-
munin (1.4.6-3ubuntu3.4) precise-security; urgency=low
* SECURITY UPDATE: multiple denial of service issues
- debian/patches/CVE-2013-6xxx.patch: backport fixes from upstream to
master/lib/Munin/Master/{HTMLOld,Node}.pm.
- CVE-2013-6048
- CVE-2013-6359
-- Marc Deslauriers <email address hidden> Wed, 18 Dec 2013 09:43:31 -0500
-
munin (1.4.6-3ubuntu3.3) precise-security; urgency=low
* SECURITY UPDATE: symlink vulnerability in qmailscan plugin
- debian/patches/CVE-2012-2103.patch: remove the use of tempfiles in
plugins/node.d/qmailscan.in.
- CVE-2012-2103
* SECURITY UPDATE: privilege escalation via root running plugins
- debian/patches/CVE-2012-3512.patch: run each plugin in their own
state directory in Makefile, Makefile.config,
node/lib/Munin/Node/{OS,Service}.pm, plugins/lib/Munin/Plugin.pm,
plugins/node.d/*.in,plugins/node.d.linux/*.in.
- debian/patches/CVE-2012-3512-regression.patch: Don't rely on
MUNIN_PLUGSTATE being in the environment as these scripts also get
run by a cron job in plugins/node.d.linux/apt_all.in,
plugins/node.d.linux/apt.in.
- CVE-2012-3512
* debian/Makefile.config: added new plugin state directory location.
* debian/munin-node.{postinst,postrm}: Remove old plugin state directory
override, also remove new plugin state directory.
-- Marc Deslauriers <email address hidden> Wed, 17 Oct 2012 08:26:39 -0400
-
munin (1.4.6-3ubuntu3.1) precise-proposed; urgency=low
* debian/patches/upstream_changeset_4597.patch
- Fix incorrect graph configuration in munin plugin
exim_mailqueue but switching AREA and STACK sections.
Cherry picked patch from upstream VCS (LP: #598385).
* debian/patches/upstream_changeset_4358.patch
- Fix broken memory usage data collection in memory plugin by
silencing Perl 5.14 warnings.
Cherry picked patch from upstream VCS (LP: #1000678).
-- Vibhav Pant <email address hidden> Mon, 21 May 2012 17:09:20 +0100
-
munin (1.4.6-3ubuntu3) precise; urgency=low
* d/patches/fix_iostat_plugin.patch: Cherry picked patch from upstream
trunk to correct output of iostat plugin (LP: #919429).
-- James Page <email address hidden> Tue, 03 Apr 2012 11:31:24 +0100
-
munin (1.4.6-3ubuntu2) precise; urgency=low
* debian/patches/upstream_changeset_4608.patch: use nfreeze() since it gets
stored in a file (LP: #872217)
-- Vibhav Pant <email address hidden> Fri, 23 Mar 2012 08:36:18 +0530
-
munin (1.4.6-3ubuntu1) precise; urgency=low
* Merge from Debian testing. Remaining changes:
- debian/rules: Remove sysvinit symlinks.
- debian/control: Add libwww-perl as a dependency.
- debian/rules, debian/munin-node.upstart. Convert to upstart.
- Fix sensors_fan for sensors output without minimum values
(LP: #840449).
- debian/patches/lp_840449_sensors_fan_minimum_is_optional.patch
Fix "mysql_ plugin fails when MySQL compiled without INNODB"
(LP: #757617)
- debian/patches/upstream_bug_884_fixed_in_trunk.patch
Fix munin_stats plugin: missing newline in "config"
(LP: #830564).
- debian/patches/upstream_bug_937_fixed_in_trunk.patch
Fix postfix_mailvolume when logfile is missing
(LP: #800845).
munin (1.4.6-3) unstable; urgency=low
* Update maintainer address to <email address hidden>.
* Add Steve Schnepp to uploaders.
* Remove Tore Anderson, Dagfinn Ilmari Mannsaker, Loic Dachary and Matthias
Schmitz from uploaders. Thanks for all your work!
* munin/postrm: only delete /etc/apache2/conf.d/munin on purge.
(Closes: #653596) - Sadly the fix will only be effective the next time
munin is upgraded...
-- Chuck Short <email address hidden> Mon, 06 Feb 2012 09:04:43 -0500
-
munin (1.4.6-2ubuntu2) precise; urgency=low
* Fix sensors_fan for sensors output without minimum values
(LP: #840449).
- debian/patches/lp_840449_sensors_fan_minimum_is_optional.patch
* Fix "mysql_ plugin fails when MySQL compiled without INNODB"
(LP: #757617)
- debian/patches/upstream_bug_884_fixed_in_trunk.patch
* Fix munin_stats plugin: missing newline in "config"
(LP: #830564).
- debian/patches/upstream_bug_937_fixed_in_trunk.patch
* Fix postfix_mailvolume when logfile is missing
(LP: #800845).
-- Chuck Short <email address hidden> Fri, 06 Jan 2012 08:54:54 -0500
-
munin (1.4.6-2ubuntu1) precise; urgency=low
* Merge from Debian testing. Remaining changes:
- debian/rules: Remove sysvinit symlinks.
- debian/control: Add libwww-perl as a dependency.
- debian/rules, debian/munin-node.upstart. Convert to upstart
- debian/patches/upstream_add-timeout-to-legal-options.patch
- debian/patches/upstream_bug_832.patch
munin (1.4.6-2) unstable; urgency=high
* Add logrotate rule for /var/log/munin/munin-cgi-graph.log. Thanks to
Jerome Warnier for the patch. (Closes: #647302)
* Register an interest in the perl-major-upgrade trigger, and
recompile rules and restart munin-node when perl is upgraded to a new
major version. Thanks to Dominic Hargreaves for this nice new feature.
(Closes: #626346)
-- Chuck Short <email address hidden> Tue, 22 Nov 2011 06:15:06 +0000
-
munin (1.4.6-1ubuntu3) precise; urgency=low
* debian/patches/upstream_bug_832.patch: Re-add.
(LP: #879853)
-- Chuck Short <email address hidden> Tue, 15 Nov 2011 22:04:10 -0500
-
munin (1.4.6-1ubuntu2) precise; urgency=low
* debian/patches/upstream_add-timeout-to-legal-options.patch:
Re-add dropped patch. (LP: #879853)
-- Chuck Short <email address hidden> Fri, 28 Oct 2011 13:16:28 -0400
-
munin (1.4.6-1ubuntu1) precise; urgency=low
* Merge from debian unstable. Remaining changes:
- debian/rules: Remove sysvinit symlinks.
- debian/control: Add libwww-perl as a dependency.
- debian/rules, debian/munin-node.upstart. Convert to upstart
+ Dropped:
- upstream_bug-975-fixed-in-1.4.6.patch
- pstream_bug_952.patch
- upstream_add-timeout-to-legal-options.patch
- upstream_bug_832.patch
- upstream_bug_1009.patch
munin (1.4.6-1) unstable; urgency=low
* New upstream release (Closes: #639745), closing several bugs
in munin:
- "munin-limits hangs when more than one contact is used"
(Closes: #553528)
- cgi/fastcgi: Use GMT time zone in Last-Modeader (Closes: #601200)
- include patch to fix empty list of plugins (Closes: #609241)
and in munin-node:
- bind9_rndc plugin: version number gate fails (Closes: #573750)
- bind9 plugin: doesn't work at all (Closes: #612108)
- cidr_allow does not assume implicit /32 (Closes: #592842)
↝- make slapd_ autoconf work, support anonymous bind, and env.server
variable (Closes: #596026)
- exim munin does weird things (Closes: #601505)
- Use selective tls per node in munin master (Closes: #615226)
- IPv6 functionality in ip_ plugin assumes /bin/sh being bash
(Closes: #613029)
Also drop debian/patches/102-snort-bashism.patch as this is included
upstream now.
* munin.postinst: only create link from /etc/munin/apache.conf to
/etc/apache2/conf.d/munin on new installations, not on upgrades.
(Closes: #619399)
* Bump standards-version to 3.9.1, no changes necessary.
* Split uploaders field in debian/control in multiple lines.
* Add build-arch and build-indep targets to debian/rules.
-- Chuck Short <email address hidden> Tue, 30 Aug 2011 23:41:09 +0000
-
munin (1.4.5-3ubuntu4) natty; urgency=low
* debian/patches/upstream_bug_1009.patch: Backport
ipv6 patch. (LP: #713646)
-- Chuck Short <email address hidden> Tue, 05 Apr 2011 14:57:44 -0400
