File _patchinfo of Package patchinfo
<patchinfo incident="19007">
<issue tracker="bnc" id="1246089">VUL-0: munin: bad logrotate configuration allows potential escalation from munin to root</issue>
<issue tracker="bnc" id="1212476">patch shebang line match the python version required in the package</issue>
<issue tracker="bnc" id="1210588">munin: get rid of /usr/bin/python as the script interpreter</issue>
<issue tracker="bnc" id="1231027">Remove /srv/www from filesystem package</issue>
<packager>bmwiedemann</packager>
<rating>moderate</rating>
<category>recommended</category>
<summary>Recommended update for munin</summary>
<description>This update for munin fixes the following issues:
- Let munin-node use its own log and run sub-directory
to avoid privilege escalation (boo#1246089)
- Drop dependency on fast-cgi which was replaced in 2.0.x by munin-httpd
https://guide.munin-monitoring.org/en/latest/reference/munin-httpd.html
- Add /srv/www directories to filelist [boo#1231027]
- Fix dependenices: the FastCGI perl module is called FCGI.
- remove package name based perl requires
- remove dependency on /usr/bin/python3 using
%python3_fix_shebang_path macro, [boo#1212476]
- Provide user(munin) and group(munin): the user and group are
created during in the pre script.
- Use IO::Socket::IP instead of IO::Socket::INET[6]
* Remove the dependency on perl(IO::Socket::INET6) as it has been
deprecated by upstream, is no longer suitable for use and its not
being maintained. A compatible replacement for this package is
perl(IO::Socket::IP) which is shipped by the perl-base package.
* Upstream commit back-ported:
https://github.com/munin-monitoring/munin/commit/012b33a7
* Add upstream munin-remove-deprecated-INET6.patch
- Drop manual requires for python (boo#1210588)
</description>
</patchinfo>