RRDtool 1.4.8 fixes #663505.

[pkg-rrdtool.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 20e6218534a958b30ed607f0b6b37bdda43138d0..8d80086ce6fcf574faaaf1de237f40e216ff0f80 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,7 +1,27 @@
-rrdtool (1.4.7-3) UNRELEASED; urgency=low
+rrdtool (1.4.8-1) UNRELEASED; urgency=medium
 
+  [ Sebastian Harl ]
+  * New upstream release; thanks to Alin Dobre for reporting this and
+    providing various patches (Closes: #726159):
+    - Fixed the xport JSON output format; thanks to Thomas Mainka for
+      reporting this (Closes: #686825).
+    - Fixed a segfault in rrdcached when using -j on non-existent directories;
+      thanks to Witold Baryluk for reporting this (Closes: #663505).
   * Fixed changelog of 1.4.7-2 regarding the versioned build-dep on tcl-dev.
   * Merged 1.4.7-2.1 NMU; thanks to Christian Hofstaedtler (Closes: 736333).
+  * debian/patches:
+    - Added CVE-2013-2131; upstream patch fixing a format string vulnerability
+      in rrdgraph; thanks to Henri Salo for reporting this (Closes: #708866).
+      Raised urgency to medium for this.
+  * debian/control:
+    - Optionally recommend fonts-dejavu-core as (the preferred) alternative to
+      ttf-dejavu-core; thanks to Martin-Éric Racine for reporting this
+      (Closes: #743947).
+
+  [ Alin Dobre ]
+  * debian/patches:
+    - Removed bts664724-rrdcached-j-segfault, ruby_bindings_format_string,
+      and tcl-8.5 which were applied upstream.
 
  -- Sebastian Harl <tokkee@debian.org>  Sat, 18 Aug 2012 15:53:54 +0200