Net-snmp has a new version out so this weekend I'll be getting the new #debian packages ready for it. Looks like the openssl API problem is fixed and a bunch of patches also won't be needed.
I've decided I'll use the same workflow for patches as the other packages I maintain. I hate patch-queue or I'm too stubborn to learn a different way