From 6640f63059ea97432049619c4aad5b64e7ac7c47 Mon Sep 17 00:00:00 2001 From: Josef Ridky Date: Wed, 29 Oct 2025 10:05:41 +0100 Subject: [PATCH] Resolves: RHEL-116089 - fix engine boot counter Signed-off-by: Josef Ridky --- net-snmp-5.8-engine-evaluation.patch | 37 ++++++++++++++++++++++++++++ net-snmp.spec | 7 +++++- 2 files changed, 43 insertions(+), 1 deletion(-) create mode 100644 net-snmp-5.8-engine-evaluation.patch diff --git a/net-snmp-5.8-engine-evaluation.patch b/net-snmp-5.8-engine-evaluation.patch new file mode 100644 index 0000000..fe70165 --- /dev/null +++ b/net-snmp-5.8-engine-evaluation.patch @@ -0,0 +1,37 @@ +From 92bd7da2ef28b697fce8a9674087a5aba6aed744 Mon Sep 17 00:00:00 2001 +From: unknown +Date: Mon, 9 Jan 2023 21:24:33 +0100 +Subject: [PATCH] Fix order of evaluation + +--- + snmplib/snmpv3.c | 8 ++++++-- + 1 file changed, 6 insertions(+), 2 deletions(-) + +diff --git a/snmplib/snmpv3.c b/snmplib/snmpv3.c +index d650e12a3a..770ccad892 100644 +--- a/snmplib/snmpv3.c ++++ b/snmplib/snmpv3.c +@@ -1052,6 +1052,8 @@ init_snmpv3_post_config(int majorid, int minorid, void *serverarg, + + size_t engineIDLen; + u_char *c_engineID; ++ u_long localEngineTime; ++ u_long localEngineBoots; + + c_engineID = snmpv3_generate_engineID(&engineIDLen); + +@@ -1076,9 +1078,11 @@ init_snmpv3_post_config(int majorid, int minorid, void *serverarg, + /* + * for USM set our local engineTime in the LCD timing cache + */ ++ localEngineTime = snmpv3_local_snmpEngineTime(); ++ localEngineBoots = snmpv3_local_snmpEngineBoots(); + set_enginetime(c_engineID, engineIDLen, +- snmpv3_local_snmpEngineBoots(), +- snmpv3_local_snmpEngineTime(), TRUE); ++ localEngineBoots, ++ localEngineTime, TRUE); + #endif /* NETSNMP_SECMOD_USM */ + + SNMP_FREE(c_engineID); + diff --git a/net-snmp.spec b/net-snmp.spec index 554d9e3..ff8d454 100644 --- a/net-snmp.spec +++ b/net-snmp.spec @@ -10,7 +10,7 @@ Summary: A collection of SNMP protocol tools and libraries Name: net-snmp Version: 5.8 -Release: 31%{?dist} +Release: 32%{?dist} Epoch: 1 License: BSD @@ -82,6 +82,7 @@ Patch53: net-snmp-5.8-proxy.patch Patch54: net-snmp-5.8-truncating-log-once.patch Patch55: net-snmp-5.8-CVE-2022-24805-24810.patch Patch56: net-snmp-5.8-callback-fix.patch +Patch57: net-snmp-5.8-engine-evaluation.patch # Modern RPM API means at least EL6 Patch101: net-snmp-5.8-modern-rpm-api.patch @@ -263,6 +264,7 @@ rm -r python %patch54 -p1 -b .truncating-log-once %patch55 -p1 -b .CVE-2022-24805-24810 %patch56 -p1 -b .callback-fix +%patch57 -p1 -b .engine-evaluation %patch101 -p1 -b .modern-rpm-api @@ -517,6 +519,9 @@ LD_LIBRARY_PATH=%{buildroot}/%{_libdir} make test %{_libdir}/libnetsnmptrapd*.so.%{soname}* %changelog +* Wed Oct 29 2025 Josef Ridky - 1:5.8-32 +- fix engine order of evaluation (RHEL-116089) + * Wed Aug 13 2025 Josef Ridky - 1:5.8-31 - fix use after free issue (RHEL-64696)