rrdtool (1.4.8-1) unstable; urgency=medium [ Sebastian Harl ] * New upstream release; thanks to Alin Dobre for reporting this and providing various patches (Closes: #726159): - Fixed the xport JSON output format; thanks to Thomas Mainka for reporting this (Closes: #686825). - Fixed a segfault in rrdcached when using -j on non-existent directories; thanks to Witold Baryluk for reporting this (Closes: #663505). - Fixed segfault in rrdgraph caused by int32 overflows; thanks to Matej Kosik for reporting this (Closes: #451852). * Fixed changelog of 1.4.7-2 regarding the versioned build-dep on tcl-dev. * Merged 1.4.7-2.1 NMU; thanks to Christian Hofstaedtler (Closes: 736333). * debian/patches: - Added CVE-2013-2131; upstream patch fixing a format string vulnerability in rrdgraph; thanks to Henri Salo for reporting this (Closes: #708866). Raised urgency to medium for this. * debian/patches, debian/rules, debian/control: - Added build_ldadd; patch Makefile to pass $ALL_LIBS to rrdcached's linker flags to ensure it's going to be linked against libglib. - Build-depend on and use dh-autoreconf to manage the build_ldadd patch. * debian/control: - Optionally recommend fonts-dejavu-core as (the preferred) alternative to ttf-dejavu-core; thanks to Martin-Éric Racine for reporting this (Closes: #743947). - Updated standards-version to 3.9.5 -- no changes. * debian/rules: - Clean up bindings/perl-shared/MYMETA.json. - Added INSTALL_BASE= to the perl options; else, the Perl libs end up in $HOME. [ Alin Dobre ] * debian/patches: - Removed bts664724-rrdcached-j-segfault, ruby_bindings_format_string, and tcl-8.5 which were applied upstream. -- Sebastian Harl <tokkee@debian.org> Sat, 26 Apr 2014 21:18:20 +0200