fcron (3.0.1-1) unstable; urgency=medium
* New upstream source (closes: #353339, #392057)
* fcrontab: access user's directory with user's rights (necessary if
user/group fcron has not the right to read the directory).
* improvement in check_system_crontabs: more comments, added some
help messages, added command line options, cleaner, safer code.
* Improved English documentation: clarified some previously-unclear
points.
* Added French translation of the manual pages (thanks go to Alain
Portal)
* Removed old documentation from the package.
* Better handling of the pipes in job.c: this should remove some
problems encountered on BSD systems.
* bug fix: do not use a tv_usec > 999999: should fix the problem
encountered on BSD systems with select().
* bug fix: fixed a bug in make_msg(): the size of a string written
to a buffer was not controlled correctly in some cases. This could
result in buffer overflow and thus this was security problem.
However the bug seems not exploitable as the part of the string
which could overflow the buffer could not be freely defined by an
attacker (it was either ": " or one of the strings returned by
strerror()).
* Bug fix: set the FDs correctly for select().
* Do not enable SE_LINUX for GNU/kFreeBSD builds, patch from Aurelien
Jarno <email address hidden> (closes: #336945)
* Install both english and french HTML documentation
* Use dh_installpam to install pam.d files
* Ship Debian-customized pam.d files instead of upstream's
* Depend on libpam-runtime (>= 0.76-14) as required by PAM minipolicy
for @include common-* in pam.d files
* Apply patch from upstream to use the correct shell for cronjobs, instead
of whatever is specified for the user's login shell (closes: #333223)
* Add warning about the shell set in fcron.conf and vixie-cron
compatibility (basically, it must be /bin/sh)
* debian/watch: switch to version 3 and avoid capturing .gz/.bz2 as part
of the version number
* Switch to debhelper mode V5
* Bump standards-version to 3.7.2 (no changes needed)
* Remove debian/ from upstream tarball. Yes, this is not the nicest way
to go about it, but it is the cleanest and fastest way to deal with the
issue
* debian/copyright: update dates, and also note the change to the upstream
tarball
-- Ubuntu Archive Auto-Sync <email address hidden> Tue, 07 Nov 2006 01:32:37 +0000
