Change log for fcron package in Ubuntu

fcron (3.0.1-1.3) unstable; urgency=high

  * Update the SE Linux support to work in Lenny.
    Closes: #503925

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  04 Nov 2008 21:20:42 +0000

Available diffs

• diff from 3.0.1-1.2 to 3.0.1-1.3 (3.0 KiB)

fcron (3.0.1-1.2) unstable; urgency=low

  * Non-maintainer upload to fix pending l10n issues.
  * Remove extra dependency on debconf that's already handled
    by ${misc:Depends}. Closes: #441939
  * Debconf translations:
    - Portuguese. Closes: #414916
    - Dutch. Closes: #423074
    - Galician. Closes: #477219
    - Finnish. Closes: #477528
  * [Lintian] No longer ignore errors from "make clean"

 -- Ubuntu Archive Auto-Sync <email address hidden>   Sat,  03 May 2008 11:19:02 +0100

fcron (3.0.1-1.1) unstable; urgency=low

  * Non-maintainer upload to solve release goal.
  * Add LSB dependency header to init.d scripts (Closes: #466982).
  * Fix build problem on kfreebsd-amd64 (Closes: #416121).  Patch from
    Aurelien Jarno.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  02 May 2008 01:59:15 +0100

fcron (3.0.1-1) unstable; urgency=medium

  * New upstream source (closes: #353339, #392057)
     * fcrontab: access user's directory with user's rights (necessary if
       user/group fcron has not the right to read the directory).
     * improvement in check_system_crontabs: more comments, added some
       help messages, added command line options, cleaner, safer code.
     * Improved English documentation: clarified some previously-unclear
       points.
     * Added French translation of the manual pages (thanks go to Alain
       Portal)
     * Removed old documentation from the package.
     * Better handling of the pipes in job.c: this should remove some
       problems encountered on BSD systems.
     * bug fix: do not use a tv_usec > 999999: should fix the problem
       encountered on BSD systems with select().
     * bug fix: fixed a bug in make_msg(): the size of a string written
       to a buffer was not controlled correctly in some cases. This could
       result in buffer overflow and thus this was security problem.
       However the bug seems not exploitable as the part of the string
       which could overflow the buffer could not be freely defined by an
       attacker (it was either ": " or one of the strings returned by
       strerror()).
     * Bug fix: set the FDs correctly for select().
  * Do not enable SE_LINUX for GNU/kFreeBSD builds, patch from Aurelien
    Jarno <email address hidden> (closes: #336945)
  * Install both english and french HTML documentation
  * Use dh_installpam to install pam.d files
  * Ship Debian-customized pam.d files instead of upstream's
  * Depend on libpam-runtime (>= 0.76-14) as required by PAM minipolicy
    for @include common-* in pam.d files
  * Apply patch from upstream to use the correct shell for cronjobs, instead
    of whatever is specified for the user's login shell (closes: #333223)
  * Add warning about the shell set in fcron.conf and vixie-cron
    compatibility (basically, it must be /bin/sh)
  * debian/watch: switch to version 3 and avoid capturing .gz/.bz2 as part
    of the version number
  * Switch to debhelper mode V5
  * Bump standards-version to 3.7.2 (no changes needed)
  * Remove debian/ from upstream tarball.  Yes, this is not the nicest way
    to go about it, but it is the cleanest and fastest way to deal with the
    issue
  * debian/copyright: update dates, and also note the change to the upstream
    tarball

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  07 Nov 2006 01:32:37 +0000

fcron (3.0.0-2) unstable; urgency=low


  * Fix missing space on & lines in systab, and fix manpages that
    incorrectly documented the fact that such spaces were not needed
    (closes: #333668)

 -- Henrique de Moraes Holschuh <email address hidden>  Thu, 13 Oct 2005 07:37:39 -0300

fcron (2.9.6-2) unstable; urgency=medium


  * The "remember to clean below the carpet" release
  * Some portability fixes for limited size of (char) and size_t != long
    int;  Thanks to the Debian build-daemons and gcc -Wall for telling me
    about it ;-)  Might fix a real bug in ppc, arm and s390
  * Remove statoverride on /var/spool/fcron during purge
  * Ignore return code for db_go in config script
  * Fix fcronsighup override logic in postinst script (closes: #300931)
  * Force systab crontabs to owner root in the spool
  * Ship upstream changelog properly

 -- Henrique de Moraes Holschuh <email address hidden>  Sat, 26 Mar 2005 01:12:48 -0300

fcron (2.9.5.1-1) unstable; urgency=high


  * New upstream source:
     * SECURITY FIX: Due to design errors in the fcronsighup program, Fcron
       may allow a local user to bypass access restrictions (CAN-2004-1031),
       view the contents of root owned files (CAN-2004-1030), remove
       arbitrary files or create empty files (CAN-2004-1032), and send a
       SIGHUP to any process.  A vulnerability also exists in fcrontab which
       may allow local users to view the contents of fcron.allow and
       fcron.deny (CAN-2004-1033).
       Ref: iDEFENSE Security Advisory 11.15.04.
       (closes: #281436)
  * Thanks to Gentoo's GLSA 200411-27 for providing the above text ;-)
  * Add myself to uploaders
  * Use $(MAKE) distclean on clean: target
  * Clean up autom4te.cache directory on clean: target
  * Rename fcron-update-crontabs.1 to fcron-update-crontabs.8, since it
    is in section 8 anyway
  * Add non-virtual-package packages to dependencies on virtual packages
    (syslog-daemon and mail-transport-agent).  Use packages that are
    priority standard or higher for that
  * Fix initscript so that it will start a stopped daemon on "restart"
  * Now compliant to standards-version 3.6.1, bump control file entry
    accordingly

 -- Henrique de Moraes Holschuh <email address hidden>  Fri, 19 Nov 2004 10:20:44 -0200

fcron (2.9.4-3.1ubuntu0.1) warty-security; urgency=low


  * SECURITY UPDATE: Multiple Security Vulnerabilities in Fcron
  * Applied modifications of the last version of the software (2.9.5.1)
  * Vulnerability description:
    - File contents disclosure: it's possible to read any file of the
      system
    - Configuration bypass vulnerability: it's possible to bypass access restrictions
    - File Removal and Empty File Creation Vulnerability: it's possible to
      remove any file on the system and to create empty files
    - Information Disclosure Vulnerability: it's possible to view the content
      of fcron.allow and fcron.deny
  * References:
    - http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=true
    - http://www.securityfocus.com/bid/11684
    - CAN-2004-1030, CAN-2004-1031, CAN-2004-1032, CAN-2004-1033

 -- Gerardo Di Giacomo <email address hidden>  Mon, 22 Nov 2004 13:12:21 +0000

fcron (2.9.4-3.1) unstable; urgency=low


  * NMU during BSP.
  * ./configure uses now --with-sendmail without checks (closes: #232986).

 -- Sebastian Muszynski <email address hidden>  Fri, 19 Mar 2004 16:54:57 +0100