lp:ubuntu/precise-security/munin

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

48. By Marc Deslauriers on 2013-12-18

* SECURITY UPDATE: multiple denial of service issues
  - debian/patches/CVE-2013-6xxx.patch: backport fixes from upstream to
    master/lib/Munin/Master/{HTMLOld,Node}.pm.
  - CVE-2013-6048
  - CVE-2013-6359

47. By Marc Deslauriers on 2012-10-17

* SECURITY UPDATE: symlink vulnerability in qmailscan plugin
  - debian/patches/CVE-2012-2103.patch: remove the use of tempfiles in
    plugins/node.d/qmailscan.in.
  - CVE-2012-2103
* SECURITY UPDATE: privilege escalation via root running plugins
  - debian/patches/CVE-2012-3512.patch: run each plugin in their own
    state directory in Makefile, Makefile.config,
    node/lib/Munin/Node/{OS,Service}.pm, plugins/lib/Munin/Plugin.pm,
    plugins/node.d/*.in,plugins/node.d.linux/*.in.
  - debian/patches/CVE-2012-3512-regression.patch: Don't rely on
    MUNIN_PLUGSTATE being in the environment as these scripts also get
    run by a cron job in plugins/node.d.linux/apt_all.in,
    plugins/node.d.linux/apt.in.
  - CVE-2012-3512
* debian/Makefile.config: added new plugin state directory location.
* debian/munin-node.{postinst,postrm}: Remove old plugin state directory
  override, also remove new plugin state directory.

46. By Vibhav Pant on 2012-05-21

* debian/patches/upstream_changeset_4597.patch
  - Fix incorrect graph configuration in munin plugin
    exim_mailqueue but switching AREA and STACK sections.
    Cherry picked patch from upstream VCS (LP: #598385).
* debian/patches/upstream_changeset_4358.patch
  - Fix broken memory usage data collection in memory plugin by
    silencing Perl 5.14 warnings.
    Cherry picked patch from upstream VCS (LP: #1000678).

45. By James Page on 2012-04-03

d/patches/fix_iostat_plugin.patch: Cherry picked patch from upstream
trunk to correct output of iostat plugin (LP: #919429).

44. By Vibhav Pant on 2012-03-23

debian/patches/upstream_changeset_4608.patch: use nfreeze() since it gets
stored in a file (LP: #872217)

43. By Chuck Short on 2012-02-06

* Merge from Debian testing. Remaining changes:
  - debian/rules: Remove sysvinit symlinks.
  - debian/control: Add libwww-perl as a dependency.
  - debian/rules, debian/munin-node.upstart. Convert to upstart.
  - Fix sensors_fan for sensors output without minimum values
    (LP: #840449).
  - debian/patches/lp_840449_sensors_fan_minimum_is_optional.patch
    Fix "mysql_ plugin fails when MySQL compiled without INNODB"
    (LP: #757617)
  - debian/patches/upstream_bug_884_fixed_in_trunk.patch
    Fix munin_stats plugin: missing newline in "config"
    (LP: #830564).
  - debian/patches/upstream_bug_937_fixed_in_trunk.patch
    Fix postfix_mailvolume when logfile is missing
    (LP: #800845).

42. By Chuck Short on 2012-01-06

* Fix sensors_fan for sensors output without minimum values
  (LP: #840449).
  - debian/patches/lp_840449_sensors_fan_minimum_is_optional.patch
* Fix "mysql_ plugin fails when MySQL compiled without INNODB"
  (LP: #757617)
  - debian/patches/upstream_bug_884_fixed_in_trunk.patch
* Fix munin_stats plugin: missing newline in "config"
  (LP: #830564).
  - debian/patches/upstream_bug_937_fixed_in_trunk.patch
* Fix postfix_mailvolume when logfile is missing
  (LP: #800845).

41. By Chuck Short on 2011-11-22

* Merge from Debian testing. Remaining changes:
  - debian/rules: Remove sysvinit symlinks.
  - debian/control: Add libwww-perl as a dependency.
  - debian/rules, debian/munin-node.upstart. Convert to upstart
  - debian/patches/upstream_add-timeout-to-legal-options.patch
  - debian/patches/upstream_bug_832.patch

40. By Chuck Short on 2011-11-15

debian/patches/upstream_bug_832.patch: Re-add.
(LP: #879853)

39. By Chuck Short on 2011-10-28

debian/patches/upstream_add-timeout-to-legal-options.patch:
Re-add dropped patch. (LP: #879853)