[ubuntu/raring-proposed] munin 2.0.9-1ubuntu1 (Accepted)

Jeremy Bicha jbicha at ubuntu.com
Thu Dec 13 22:50:15 UTC 2012


munin (2.0.9-1ubuntu1) raring; urgency=low

  * Merge from Debian unstable (LP: #1089218). Remaining changes:
    - d/munin-node.upstart,munin.upstart: Add upstart configurations.
    - debian/patches/fix_ran_out_of_children.patch:
      + Fix occasional "Ran out of children: No child processes" error messages
        (LP: #1009357).

munin (2.0.9-1) experimental; urgency=low

  * New upstream bugfix release(s).
    - Drop all debian/patches/ (except 100-DejaVu-Fonts-Path.patch) as they
      were included in 2.0.7-2.0.9.
  * Remove libcgi-fast-perl from munin's depends.
  * Add libapache2-mod-fcgid to munin's suggests.
  * Support libapache2-mod-fcgid in /etc/munin/apache.conf out of the box
    (Closes: #695228), remove configuration for libapache2-mod-fastcgi as it's
    non-free.
  * debian/rules: set MUNIN_VERSION correctly during build. (Closes: #694527)

munin (2.0.6-2) UNRELEASED; urgency=low

  * munin-node.postinst: delete /var/lib/munin(-node)/plugin-state recursively
    on purge. The plugin-state is outdated after a few minutes anyway.
    (Closes: #687715)
  * Fix "/etc/apache2/conf.d/munin removed on upgrade":
    - debian/munin.postinst: create symlink for new installs and also for
      upgrades from versions where it was still removed (up to 1.4.6-3) but
      not re-created (from 1.4.6-1 onwards). Thanks to Gregor Herrman for the
      patch and intrigeri for reviewing. (Closes: #677943)
  * Add documentation for munin-async, thanks to Daniel Black.
    (Closes: #681803)
  * Patch node/munin-node.conf.in to allow incoming IPv6 from localhost,
    mostly to document that IPv6 addresses are allowed as well. Thanks to
    Daniel Black. (Closes: #676798)
    This is debian/patches/238-munin-node-ipv6allow.patch
  * HTMLConfig.pm: cherry-pick 789c59e from 2.0.7 to avoid (using the default
    configuration) /var/log/munin/munin-html.log being flooded with 106 lines
    of noisy warnings (out of 112 lines in total) every 5min. (Closes: #689291)
    This is debian/patches/239-fix-too-many-warnings-in-munin-graph.log.patch
  * munin-doc: Break and replace munin-common << 2. (Closes: #694355)
  * selinux_avcstat plugin: Do not use the "read without variable" bashism,
    thanks to intrigeri for the patch. (Closes: #690711)
    This is 240-Do-not-use-the-read-without-variable-bashism.patch
  * Have master support multi-homed nodes that only listen on IPv4.
    (Closes: #678662) This is upstream commit a18229c5, thanks to Michael
    Renner for the testing and the patch!
    This is debian/patches/241-master-connect-to-AAAA-and-A-address.patch
  * Fix wrong assumption about Net::SSLeay::CTX_set_options return value.
    Thanks to intrigeri for this patch. (Closes: #675377)
    This is 242-Fix-wrong-assumption-about-Net-SSLeay-CTX_set_option.patch
  * http_loadtime plugin: fix stderr redirection (which broke the plugin
    completely) (Closes: #691448)
    This is 243-http_loadtime-fixed-stderr-redirection-with-time.patch
  * apt_all plugin: the apt_all plugin has its state updated in cron. There
    the ENV var MUNIN_PLUGSTATE doesn't exist, so we need to set a default.
    (Closes: #687495). This has been in included in 2.0.7 and is
    debian/patches/244-fix-apt_all-plugin-statedir-for-cron.patch
  * munin-async.init: Run munin-async after munin-node has been started.
    (Closes: #691390) - Thanks to Daniel Black for this and the next two
    fixes:
  * munin-async.postinst: fix /var/lib/munin-async ownership (once on upgrades
    from previous versions) and for new installs. (Closes: #691309)
  * munin-async.logrotate: correct location of munin-async logfiles.
    (Closes: #691758)
  * Use dh --with quilt so that the patches are actually applied.
    (Closes: #691327)
  * Drop 101-suppress-occasional-unknown-states-to-avoid-alerts.patch which
    is included since munin 1.4.4.

munin (2.0.6-1) unstable; urgency=high

  * New upstream release 2.0.6, switching back to cron graphing (as it better
    for small setups) and besides that only containing bugfixes, but many of
    them. See the upstream ChangeLog for the full list.
    - munin-node: more secure state file handling, introducing a new plugin
      state directory root, owned by uid 0. Then each plugin runs in its own
      UID plugin state directory, owned by the said UID. (Closes: #684075),
      (Closes: #679897), closes CVE-2012-3512.
      So all properly written plugins will use
      /var/lib/munin-node/plugin-state/$uid/$some_file now - please report
      plugins that are still using /var/lib/munin/plugin-state/ - as those
      might pose a security risk!
    - munin-cgi-graph: ignore @ARGV to fix CVE-2012-3513 (Closes: #684076),
      thanks to Helmut Grohne <helmut at subdivi.de>
    - munin-cron: call munin-graph with --cron argument (Closes: #685343)
    - Master/Node.pm: fix _node_read_fast() to accept all valid returns
      (Closes: #686089) and _do_connect() to not use an uninitialized
      variable. (Closes: #686090)
    - munin-async: make spoolread less restrictive about (valid) plugin names
      (Closes: #686093)
  * Update Location and Scriptalias in shipped apache.conf to fix a regression
    introduced in fixing #682869.
  * munin-node.postinst: don't create /var/lib/munin/plugin-state anymore as
    munin-node now uses /var/lib/munin-nodes/plugin-state and subdirs and
    handles creation by itself.
  * debian/rules: workaround bug in upstream Makefile targets to move
    /var/lib/async from munin-node package to munin-async.
  * debian/control:
    - make munin-async depend on munin-node for now.
    - update Vcs: headers to point to an uptodate repository.
  * Remove build/resources/apache-cgi.conf from munin.docs as it's outdated.
  * update munin.NEWS to reflect that everybody using cgi graphing needs to
    update the configuration files and that cron graphing is the default
    again. (cgi graphing was the default from pre-2.0 until 2.0.5)

munin (2.0.5-1) unstable; urgency=low

  [ Holger Levsen ]
  * New upstream versions, fixing lots of bugs (including a regression in
    munin-cgi-graph preventing it from caching at all (Closes: #683064))
    and adding documentation and manpages.  See upstream ChangeLog for the
    full list.
  * Remove workaround  concerning java-plugins (667493) in debian/rules
    as upstream has fixed this in e7e29c4 in 2.0.3.
  * munin-async.init:
    - run munin-async as munin-async user (Closes: #684171)
    - use stop function from munin-node.init to make it actually stop it
      (Closes: #684170). In the future we should replace both initscripts with
      saner rewrites.

  [ Helmut Grohne ]
  * Move cgi scripts to /usr/lib/munin/cgi. (Closes: #682869)

Date: Thu, 13 Dec 2012 23:44:14 +0100
Changed-By: Jeremy Bicha <jbicha at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Benjamin Drung <bdrung at debian.org>
https://launchpad.net/ubuntu/raring/+source/munin/2.0.9-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Dec 2012 23:44:14 +0100
Source: munin
Binary: munin-node munin-plugins-core munin-plugins-extra munin-plugins-java munin munin-common munin-async munin-doc
Architecture: source
Version: 2.0.9-1ubuntu1
Distribution: raring
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jeremy Bicha <jbicha at ubuntu.com>
Description: 
 munin      - network-wide graphing framework (grapher/gatherer)
 munin-async - network-wide graphing framework (async master/client)
 munin-common - network-wide graphing framework (common)
 munin-doc  - network-wide graphing framework (documentation)
 munin-node - network-wide graphing framework (node)
 munin-plugins-core - network-wide graphing framework (plugins for node)
 munin-plugins-extra - network-wide graphing framework (user contributed plugins for nod
 munin-plugins-java - network-wide graphing framework (java plugins for node)
Closes: 675377 676798 677943 678662 679897 681803 682869 683064 684075 684076 684170 684171 685343 686089 686090 686093 687495 687715 689291 690711 691309 691327 691390 691448 691758 694355 694527 695228
Launchpad-Bugs-Fixed: 1009357 1089218
Changes: 
 munin (2.0.9-1ubuntu1) raring; urgency=low
 .
   * Merge from Debian unstable (LP: #1089218). Remaining changes:
     - d/munin-node.upstart,munin.upstart: Add upstart configurations.
     - debian/patches/fix_ran_out_of_children.patch:
       + Fix occasional "Ran out of children: No child processes" error messages
         (LP: #1009357).
 .
 munin (2.0.9-1) experimental; urgency=low
 .
   * New upstream bugfix release(s).
     - Drop all debian/patches/ (except 100-DejaVu-Fonts-Path.patch) as they
       were included in 2.0.7-2.0.9.
   * Remove libcgi-fast-perl from munin's depends.
   * Add libapache2-mod-fcgid to munin's suggests.
   * Support libapache2-mod-fcgid in /etc/munin/apache.conf out of the box
     (Closes: #695228), remove configuration for libapache2-mod-fastcgi as it's
     non-free.
   * debian/rules: set MUNIN_VERSION correctly during build. (Closes: #694527)
 .
 munin (2.0.6-2) UNRELEASED; urgency=low
 .
   * munin-node.postinst: delete /var/lib/munin(-node)/plugin-state recursively
     on purge. The plugin-state is outdated after a few minutes anyway.
     (Closes: #687715)
   * Fix "/etc/apache2/conf.d/munin removed on upgrade":
     - debian/munin.postinst: create symlink for new installs and also for
       upgrades from versions where it was still removed (up to 1.4.6-3) but
       not re-created (from 1.4.6-1 onwards). Thanks to Gregor Herrman for the
       patch and intrigeri for reviewing. (Closes: #677943)
   * Add documentation for munin-async, thanks to Daniel Black.
     (Closes: #681803)
   * Patch node/munin-node.conf.in to allow incoming IPv6 from localhost,
     mostly to document that IPv6 addresses are allowed as well. Thanks to
     Daniel Black. (Closes: #676798)
     This is debian/patches/238-munin-node-ipv6allow.patch
   * HTMLConfig.pm: cherry-pick 789c59e from 2.0.7 to avoid (using the default
     configuration) /var/log/munin/munin-html.log being flooded with 106 lines
     of noisy warnings (out of 112 lines in total) every 5min. (Closes: #689291)
     This is debian/patches/239-fix-too-many-warnings-in-munin-graph.log.patch
   * munin-doc: Break and replace munin-common << 2. (Closes: #694355)
   * selinux_avcstat plugin: Do not use the "read without variable" bashism,
     thanks to intrigeri for the patch. (Closes: #690711)
     This is 240-Do-not-use-the-read-without-variable-bashism.patch
   * Have master support multi-homed nodes that only listen on IPv4.
     (Closes: #678662) This is upstream commit a18229c5, thanks to Michael
     Renner for the testing and the patch!
     This is debian/patches/241-master-connect-to-AAAA-and-A-address.patch
   * Fix wrong assumption about Net::SSLeay::CTX_set_options return value.
     Thanks to intrigeri for this patch. (Closes: #675377)
     This is 242-Fix-wrong-assumption-about-Net-SSLeay-CTX_set_option.patch
   * http_loadtime plugin: fix stderr redirection (which broke the plugin
     completely) (Closes: #691448)
     This is 243-http_loadtime-fixed-stderr-redirection-with-time.patch
   * apt_all plugin: the apt_all plugin has its state updated in cron. There
     the ENV var MUNIN_PLUGSTATE doesn't exist, so we need to set a default.
     (Closes: #687495). This has been in included in 2.0.7 and is
     debian/patches/244-fix-apt_all-plugin-statedir-for-cron.patch
   * munin-async.init: Run munin-async after munin-node has been started.
     (Closes: #691390) - Thanks to Daniel Black for this and the next two
     fixes:
   * munin-async.postinst: fix /var/lib/munin-async ownership (once on upgrades
     from previous versions) and for new installs. (Closes: #691309)
   * munin-async.logrotate: correct location of munin-async logfiles.
     (Closes: #691758)
   * Use dh --with quilt so that the patches are actually applied.
     (Closes: #691327)
   * Drop 101-suppress-occasional-unknown-states-to-avoid-alerts.patch which
     is included since munin 1.4.4.
 .
 munin (2.0.6-1) unstable; urgency=high
 .
   * New upstream release 2.0.6, switching back to cron graphing (as it better
     for small setups) and besides that only containing bugfixes, but many of
     them. See the upstream ChangeLog for the full list.
     - munin-node: more secure state file handling, introducing a new plugin
       state directory root, owned by uid 0. Then each plugin runs in its own
       UID plugin state directory, owned by the said UID. (Closes: #684075),
       (Closes: #679897), closes CVE-2012-3512.
       So all properly written plugins will use
       /var/lib/munin-node/plugin-state/$uid/$some_file now - please report
       plugins that are still using /var/lib/munin/plugin-state/ - as those
       might pose a security risk!
     - munin-cgi-graph: ignore @ARGV to fix CVE-2012-3513 (Closes: #684076),
       thanks to Helmut Grohne <helmut at subdivi.de>
     - munin-cron: call munin-graph with --cron argument (Closes: #685343)
     - Master/Node.pm: fix _node_read_fast() to accept all valid returns
       (Closes: #686089) and _do_connect() to not use an uninitialized
       variable. (Closes: #686090)
     - munin-async: make spoolread less restrictive about (valid) plugin names
       (Closes: #686093)
   * Update Location and Scriptalias in shipped apache.conf to fix a regression
     introduced in fixing #682869.
   * munin-node.postinst: don't create /var/lib/munin/plugin-state anymore as
     munin-node now uses /var/lib/munin-nodes/plugin-state and subdirs and
     handles creation by itself.
   * debian/rules: workaround bug in upstream Makefile targets to move
     /var/lib/async from munin-node package to munin-async.
   * debian/control:
     - make munin-async depend on munin-node for now.
     - update Vcs: headers to point to an uptodate repository.
   * Remove build/resources/apache-cgi.conf from munin.docs as it's outdated.
   * update munin.NEWS to reflect that everybody using cgi graphing needs to
     update the configuration files and that cron graphing is the default
     again. (cgi graphing was the default from pre-2.0 until 2.0.5)
 .
 munin (2.0.5-1) unstable; urgency=low
 .
   [ Holger Levsen ]
   * New upstream versions, fixing lots of bugs (including a regression in
     munin-cgi-graph preventing it from caching at all (Closes: #683064))
     and adding documentation and manpages.  See upstream ChangeLog for the
     full list.
   * Remove workaround  concerning java-plugins (667493) in debian/rules
     as upstream has fixed this in e7e29c4 in 2.0.3.
   * munin-async.init:
     - run munin-async as munin-async user (Closes: #684171)
     - use stop function from munin-node.init to make it actually stop it
       (Closes: #684170). In the future we should replace both initscripts with
       saner rewrites.
 .
   [ Helmut Grohne ]
   * Move cgi scripts to /usr/lib/munin/cgi. (Closes: #682869)
Checksums-Sha1: 
 ba4d9f5e467a69036baeed916dc481c8e58d7220 2477 munin_2.0.9-1ubuntu1.dsc
 4145231e5f65689d2e17692f1b133729bae1d539 1328972 munin_2.0.9.orig.tar.gz
 3effd8a27a61e756f206bfe018b496949e342eb7 53481 munin_2.0.9-1ubuntu1.diff.gz
Checksums-Sha256: 
 0d03a1b77e06778730ed8eb6ffeadcd3c368d9a1ac4e77550e70eb2fb3db801f 2477 munin_2.0.9-1ubuntu1.dsc
 6bb2b42de29a438ad80f1d6c53f4a35e9a74cb5a2103ea7a9530cba2d75c7309 1328972 munin_2.0.9.orig.tar.gz
 0d81e64ecb9841dcd8284d5392476ddc2b784821f837c3fcb34f3edcdcbb9ae9 53481 munin_2.0.9-1ubuntu1.diff.gz
Files: 
 41235c2edb609612335bba147a08168a 2477 net optional munin_2.0.9-1ubuntu1.dsc
 bcec945e070d09f2b7deb82dee347e0e 1328972 net optional munin_2.0.9.orig.tar.gz
 8240fed7a3543637d2c698763e24f0a4 53481 net optional munin_2.0.9-1ubuntu1.diff.gz
Original-Maintainer: Munin Debian Maintainers <packaging at munin-monitoring.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=RCO5
-----END PGP SIGNATURE-----


More information about the Raring-changes mailing list