autofs (5.0.8-2+deb8u1) jessie; urgency=medium * Non-maintainer upload. * Remove macro debugging prints from macro_setenv (Closes: #755019) -- Salvatore Bonaccorso Fri, 22 Apr 2016 10:34:58 +0200 autofs (5.0.8-2) unstable; urgency=medium [ Salvatore Bonaccorso ] * Add patches for CVE-2014-8169 (Closes: #779591). When a program map uses an interpreted languages like python it is possible to load and execute arbitray code from a user home directory. This is because the standard environment variables are used to locate and load modules when using these languages. To avoid that, a prefix to these environment names is added so that they aren't used for this purpose. The prefix used is "AUTOFS_" and is not configurable. Additionally a configuration option to force the use of program map standard environment variables is added (FORCE_STANDARD_PROGRAM_MAP_ENV). [ Dmitry Smirnov ] * Refreshed other patches as needed. -- Dmitry Smirnov Thu, 19 Mar 2015 18:38:23 +1100 autofs (5.0.8-1) unstable; urgency=low * New upstream release [October 2013] (Closes: #729023). * "debian/copyright": + corrected BSD-3-clause license name. + added Michael Tokarev's copyright. * "debian/control": + Standards to 3.9.5. + updated my email address. * Patches removed (applied-upstream): - 0001-autofs-5.0.7-fix-nobind-sun-escaped-map-entries.patch - 0002-autofs-5.0.7-fix-use-cache-entry-after-free-mistake.patch - 0004-autofs-5.0.7-fix-parse-buffer-initialization.patch - 0005-autofs-5.0.7-fix-typo-in-automount-8.patch - allow-nsswitch.conf-to-not-contain-automount-lines.patch - save-hesiod-libs-correctly.patch * Patches updated: + 11default_automaster_location.patch + manpages.patch + manpages-hyphen.patch + default-autofs-remove-USE_MISC_DEVICE.patch + do-not-check-for-modprobe-procfs-or-load-module.patch + link-daemon-with-lpthread.patch + fix-ldflags.patch + remove-kernel-mount.nfs-version-check.patch * "autofs-ldap": + install "samples/auto.master.ldap". -- Dmitry Smirnov Fri, 07 Mar 2014 12:52:31 +1100 autofs (5.0.7-3) unstable; urgency=low * pidfile is in /var/run not /run: fix the initscript (forgotten part of #682675) -- Michael Tokarev Wed, 10 Oct 2012 21:28:40 +0400 autofs (5.0.7-2) unstable; urgency=low * force transfer ucf autofs5=>autofs ownership for all ucf-managed files (Closes: #689747) -- Michael Tokarev Sat, 06 Oct 2012 13:06:37 +0400 autofs (5.0.7-1) unstable; urgency=low * new upstream (5.0.7) release. It brings the following changes: - fixed remount deadlock, and several other locking fixes - fixed umount recovery for busy direct mounts - removed old code (mount-move which was fixed in 5.0.6-4 #686438) - fix hosts lookup module to be more robust - implemented abilty to re-read indirect maps on the fly (sighup) - fixes for nfs handling to be more robust - several fixes for multi-mount entries - several fixes for NFSv4 mounts (Closes: #675798) and a few more small/misc fixes. This is all-bugfix changes, making the code more robust and less buggy. * removed --disable-mount-move configure option, not needed anymore. * removed autofs-5.0.6-upstream-git.patch. * refreshed manpages-hyphen.patch. * added selected fixes from upstream git, up to upstream/master commit 9872cdbf9f1588174121e6ffe6f7509cde2d98e9: - 0001-autofs-5.0.7-fix-nobind-sun-escaped-map-entries.patch (Closes: #678408) - 0002-autofs-5.0.7-fix-use-cache-entry-after-free-mistake.patch - 0004-autofs-5.0.7-fix-parse-buffer-initialization.patch - 0005-autofs-5.0.7-fix-typo-in-automount-8.patch * added remove-kernel-mount.nfs-version-check.patch to stop automount from checking for very old mount.nfs or kernel. The check isn't necessary (that's pre-squeeze versions, so not even versioned Breaks are needed anymore), but it is also harmful, since automount spawns mount.nfs at startup and confuses upstart and systemd who start tracking wrong process. The patch just removes these checks assuming we always use recent enough versions. (Closes: #678555) -- Michael Tokarev Wed, 26 Sep 2012 21:15:05 +0400 autofs (5.0.6-4) unstable; urgency=low * configure with --disable-mount-move -- upstream even removed the code in question for 5.0.7 release (Closes: #686438) * remove autofs5.postrm in autofs.postinst to cope with old maintscript removing our configfiles. See comments in autofs.postinst for more details (Closes: #686146) * added allow-nsswitch.conf-to-not-contain-automount-lines.patch (submitted to upstream too) to stop automount from complaining when nsswitch.conf does not mention autofs (which is almost every install anyway). (Closes: #682266, #602090) -- Michael Tokarev Sat, 22 Sep 2012 13:07:46 +0400 autofs (5.0.6-3) unstable; urgency=low [Michael Tokarev] * almost completely rewrote the startup script, make it cleaner, consistent and actually returning proper exit codes. Removed $"" constructs too, dash apparently does not understand these. (Closes: #677520, #683936) * transfer ownership of ucf-conffiles forcibly only if they're owned by autofs5, not by any other package. * run ucf --purge in postrm only if it is installed, and in the right order too (Closes: #685468) * added filagdir.patch - fix a typo in configure.in which prevents from specifying runtime directory (Closes: #678384) * use /var/run not /run for runtime files (we don't really need it to be available on upgrade, before initscripts et all has been replaced) (Closes: #682675) [Dmitry Smirnov] * setting current team leader as Maintainer * pass CPPFLAGS to fix "hardening-no-fortify-functions" * new fix-ldflags.patch to avoid dropping LDFLAGS in order to fix "hardening-no-relro" * updated manpages-hyphen.patch -- Michael Tokarev Sat, 25 Aug 2012 16:13:02 +0400 autofs (5.0.6-2) unstable; urgency=low [Dmitry Smirnov] * minor update to 'manpages.patch' (Closes: #603092) * added VCS links [Michael Tokarev] * conffile installation: - do no ship /etc/default/autofs (Closes: #673796) - install /etc/init.d/autofs manually (dh_installinit have issue finding it) - removed ugly symlinks debian/autofs.{default,init} - list bin programs and modules more explicitly in debian/*.install - transfer ucf conffile ownership from old autofs5 to autofs * removed debian/configure_override * recommend kmod|module-init-tools * ship debian/autofs.init instead of heavily patching upstream script * simplify (and fix) debian/autofs.init a bit in loading/checking modules, and use /bin/sh instead of /bin/bash * remove messing with /dev/autofs misc device in initscript, it is managed by udev or devtmpfs * remove (now unused) USE_MISC_DEVICE definition from default/autofs too * do not check for modprobe or procfs in configure, since module loading is ifdef'ed out in the code, and #ifdef the missing parts too (do-not-check-for-modprobe-procfs-or-load-module.patch) * always define standard program paths when building even if the corresponding utility isn't installed (e2fsck, mount, mount.nfs). There is no need to check presence of standard utilities or verify their standard abilities. * also define other paths explicitly instead of relying on a config-time search - the build will be wrong if some directory (eg, /etc/sysconfig) will be present during configure time. * autoreconf and clean autoconf-generated files, FTBFS (Closes: #674391) This still does not make quilt patches easily revertable, since we don't save old configure and upstream changes patches configure to, so once regenerated by autoreconf, it will be different. * do not use $DEB_HOST_MULTIARCH in debian/rules without setting it * two patches: debian/patches/link-daemon-with-lpthread.patch debian/patches/save-hesiod-libs-correctly.patch to fix gold/-Wl,-no-as-needed FTBFS. * remove individual upstream patches from debian/patches and replace them with single autofs-5.0.6-upstream-git.patch - all upstream commits in master branch since release_5_0_6 tag. Update this patch to include all current fixes too (up to 2012-06-01). * added debian/TODO file -- Michael Tokarev Thu, 24 May 2012 10:53:13 +0400 autofs (5.0.6-1) unstable; urgency=low * New upstream release - "mount(nfs): no hosts available" (Closes: #608459). - "new upstream version available" (Closes: #602933). - "autofs mounted directory are never dismounted" (Closes: #521165). - "autofs5 does not support recursive mount" (Closes: #626473). - "autofs5 crashed in a nested setup in combination with negative lookups on *" (Closes: #617317). - "autofs5-ldap: simple bind auth feature request" (Closes: #595808). - "autofs5-ldap: SASL auth broken" (Closes: #568813). - "nobind option to stop bind-mounting local dirs" (Closes: #557337). * package rename: dropping '5' from package names (Closes: #655351). * NMU changes acknowledged (Closes: #603491, #583094). * register /etc/default/autofs with ucf (Closes: #556961). * debian/copyright to DEP-5 format; upstream copyright audit. * packaging update: * use debhelper & compat version 9. * standards to 3.9.3 * lintian-override for 'non-standard-file-perm' * install missing autofs_ldap_auth.conf.5 man page * source format to version 3 and .xz compression * debian/rules rewritten in debhelper style * patchworks: + replacing upstream patches with new patchset as of 2012-04-23. + replacing dpatch with quilt (Closes: #668077) + new patch to correct manpages spelling (Closes: #660075) thanks to Oz Nahum Tiram and Javi Merino + updated SYSV init script patch: * removed bashisms (Closes: #626435). * introduce 'status' support to SYSV script (Closes: #651978, #667811, #565507). * adding 'slapd' to Should-Start/Stop (Closes: #600764, #659616). * LSB output (Closes: #567805) thanks to Petter Reinholdtsen. * declare myself as Maintainer (adopting package) -- Dmitry Smirnov Mon, 23 Apr 2012 00:30:51 +1000 autofs5 (5.0.4-3.2) unstable; urgency=low * Non-maintainer upload. * autofs5-ldap: install autofs.schema in /etc/ldap/schema/ like all the other schema providing packages in Debian. (Closes: #602765) -- Holger Levsen Sun, 14 Nov 2010 16:48:23 +0000 autofs5 (5.0.4-3.1) unstable; urgency=low * Non-maintainer upload. * add dh_fixperms -Xdebian/autofs5-ldap/etc/autofs_ldap_auth.conf to fix perms (Closes: #557865) -- Patrick Winnertz Sat, 23 Jan 2010 14:54:16 +0100 autofs5 (5.0.4-3) unstable; urgency=low * Fix LSB initscript header to use keywords that insserv knows about. Closes: #541841. * Bump Standards version to 3.8.3. * Add README.source. * Upload sponsored by Petter Reinholdtsen. -- Jan Christoph Nordholz Fri, 28 Aug 2009 21:24:14 +0200 autofs5 (5.0.4-2) unstable; urgency=low * Fast forward through the upstream patches until 2009/07/12. * Adapt patch 10lsb_initscript, partially applied upstream. * Bump Standards version to 3.8.2. * Work around a typo in ./configure. * Add a Homepage field. * Clarify the GPL version. * Add an example line suitable for nfsv4 environments to the shipped auto.net. Closes: #533893. -- Jan Christoph Nordholz Sat, 25 Jul 2009 17:29:51 +0200 autofs5 (5.0.4-1) unstable; urgency=low * New upstream version (5.0.4 plus patchset as of 2009/03/09). * Closes: #518728. * Remove dpatch 14, applied upstream. * New dpatch 14 to avoid using the relatively young SOCK_CLOEXEC feature. * Only invoke 'make clean' on clean target so ./configure isn't purged. * Fix a typo in the postinst regarding the ucf conffile handling. * Add 'set -e' to package maintenance scripts. * Drop unnecessary /var/run/autofs from package. -- Jan Christoph Nordholz Mon, 09 Mar 2009 01:16:48 +0100 autofs5 (5.0.3-3) unstable; urgency=high * Link ldap module against libssl, too. Closes: #490352. * High urgency due to RC bugfix and no other changes. -- Jan Christoph Nordholz Fri, 11 Jul 2008 18:07:16 +0200 autofs5 (5.0.3-2) unstable; urgency=low * Update upstream patchset (2008/06/12) - five new patches. * Bump Standards version to 3.8.0, debhelper to v7. * Link ldap module against kerberos. Closes: #485470. * /dev/urandom is sufficiently random for our purpose - use it instead of /dev/random, which might block. Closes: #481257. * Add watch file. -- Jan Christoph Nordholz Thu, 12 Jun 2008 22:24:27 +0200 autofs5 (5.0.3-1) unstable; urgency=low * Upload to unstable. * New upstream version 5.0.3 plus current patchset (as of 2008/04/27). * Bump Standards to 3.7.3, debhelper to v6. * Add build-dependency on libxml2-dev. -- Jan Christoph Nordholz Mon, 28 Apr 2008 15:55:37 +0200 autofs5 (5.0.2-2) experimental; urgency=low * Work around configure's automatic detection attempts of /sbin/modprobe and the /proc filesystem. In the former case, this saves us an unnecessary build-dependency. This should get the autobuilders going. * Add Recommends: module-init-tools in accordance with #416597. -- Jan Christoph Nordholz Tue, 17 Jul 2007 13:33:12 +0200 autofs5 (5.0.2-1) experimental; urgency=low * Initial release: * Upstream autofs 5.0.2 including the patches: autofs-5.0.2-add-krb5-include autofs-5.0.2-bad-proto-init autofs-5.0.2-add-missing-multi-support autofs-5.0.2-add-multi-nsswitch-lookup * Own patches: * Add LSB header to initscript. * Configure the default auto.master location to be in /etc. * Build the usual package triplet (plain, -ldap and -hesiod). * Build the ldap module with SASL support. * Be cautious and upload to experimental. -- Jan Christoph Nordholz Fri, 06 Jul 2007 19:26:12 +0200