netsnmpd: Update to version 5.9.5.2

- Update from version 5.9.3 to 5.9.5.2
- Update of rootfile
- Move the symlink generation and removal from the lfs to the instal/uninstall pak
   file to be aligned with the majority of packages.
- Version 5.9.4 has the note
    IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly
    in this release with various versions of OpenSSL and will be fixed
    in a future release.
- This issue has been in place since Aug 2023 and does not look to have been fixed as
   far as I have been able to tell. The developers also say that this tool should only
   be used on trusted local networks anyway. Additionally version 5.9.5 has a CVE fix.
  Based on this I am submitting the update patch for review and decision. I think it is
   better to do the update because it does not look like the OpenSSL issue will be
   fixed anytime soon. It doesn't appear that anyone is working on it.
   https://github.com/net-snmp/net-snmp/issues/828
- Changelog
5.9.5.2
    building:
      - Fix an issue with needing limits.h included.
      - update to autoconf 2.72
5.9.5.1
	Only a version numbering fix.
5.9.5
    snmptrapd:
      - fixed a critical vulnerability (CVE-2025-68615) which can be triggered
        by a specially crafted trap
    snmplib:
      - Add support for IPV6_RECVPKTINFO
      - Port the SSH domain transport to FreeBSD
      - Improve error handling in parse_enumlist and other parsing functions
      - Filter out non-ASCII characters from output
      - Fix multiple memory leaks in MIB parsing, OID handling, and transport filters
      - Fix multiple buffer overflows triggered when creating ASN packets
      - Fix handling of large/negative values (integer underflows/overflows)
      - Fix segmentation faults when `varbind` cannot be constructed or buf is null
      - Fix crash in netsnmp_parse_args when passing invalid argument lists
      - Fix SNMPv3 multithreading support for snmp_sess_open()
    snmpd:
      - Make UCD-SNMP::dskTable dynamic if includeAllDisks is set.") added
	a verification that drops all filesystems not present in other_fs[]
	table. So add 'ubifs' in other_fs[] to fix it.
      - Fix SIGHUP handling for engineID changes and agent port changes
      - Fix a use-after-free in unregister_mib_context()
      - Fix regression of memory leak when using RPMDB macros
      - Improve cache management: clear timer_id on stop, keep cache flags unchanged
      - Always open libkvm in "safe mode" on FreeBSD
      - Fix crash when snmptrapd subagent terminates the TCP connection
    apps:
      - snmpusm: Improve error handling and fix memory leaks
      - sshtosnmp: Avoid EINVAL when passing credentials over SSH unix domain socket
      - snmptest: Plug a possible memory leak
      - snmpget: Avoid leak if parsing OID fails
    MIBs:
      - EtherLike-MIB: Optimize Linux implementation to use netlink statistics
      - IP-MIB: Add Linux 6.7 compatibility for parsing /proc/net/snmp
      - LM-SENSORS-MIB: Support negative temperatures
      - SNMP-TLS-TM-MIB: Update to RFC 9456 and allow TLS protocols higher than TLS1.0
      - HOST-RESOURCES-MIB: Add support for RPM SQLite DB background
    building:
      - Add support for Windows on ARM
      - Support OpenBSD 8, FreeBSD 15/16, and DragonflyBSD
      - Fix build for OS/X versions prior to 10.6.0
      - Windows: Bump OpenSSL version and fix library paths
      - MinGW64: Switch from pkg-config to pkgconf
      - Add --with-wolfssl Add support for building and linking with the
	wolfSSL library instead of OpenSSL. Other changes that have been
	included in this patch are: - Only enable AES support if
	EVP_aes_128_cfb() is available. - Add support for detecting SSL
	functions if these have been defined as macros.
5.9.4
    IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly
    in this release with various versions of OpenSSL and will be fixed
    in a future release.
    libsnmp:
      - Remove the SNMP_SWIPE_MEM() macro Remove this macro since it is not
	used in the Net-SNMP code base.
      - DISPLAY-HINT fixes
      - Miscellanious improvements to the transports
      - Handle multiple oldEngineID configuration lines
      - fixes for DNS names longer than 63 characters
    agent:
      - Added a ignoremount configuration option for the HOST-MIB
      - disallow SETs with a NULL varbind
      - fix the --enable-minimalist build
    apps:
      - snmpset: allow SET with NULL varbind for testing
      - snmptrapd: improved MySQL logging code
    general:
      - configure: Remove -Wno-deprecated as it is no longer needed
      - miscellanious ther bug fixes, build fixes and cleanups

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/packages/netsnmpd | 26 +++++++++---------
 lfs/netsnmpd                       | 42 ++++++++++++++----------------
 src/paks/netsnmpd/install.sh       |  8 +++++-
 src/paks/netsnmpd/uninstall.sh     |  5 +++-
 4 files changed, 42 insertions(+), 39 deletions(-)

Message ID	20260701113444.3425761-4-adolf.belka@ipfire.org
State	Staged
Commit	eecec62b793e2fec3fbf3d8f31bdf73a28e50c76
Headers	From: Adolf Belka <adolf.belka@ipfire.org> To: development@lists.ipfire.org Cc: Adolf Belka <adolf.belka@ipfire.org> Subject: [PATCH] netsnmpd: Update to version 5.9.5.2 Date: Wed, 1 Jul 2026 13:34:43 +0200 Message-ID: <20260701113444.3425761-4-adolf.belka@ipfire.org> In-Reply-To: <20260701113444.3425761-1-adolf.belka@ipfire.org> References: <20260701113444.3425761-1-adolf.belka@ipfire.org> Precedence: list Sender: <development@lists.ipfire.org> Mail-Followup-To: <development@lists.ipfire.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	netsnmpd: Update to version 5.9.5.2 \| netsnmpd: Update to version 5.9.5.2

netsnmpd: Update to version 5.9.5.2

Commit Message

Patch