nagios4 (4.5.12+ds-1) unstable; urgency=low * New upstream release (4.5.12). * Repack upstream tarball via uscan/mk-origtargz, per Developer's Reference "The standard for repacked tarballs". Files-Excluded: in debian/copyright strips - html/js/jquery-*.min.js (replaced by a symlink to libjs-jquery's /usr/share/javascript/jquery/jquery.min.js at install time, so we never actually ship the bundled minified blob) - base/wpres-phash.h, base/wp-phash.c (gperf output; the former is regenerated from base/wpres.gperf at build time, the latter is upstream cruft no longer referenced by any build target). debian/watch grows `opts="repacksuffix=+ds,dversionmangle=auto"`. * Bump Standards-Version to 4.7.4. Declare Rules-Requires-Root: binary-targets to match the chown/chmod in debian/rules. * Build-Depends: - migrate `debhelper (>= 10)` to `debhelper-compat (= 13)` (drops debian/compat) - add libssl-dev (upstream 4.5.x now hard-requires OpenSSL headers at configure time) - add gperf (needed at build time to regenerate base/wpres-phash.h from base/wpres.gperf, since we stripped the pre-generated file via Files-Excluded:) * Audit upstream for phone-home / marketing / upsell content and rewrite the patches against 4.5.12: - 80_no_phone_home.patch (refreshed): strip the YouTube page-tour vidbox, "Check for updates" link, mainsplash CSP marketing div with utm_ tracking, and updateversioninfo block from html/main.php. - 81_no_update_api.patch (new): disable the daemon's 22-hour HTTP POST to api.nagios.org. Flips DEFAULT_CHECK_FOR_UPDATES to 0, sets check_for_updates=0 in sample nagios.cfg.in, and stubs query_update_api() in base/utils.c so no socket is opened regardless of config. - 82_no_tour_videos.patch (new): drop the "Nagios Core 4 Tour" YouTube vidbox emitted by cgi/tac.c, cgi/extinfo.c and cgi/status.c. The non-marketing #top_page_numbers append logic in status.c is kept. - 83_strip_marketing_links.patch (new): drop the navbar logo hyperlink to nagios.org in html/side.php; remove the library.nagios.com / support.nagios.com pointers from the Makefile.in install banner. - 84_replace_docs_index.patch (new): replace upstream's html/docs/index.html (a 534-char-paragraph redirect page to assets.nagios.com docs) with a small plain stub that points readers at the manpages. * nagios4-common: - drop the now-obsolete lsb-base (>= 3.0-6) dependency; /lib/lsb/init-functions is provided by sysvinit-utils on bookworm/trixie/sid. - add Pre-Depends: ${misc:Pre-Depends} for the systemd helper maintainer-script snippets generated by dh_installsystemd. - wire up dh_installsystemd --name nagios4 in debian/rules so the nagios4.service unit file is actually installed (it had been silently ignored under the explicit-dh_* rules). - harden nagios4.service: ProtectSystem=full, ProtectHome=true, PrivateTmp=true, ProtectKernelTunables/Modules/ControlGroups, RestrictSUIDSGID, LockPersonality, RestrictRealtime, RestrictNamespaces, SystemCallArchitectures=native. NoNewPrivileges is deliberately *not* set -- plugins like check_ping rely on /bin/ping's cap_net_raw file capability. * debian/copyright cleanup: - drop html/angularjs/* stanza (upstream removed angularjs) - drop lib/pqueue.[ch] stanza (upstream removed in 4.5.x) - drop the deprecated 51 Franklin St FSF mailing address - Format URI: http:// -> https:// * debian/nagios4-cgi.install: drop angularjs/, bootstrap-*, d3/ and spin/ paths (upstream removed those directories). * debian/nagios4-cgi.lintian-overrides: drop -- current lintian no longer emits the tag the overrides were suppressing. * debian/nagios4-common.lintian-overrides: rewrite using the current `tag detail [path]` syntax so the resource.cfg 0600 permissions override matches lintian's emission. * debian/nagios4-common.examples: drop the sample-config/template-object/{commands,localhost}.cfg entries (they were also shipped under examples/template-object/ via the .install file). * debian/{nagios4,nagios4stats}.8: rewrite the FILES section to drop the nested `.TP ; .IP path` sequence (sid's newer groff rejects nested .TP). * Maintainer scripts: switch `#!/bin/sh -e` shebang to `#!/bin/sh` followed by an explicit `set -e`. * Add a stub debian/upstream/metadata pointing at upstream's GitHub repository and issue tracker. * Modernise debian/watch: HTTPS via sf.net shortcut. Note: pgpsigurlmangle is not used because upstream does not publish detached OpenPGP signatures on GitHub or SourceForge. * debian/rules: strip trailing whitespace; delete base/wpres-phash.h in the configure step so make's `wpres-phash.h: wpres.gperf` rule fires (only matters for the now-extremely-unlikely case where some future Files-Excluded drift lets the file survive into the source). * debian/README.Debian: refresh the Documentation section -- point at the canonical upstream docs URL (https on assets.nagios.com, no marketing redirector) and replace the long-deprecated nagios-users@lists.sourceforge.net mailing list with the GitHub issue tracker. -- Russell Stuart Sun, 17 May 2026 17:00:00 +1000 nagios4 (4.4.6-4) unstable; urgency=low * Fix syntax in nagios4.service. Closes: #986397. -- Russell Stuart Wed, 7 Apr 2021 20:43:46 +1000 nagios4 (4.4.6-3) unstable; urgency=low * Fix nagios4-ci not installing with recommends. Closes: #985043. -- Russell Stuart Mon, 22 Mar 2021 12:10:04 +1000 nagios4 (4.4.6-2) unstable; urgency=low * Source only upload for migration to testing. -- Russell Stuart Mon, 23 Nov 2020 18:48:30 +1000 nagios4 (4.4.6-1) unstable; urgency=low * New release - fixes memory leak. * Fix bad apache2 config. Closes: #931664 * Don't remove js function set_limit(). Closes: #945219 * Enable apache2 authz_groupfile on nagios4-cgi install. Closes: #931664. -- Russell Stuart Thu, 20 Aug 2020 20:04:50 +1000 nagios4 (4.3.4-3) unstable; urgency=low * Fix CVE-2018-18245 (closes: #902138) * Fix CVE-2018-13441, CVE-2018-13457, CVE-2018-13458 (closes: #917160) * Removed /etc/nagios4/htdigest.users purge (closes: #905523) * Fix unknown RPM_ARCH (closes: #902216) -- Russell Stuart Thu, 7 Feb 2019 19:35:53 +1000 nagios4 (4.3.4-2) unstable; urgency=low * Remove lookup of nagios_check_command from nagios4.init. It doesn't exist in nagios4. * ITP (closes: #894696) -- Russell Stuart Mon, 9 Apr 2018 17:20:50 +1000