgroup_mibII_ipAddr.
 SHA1 (patch-agent_mibgroup_mibII_tcp.c) = 48bfb424819052987181ac61562c560d17e8e15c
 SHA1 (patch-agent_mibgroup_mibII_var__route.c) = 980a30fd82e46ead6ca266c425d61641f1751093
 SHA1 (patch-agent_snmp__perl.c) = 52b7b26ce8cae6d892b017c50831565fc138a337
-SHA1 (patch-configure) = c1c6381320eccb72a194053a8024ca3f5665f2d8
+SHA1 (patch-configure) = 8a9b1aa84098ab2c1e0364a542c4cd1d0ccc311c
 SHA1 (patch-ov_UCD-fields) = 40e8d78bad93ca12f4c08c43b86e7f13edafc299
 SHA1 (patch-ov_oid__to__type.in) = 281be9a88860987880c71770f4050fd965dd8ed9
 SHA1 (patch-perl_OID_OID.xs) = 5c21172a697021543db4f9f88047e98954b2d0d8

Index: pkgsrc/net/net-snmp/patches/patch-configure
diff -u pkgsrc/net/net-snmp/patches/patch-configure:1.6 pkgsrc/net/net-snmp/patches/patch-configure:1.6.6.1
--- pkgsrc/net/net-snmp/patches/patch-configure:1.6     Sun Jan 11 05:08:00 2026
+++ pkgsrc/net/net-snmp/patches/patch-configure Thu Oct  1 18:53:04 2026
@@ -1,11 +1,11 @@
-$NetBSD: patch-configure,v 1.6 2026/01/11 05:08:00 wiz Exp $
+$NetBSD: patch-configure,v 1.6.6.1 2026/10/01 18:53:04 bsiegert Exp $
 
-- Do not store configure options as these might be polluted with workdir.
-- Support long fds_bits.
+Do not store configure options as these might be polluted with workdir.
+Don't use -Werror,-Wdeclaration-after-statement.
 
---- configure.orig     2025-12-20 15:03:44.000000000 +0000
+--- configure.orig     2025-12-23 16:54:35.000000000 +0000
 +++ configure
-@@ -3800,7 +3800,7 @@ ac_config_headers="$ac_config_headers include/net-snmp
+@@ -3800,7 +3800,7 @@ ac_config_headers="$ac_config_headers in
  # save the configure arguments
  #
  
@@ -14,3 +14,49 @@ $NetBSD: patch-configure,v 1.6 2026/01/1
  
  CONFIGURE_OPTIONS="\"$ac_configure_args\""
  
+@@ -18175,45 +18175,6 @@ CFLAGS=$lt_save_CFLAGS
+ #   Build environment:
+ ##
+ 
+-for opt in -Werror=declaration-after-statement
+-do
+-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the compiler supports $opt" >&5
+-printf %s "checking whether the compiler supports $opt... " >&6; }
+-    netsnmp_save_CFLAGS="$CFLAGS"
+-    if test x$opt != x-Wstrict-prototypes; then
+-      CFLAGS="-Werror $opt $CFLAGS"
+-    else
+-      CFLAGS="$opt $CFLAGS"
+-    fi
+-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+-/* end confdefs.h.  */
+-
+-int
+-main (void)
+-{
+-
+-  ;
+-  return 0;
+-}
+-_ACEOF
+-if ac_fn_c_try_link "$LINENO"
+-then :
+-
+-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+-printf "%s\n" "yes" >&6; }
+-      CFLAGS="$opt $netsnmp_save_CFLAGS"
+-
+-else case e in #(
+-  e)
+-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
+-printf "%s\n" "no" >&6; }
+-      CFLAGS="$netsnmp_save_CFLAGS"
+-     ;;
+-esac
+-fi
+-rm -f core conftest.err conftest.$ac_objext conftest.beam \
+-    conftest$ac_exeext conftest.$ac_ext
+-done
+ 
+ #   developer build
+ #       (enabled by default when building from SVN checkout)

Index: pkgsrc/net/py-netsnmp/Makefile
diff -u pkgsrc/net/py-netsnmp/Makefile:1.14 pkgsrc/net/py-netsnmp/Makefile:1.14.22.1
--- pkgsrc/net/py-netsnmp/Makefile:1.14 Wed Feb 21 10:21:01 2024
+++ pkgsrc/net/py-netsnmp/Makefile      Thu Oct  1 18:53:04 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.14 2024/02/21 10:21:01 wiz Exp $
+# $NetBSD: Makefile,v 1.14.22.1 2026/10/01 18:53:04 bsiegert Exp $
 
 .include "../../net/net-snmp/Makefile.common"
 
@@ -8,10 +8,9 @@ CATEGORIES=    net python
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 COMMENT=       Python bindings to extensible SNMP implementation
 
-USE_LANGUAGES=         c
-EGG_NAME=              netsnmp_python-1.0a1
-PYSETUPSUBDIR=         python
+PYSETUPSUBDIR= python
+WHEEL_NAME=    netsnmp_python-1.0a1
 
+.include "../../lang/python/wheel.mk"
 .include "../../net/net-snmp/buildlink3.mk"
-.include "../../lang/python/egg.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/net/py-netsnmp/PLIST
diff -u pkgsrc/net/py-netsnmp/PLIST:1.1 pkgsrc/net/py-netsnmp/PLIST:1.1.98.1
--- pkgsrc/net/py-netsnmp/PLIST:1.1     Tue Aug  5 12:22:43 2014
+++ pkgsrc/net/py-netsnmp/PLIST Thu Oct  1 18:53:04 2026
@@ -1,8 +1,9 @@
-@comment $NetBSD: PLIST,v 1.1 2014/08/05 12:22:43 he Exp $
-${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
-${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
-${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
-${PYSITELIB}/${EGG_INFODIR}/top_level.txt
+@comment $NetBSD: PLIST,v 1.1.98.1 2026/10/01 18:53:04 bsiegert Exp $
+${PYSITELIB}/${WHEEL_INFODIR}/METADATA
+${PYSITELIB}/${WHEEL_INFODIR}/RECORD
+${PYSITELIB}/${WHEEL_INFODIR}/WHEEL
+${PYSITELIB}/${WHEEL_INFODIR}/licenses/LICENSE
+${PYSITELIB}/${WHEEL_INFODIR}/top_level.txt
 ${PYSITELIB}/netsnmp/__init__.py
 ${PYSITELIB}/netsnmp/__init__.pyc
 ${PYSITELIB}/netsnmp/__init__.pyo

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: [pkgsrc-2026Q3] pkgsrc/textproc/expat
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: [pkgsrc-2026Q3] pkgsrc/textproc/expat
Indexes:

Home | Main Index | Thread Index | Old Index