X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=debian%2Fchangelog;h=b6943d2e2223ff5047a289e6d17cd6d887c4cd85;hb=5d743f8e686e86eaf108673c422a2224e5b52979;hp=ab7a77289322b5eb902beac4d169b3402e1bcb67;hpb=45fbcdcb2e1b144e06b6eb02403dcc7734a8e628;p=pkg-collectd.git diff --git a/debian/changelog b/debian/changelog index ab7a772..b6943d2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,255 @@ +collectd (5.8.0-1) UNRELEASED; urgency=medium + + * New upstream release. (Closes: #881757, CVE-2017-16820) + * Enable the grpc plugin, libgrpc++ is now available. + * Enable the intel_rdt plugin, libpqos is now available. + * Re-enable the varnish plugin, support for varnish 5.2 now implemented. + * Disable the lvm plugin, liblvm2app being deprecated. (Closes: #881641) + * debian/patches: + - Added i2c_detection.patch; needed to build against libi2c-4.0. Thanks to + Christian Ehrhardt fo reporting this problem and Andreas Hasenack for + providing a patch. + (Closes: #886920) + - Added rd_kafka_last_error.patch; needed to build against + librdkafka-0.11.0. Thanks to Pavel Rochnyack for providing a patch. + - Removed dpdk-pkg-config.patch; included upstream. + - Removed libcollectdclient_error_buffer.patch; inclued upstream. + - Removed local-msr-index-h.patch; included upstream. + - Removed write_mongodb.patch; included upstream. + + -- Marc Fournier Wed, 21 Feb 2018 07:02:01 +0100 + +collectd (5.7.2-2) unstable; urgency=medium + + [ Luca Boccassi ] + * debian/patches: + - Add dpdk-pkg-config.patch: Backport upstream patch to build DPDK with + pkg-config. This allows DPDK in Debian to fix an upstream multi-arch + issue, where arch-dependents headers are installed in /usr/include + breaking multi-arch co-installability of libdpdk-dev. (Closes: #872482) + + [ Sebastian Harl ] + * Disable the sigrok plugin for now; it's not compatible with libsigrok4; + thanks to Adrian Bunk for reporting this (Closes: #878348). + * Enable the write_mongodb plugin, libmongoc is now available. Thanks to + Saikrishna Arcot for reporting this (Closes: #858315). + - Add write_mongodb.patch to update the plugin to the most recent upstream + version to bring it up to date with Debian's libmongoc and fix some + other issues. + * Update to standards-version 4.1.1: + - Build depend on debhelper (>= 9.20160709~) instead of dh-systemd. + - Use priority "optional" instead of deprecated priority "extra". + * Disable the varnish plugin for now. collectd FTBFS against varnish 5.2. + Cf. https://github.com/collectd/collectd/issues/2498 and #879471. + + -- Sebastian Harl Sun, 22 Oct 2017 00:37:19 +0200 + +collectd (5.7.2-1) unstable; urgency=medium + + * New upstream release. + - Fix potential endless-loop in the network plugin, which can be triggered + remotely by sending a crafted UDP packet (Closes: #859494, + CVE-2017-7401). + * debian/patches: + - drop dpdkstat_goto_label.patch; included upstream. + - drop drop_lssl_lcrypto_from_linking.patch; included upstream. + - drop mqtt_invalid_symbols.patch; included upstream. + - drop mqtt_resource_leak.patch; included upstream. + - add libcollectdclient_error_buffer.patch, fixing a build error with + GCC 7 (Closes: #871062). Thanks to Steve Langasek and Ruben Kerkhof. + - add local-msr-index-h.patch, bundling a header file removed from 4.12+ + kernels (Closes: #872276). Thanks to Steve Langasek. + + -- Marc Fournier Wed, 23 Aug 2017 18:10:47 +0200 + +collectd (5.7.1-1.1) unstable; urgency=medium + + * Non-maintainer upload. + * Drop -ssl -lcrypto from linking (openssl's functionality is not used by + collectd). Add drop_lssl_lcrypto_from_linking.patch (Closes: #852924). + + -- Sebastian Andrzej Siewior Sun, 05 Feb 2017 20:40:33 +0100 + +collectd (5.7.1-1) unstable; urgency=medium + + * New upstream release. + * debian/patches: + - drop dpdkstat-portable-format-string.patch, included upstream. + - add mqtt_resource_leak.patch, fixing a connection leak. + - add mqtt_invalid_symbols.patch, stripping out invalid characters from + MQTT topic names. + - add dpdkstat_goto_label.patch, fixing a small mistake which prevented + the dpdkstat from building. + + -- Marc Fournier Mon, 23 Jan 2017 20:45:34 +0100 + +collectd (5.7.0-3) unstable; urgency=medium + + * debian/control: Skip libdpdk-dev build dependency on non-Intel + architectures. + + -- Marc Fournier Sun, 18 Dec 2016 22:08:27 +0100 + +collectd (5.7.0-2) unstable; urgency=medium + + * debian/patches: add dpdkstat-portable-format-string.patch, fixing the + build on i386. + * debian/rules: Disable dpdkstat plugin on non-Intel architectures. + + -- Marc Fournier Sun, 18 Dec 2016 17:05:10 +0100 + +collectd (5.7.0-1) unstable; urgency=medium + + * New upstream release. + New plugins: + - DPDK interface statistics: dpdkstat + - Report the number of used and free hugepages: hugepages (Linux-specific) + - Intel Resource Director Technology statistics: intel_rdt (disabled in + Debian because of missing dependencies) + - Publish values in a Prometheus-compatible format: write_prometheus + * debian/rules: + - Disable hugepages plugin on non-Linux. + - Disable the intel_rdt plugin. + * debian/control: + - Build-depend on libdpdk-dev: Needed by the new dpdkstat plugin. + - Build-depend on libmicrohttpd-dev: Needed by the new write_prometheus + plugin. + - Suggests icinga instead of nagios packages (nagios3 removed from + Debian. Closes: #846859). Thanks to Bas Couwenberg. + * debian/patches: + - Removed configure_find_lc_all.patch; included upstream. + - Added nagios-debian-paths.patch, to use nagios-nrpe-server & + monitoring-plugin paths for Debian. Thanks to Bas Couwenberg. + + -- Marc Fournier Fri, 16 Dec 2016 22:11:21 +0100 + +collectd (5.6.1-2) unstable; urgency=medium + + * debian/control: + - Add libdevstat-dev and libgeom-dev to kfreebsd build-deps, as they're + needed by the disk plugin. Thanks to Florian Forster for pointing this + out. + - Update "Vcs-Git" and "Vcs-Browser" fields to point to GitHub repo. + - Changed build-dependency libmysqlclient-dev to + default-libmysqlclient-dev, and mysql-server to default-mysql-server. + - collectd-core.deb: Add "Depends" on lsb-base, as /etc/init.d/collectd + requires /lib/lsb/init-functions. + - Remove "Multi-Arch: same" from libcollectdclient-dev, until the package + gets reworked to really be multi-arch ready. + * debian/control, debian/compat: + - Bump debhelper compat version to 9. + + -- Marc Fournier Tue, 01 Nov 2016 07:32:47 +0100 + +collectd (5.6.1-1) unstable; urgency=medium + + * New upstream release. + - write_graphite plugin is no longer linked against libyajl. Thanks to + Shish for reporting this (Closes: #839771). + - rrdcached plugin now reconnects to daemon. Thanks to Matthias Urlichs + for reporting this (Closes: #657877). + * debian/control: + - Add "Multi-Arch: same" to libcollectdclient-dev, as suggested by the + Multiarch hinter. + * debian/patches: + - Update configure_find_lc_all.patch to reliably pick the same JVM for + each build, making the process reproducible. + * debian/rules: + - Disable building the barometer, drbd, fhcount and ipc plugins on + kfreebsd architectures, as they are Linux-only. + - Run the test suite using dh_auto_test. + + -- Marc Fournier Sun, 09 Oct 2016 21:42:29 +0200 + +collectd (5.6.0-1) unstable; urgency=medium + + * New upstream release. + - The disk plugin now supports FreeBSD; enable it in debian/rules. + - Suppress spammy debug messages; thanks to Antonio Russo for reporting + this (Closes: #797687). + New plugins: + - Chrony daemon statistics: chrony + - CPU sleep: Time spent in suspend: cpusleep (Linux-specific) + - Monitor gps related data through gpsd: gps + - Send or receive values over the network using the gRPC framework: grpc + (disabled in Debian because of missing dependencies) + - Lua interpreter embedded into collectd: lua + - Publishes and subscribes to MQTT topics: mqtt + - Submit notifications as passive check results to a local nagios + instance: notify_nagios + - XEN Hypervisor CPU stats: xencpu + - Solaris zone metrics: zone (disabled in Debian; Solaris specific) + * debian/rules: + - Disable cpusleep plugin on non-Linux. + - Disable xencpu plugin except on amd64, arm64, armhf, and i386. + - Disable the zone plugin. + - Do not cripple include files in collectd-dev when patching them; thanks + to Scott Talbert for reporting this (Closes: #827759). + * debian/control: + - Build-depend on libgps-dev: Needed by the new gps plugin. + - Build-depend on liblua5.3-dev: Needed by the new lua plugin. + - Build-depend on libmosquitto-dev: Needed by the new mqtt plugin. + - Build-depend on libxen-dev [amd64 arm64 armhf i386]: Needed by the new + xencpu plugin. + - Build-depend on libriemann-client-dev, riemann-c-client: Now needed by + the riemann plugin. + * debian/patches: + - Removed bts832577-gcry-control.patch; included upstream. + - Removed gcc6.patch; included upstream. + + -- Sebastian Harl Sat, 24 Sep 2016 15:19:10 +0200 + +collectd (5.5.2-2) unstable; urgency=low + + * debian/changelog: + - Set urgency back to low. + * debian/control: + - Update GCrypt's package name to libgcrypt20-dev. + * debian/patches: + - Added configure_find_lc_all.patch: forcing locale in configure script + will hopefully fix build reproducibility on non-amd64 plafroms. + + -- Marc Fournier Wed, 21 Sep 2016 14:01:55 +0200 + +collectd (5.5.2-1) unstable; urgency=high + + * New upstream release. + - Fix heap overflow in the network plugin. Emilien Gaspar has identified a + heap overflow in parse_packet(), the function used by the network plugin + to parse incoming network packets. Thanks to Florian Forster for + reporting the bug in Debian. (Closes: #832507, CVE-2016-6254) + - Fix improper usage of gcry_control. A team of security researchers at + Columbia University and the University of Virginia discovered that + GCrypt's gcry_control is sometimes called without checking its return + value for an error. This may cause the program to be initialized without + the desired, secure settings. (Closes: #832577) + * debian/patches: + - bts832577-gcry-control.patch: Update for 5.5.2. Mostly part of the new + upstream release, except for: Don't abort() if gcrypt initialization + failed. + - Drop bts823012_librrd8.patch; merged upstream. + * Rebuild with linux-libc-dev >= 4.6 (now in testing and unstable) to + accommodate a change to rtnl_link_stats64. Thanks to Gábor Gombás for + reporting this (Closes: #829634). + + -- Sebastian Harl Fri, 29 Jul 2016 00:02:11 +0200 + +collectd (5.5.1-5) unstable; urgency=low + + * debian/control, debian/rules: + - Disable the sigrok plugin on non-Linux; restrict build dependency to + linux-any; thanks to Andreas Beckmann for reporting this + (Closes: #825606). + * debian/rules: + - Fix failure to build twice in a row introduced by dh_autoreconf_clean; + drop the separate config.status target and, hence, a dependency on the + configure script. + * debian/patches/: + - Added gcc6.patch: Fix FTBFS with GCC 6; thanks to Lucas Nussbaum for + reporting this (Closes: #831194). + + -- Sebastian Harl Sun, 17 Jul 2016 23:30:33 +0200 + collectd (5.5.1-4) unstable; urgency=medium * debian/control: @@ -158,6 +410,22 @@ collectd (5.5.0-1) unstable; urgency=medium -- Marc Fournier Fri, 21 Aug 2015 13:29:17 +0200 +collectd (5.4.1-6+deb8u1) jessie-security; urgency=high + + * debian/patches/CVE-2016-6254.dpatch: Fix heap overflow in the network + plugin. Emilien Gaspar has identified a heap overflow in parse_packet(), + the function used by the network plugin to parse incoming network packets. + Thanks to Florian Forster for reporting the bug in Debian. + (Closes: #832507, CVE-2016-6254) + * debian/patches/bts832577-gcry-control.dpatch: Fix improper usage of + gcry_control. A team of security researchers at Columbia University and + the University of Virginia discovered that GCrypt's gcry_control is + sometimes called without checking its return value for an error. This may + cause the program to be initialized without the desired, secure settings. + (Closes: #832577) + + -- Sebastian Harl Thu, 28 Jul 2016 22:25:08 +0200 + collectd (5.4.1-6) unstable; urgency=medium * debian/patches: @@ -444,6 +712,22 @@ collectd (5.1.0-3.1) unstable; urgency=low -- gregor herrmann Sun, 26 May 2013 00:52:37 +0200 +collectd (5.1.0-3+deb7u1) wheezy-security; urgency=high + + * debian/patches/CVE-2016-6254.dpatch: Fix heap overflow in the network + plugin. Emilien Gaspar has identified a heap overflow in parse_packet(), + the function used by the network plugin to parse incoming network packets. + Thanks to Florian Forster for reporting the bug in Debian. + (Closes: #832507, CVE-2016-6254) + * debian/patches/bts832577-gcry-control.dpatch: Fix improper usage of + gcry_control. A team of security researchers at Columbia University and + the University of Virginia discovered that GCrypt's gcry_control is + sometimes called without checking its return value for an error. This may + cause the program to be initialized without the desired, secure settings. + (Closes: #832577) + + -- Sebastian Harl Thu, 28 Jul 2016 20:52:12 +0200 + collectd (5.1.0-3) unstable; urgency=low * debian/patches/migrate-4-5-df.dpatch, debian/collectd-core.postinst: