-
oprofile (0.9.6-1ubuntu4.4) lucid-security; urgency=low
* SECURITY UPDATE: shell metacharacter injection via -e argument
- 0001-Sanitize-Event-Names.patch: only allow alphanumerics with -e
- CVE-2011-1760
* SECURITY UDPATE: shell metacharacter injection via --vmlinux,
--session-dir and --xen
- 0003-Avoid-blindly-source-SETUP_FILE-with.patch: don't execute commands
in $SETUP_FILE
- 0004-Do-additional-checks-on-user-supplied-arguments.patch: input
validation on user supplied values
- CVE-2011-2471
* SECURITY UPDATE: directory traversal vulnerability via --save and
--session-dir
- 0002-Ensure-that-save-only-saves-things-in-SESSION_DIR.patch
- 0005-add-back-error_if_not_basename.patch: readd error_if_not_basename()
which was removed in 0003-Avoid-blindly-source-SETUP_FILE-with.patch
- CVE-2011-2472
-- Jamie Strandboge <email address hidden> Thu, 07 Jul 2011 11:00:26 -0500
-
oprofile (0.9.6-1ubuntu4) lucid; urgency=low
* Rebuild with binutils (>= 2.20.1-3ubuntu2).
-- Matthias Klose <email address hidden> Wed, 31 Mar 2010 03:44:52 +0200
-
oprofile (0.9.6-1ubuntu3) lucid; urgency=low
* Rebuild against binutils-2.20.1 (with fixed shlibs files).
-- Matthias Klose <email address hidden> Mon, 08 Mar 2010 18:15:24 +0100
-
oprofile (0.9.6-1ubuntu2) lucid; urgency=low
* Rebuild against binutils-2.20.1.
-- Matthias Klose <email address hidden> Mon, 08 Mar 2010 16:29:42 +0100
-
oprofile (0.9.6-1ubuntu1) lucid; urgency=low
[ Matthias Klose ]
* Merge with Debian (no remaining changes). LP: #495140.
* Split out libopagent1 runtime library.
[ Elliot Murphy ]
* debian/oprofile.postinst (LP: #525932)
- Really really make it work this time by adding the
oprofile:oprofile system user and group as required
for JIT support (see README_PACKAGERS)
[ Steffen Neumann ]
* Add documentation about vmlinux / linux-image-debug.ddeb. LP: #497424.
oprofile (0.9.6-1) unstable; urgency=low
* New upstream release
oprofile (0.9.5-1) unstable; urgency=low
* Add myself as Uploader, thanks to LIU Qi for accepting me as co-maintainer
* New upstream release (Closes: #496146)
* Remove README.Debian, which was outdated
* Update to Standards-Version 3.8.3 (no changes)
* Add myself to debian/copyright
* Add doc-base registration
* Use quilt to manage changes to upstream sources
* Make oprofile be able to start in timer mode, thanks to Joachim
Berdal Haga for the patch (Closes: #548574)
* Do not remove JIT profiling support (Closes: #543681)
* Support for DEB_BUILD_OPTIONS=noopt (Closes: #429157)
-- Matthias Klose <email address hidden> Fri, 26 Feb 2010 08:47:38 +0100
-
oprofile (0.9.4+cvs20090629-2.1ubuntu4) lucid; urgency=low
* debian/rules (LP: #525932)
- Need opjitconv installed to enable JIT profiling of unladen swallow.
-- Elliot Murphy <email address hidden> Mon, 22 Feb 2010 12:36:20 -0500
-
oprofile (0.9.4+cvs20090629-2.1ubuntu3) lucid; urgency=low
* Remove debian/patches/unstatic_libbfd.patch. It caused oprofile to
break on every binutils upgrade because the libbfd soname changes
frequently. Presumably for this reason, the package description for
binutils-dev says “Note that building Debian packages which depend on
the shared libbfd is Not Allowed.” (LP: #426614)
* Don’t build-depend autoconf (just to keep the Debian diff smaller;
this actually has no effect since automake1.10 already depends
autoconf).
* Undo the change in -2.1ubuntu2 to the versioned build-dependency on
binutils-dev.
-- Anders Kaseorg <email address hidden> Sun, 18 Oct 2009 14:40:37 -0400
-
oprofile (0.9.4+cvs20090629-2.1ubuntu2) karmic; urgency=low
* Rebuild using binutils-dev 2.20. LP: #426614.
-- Matthias Klose <email address hidden> Sat, 17 Oct 2009 12:26:17 +0200
