-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 17 May 2026 17:00:00 +1000
Source: nagios4
Architecture: source
Version: 4.5.12+ds-1
Distribution: unstable
Urgency: low
Maintainer: Russell Stuart <russell-debian@stuart.id.au>
Changed-By: Russell Stuart <russell-debian@stuart.id.au>
Changes:
nagios4 (4.5.12+ds-1) unstable; urgency=low
.
* New upstream release (4.5.12).
* Repack upstream tarball via uscan/mk-origtargz, per Developer's
Reference "The standard for repacked tarballs". Files-Excluded:
in debian/copyright strips
- html/js/jquery-*.min.js (replaced by a symlink to
libjs-jquery's /usr/share/javascript/jquery/jquery.min.js
at install time, so we never actually ship the bundled
minified blob)
- base/wpres-phash.h, base/wp-phash.c (gperf output; the
former is regenerated from base/wpres.gperf at build time,
the latter is upstream cruft no longer referenced by any
build target).
debian/watch grows `opts="repacksuffix=+ds,dversionmangle=auto"`.
.
* Bump Standards-Version to 4.7.4. Declare Rules-Requires-Root:
binary-targets to match the chown/chmod in debian/rules.
.
* Build-Depends:
- migrate `debhelper (>= 10)` to `debhelper-compat (= 13)`
(drops debian/compat)
- add libssl-dev (upstream 4.5.x now hard-requires OpenSSL
headers at configure time)
- add gperf (needed at build time to regenerate
base/wpres-phash.h from base/wpres.gperf, since we stripped
the pre-generated file via Files-Excluded:)
.
* Audit upstream for phone-home / marketing / upsell content
and rewrite the patches against 4.5.12:
- 80_no_phone_home.patch (refreshed): strip the YouTube
page-tour vidbox, "Check for updates" link, mainsplash
CSP marketing div with utm_ tracking, and updateversioninfo
block from html/main.php.
- 81_no_update_api.patch (new): disable the daemon's 22-hour
HTTP POST to api.nagios.org. Flips DEFAULT_CHECK_FOR_UPDATES
to 0, sets check_for_updates=0 in sample nagios.cfg.in, and
stubs query_update_api() in base/utils.c so no socket is
opened regardless of config.
- 82_no_tour_videos.patch (new): drop the "Nagios Core 4 Tour"
YouTube vidbox emitted by cgi/tac.c, cgi/extinfo.c and
cgi/status.c. The non-marketing #top_page_numbers append
logic in status.c is kept.
- 83_strip_marketing_links.patch (new): drop the navbar logo
hyperlink to nagios.org in html/side.php; remove the
library.nagios.com / support.nagios.com pointers from the
Makefile.in install banner.
- 84_replace_docs_index.patch (new): replace upstream's
html/docs/index.html (a 534-char-paragraph redirect page
to assets.nagios.com docs) with a small plain stub that
points readers at the manpages.
.
* nagios4-common:
- drop the now-obsolete lsb-base (>= 3.0-6) dependency;
/lib/lsb/init-functions is provided by sysvinit-utils on
bookworm/trixie/sid.
- add Pre-Depends: ${misc:Pre-Depends} for the systemd helper
maintainer-script snippets generated by dh_installsystemd.
- wire up dh_installsystemd --name nagios4 in debian/rules so
the nagios4.service unit file is actually installed (it had
been silently ignored under the explicit-dh_* rules).
- harden nagios4.service: ProtectSystem=full, ProtectHome=true,
PrivateTmp=true, ProtectKernelTunables/Modules/ControlGroups,
RestrictSUIDSGID, LockPersonality, RestrictRealtime,
RestrictNamespaces, SystemCallArchitectures=native.
NoNewPrivileges is deliberately *not* set -- plugins like
check_ping rely on /bin/ping's cap_net_raw file capability.
.
* debian/copyright cleanup:
- drop html/angularjs/* stanza (upstream removed angularjs)
- drop lib/pqueue.[ch] stanza (upstream removed in 4.5.x)
- drop the deprecated 51 Franklin St FSF mailing address
- Format URI: http:// -> https://
.
* debian/nagios4-cgi.install: drop angularjs/, bootstrap-*, d3/
and spin/ paths (upstream removed those directories).
.
* debian/nagios4-cgi.lintian-overrides: drop -- current lintian
no longer emits the tag the overrides were suppressing.
.
* debian/nagios4-common.lintian-overrides: rewrite using the
current `tag detail [path]` syntax so the resource.cfg 0600
permissions override matches lintian's emission.
.
* debian/nagios4-common.examples: drop the
sample-config/template-object/{commands,localhost}.cfg entries
(they were also shipped under examples/template-object/ via
the .install file).
.
* debian/{nagios4,nagios4stats}.8: rewrite the FILES section to
drop the nested `.TP ; .IP path` sequence (sid's newer groff
rejects nested .TP).
.
* Maintainer scripts: switch `#!/bin/sh -e` shebang to
`#!/bin/sh` followed by an explicit `set -e`.
.
* Add a stub debian/upstream/metadata pointing at upstream's
GitHub repository and issue tracker.
.
* Modernise debian/watch: HTTPS via sf.net shortcut. Note:
pgpsigurlmangle is not used because upstream does not publish
detached OpenPGP signatures on GitHub or SourceForge.
.
* debian/rules: strip trailing whitespace; delete
base/wpres-phash.h in the configure step so make's
`wpres-phash.h: wpres.gperf` rule fires (only matters for
the now-extremely-unlikely case where some future Files-Excluded
drift lets the file survive into the source).
.
* debian/README.Debian: refresh the Documentation section --
point at the canonical upstream docs URL (https on
assets.nagios.com, no marketing redirector) and replace
the long-deprecated nagios-users@lists.sourceforge.net
mailing list with the GitHub issue tracker.
Checksums-Sha1:
d9c69f52d10d44afc646f6fcd175d8d34f2005d9 2019 nagios4_4.5.12+ds-1.dsc
8f9ced57d9c30f895ec1588cedf05fe65d61a1d7 1802220 nagios4_4.5.12+ds.orig.tar.xz
c9a38cbb08ed8746671aae9dee2cf93566c4da55 22356 nagios4_4.5.12+ds-1.debian.tar.xz
3c079d53cac2215395531ad8bfa03965cbcb260d 6517 nagios4_4.5.12+ds-1_source.buildinfo
Checksums-Sha256:
06686d79b4662127f462671519eb391bb94a0d1a22cea09353b123142e2779f6 2019 nagios4_4.5.12+ds-1.dsc
0c5a0ab9ec1de8c475e0ecda85aabfa6be4abed58a7943d26ab62e9c50d7020f 1802220 nagios4_4.5.12+ds.orig.tar.xz
d3d060d8fb323a3995090bc2c2e658cbf997034f51be8afdd65a612b4fc70a98 22356 nagios4_4.5.12+ds-1.debian.tar.xz
b6bac08ee6f93b5ac1ca197e7b9e046a5af662d053bc65e3971e5339d817c584 6517 nagios4_4.5.12+ds-1_source.buildinfo
Files:
52a858ed6429271e5a37ddf07bfa9ab3 2019 net - nagios4_4.5.12+ds-1.dsc
080b071d2d287b75a436ca1c3003dd15 1802220 net - nagios4_4.5.12+ds.orig.tar.xz
c909442a584151155ad732678c103c2d 22356 net - nagios4_4.5.12+ds-1.debian.tar.xz
9e3281fa9a8fafc32e884a14334d81e9 6517 net - nagios4_4.5.12+ds-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=VSUP
-----END PGP SIGNATURE-----
