nagios4 (4.5.12+ds-1) unstable; urgency=low

  * New upstream release (4.5.12).
  * Repack upstream tarball via uscan/mk-origtargz, per Developer's
    Reference "The standard for repacked tarballs".  Files-Excluded:
    in debian/copyright strips
      - html/js/jquery-*.min.js  (replaced by a symlink to
        libjs-jquery's /usr/share/javascript/jquery/jquery.min.js
        at install time, so we never actually ship the bundled
        minified blob)
      - base/wpres-phash.h, base/wp-phash.c (gperf output; the
        former is regenerated from base/wpres.gperf at build time,
        the latter is upstream cruft no longer referenced by any
        build target).
    debian/watch grows `opts="repacksuffix=+ds,dversionmangle=auto"`.

  * Bump Standards-Version to 4.7.4.  Declare Rules-Requires-Root:
    binary-targets to match the chown/chmod in debian/rules.

  * Build-Depends:
    - migrate `debhelper (>= 10)` to `debhelper-compat (= 13)`
      (drops debian/compat)
    - add libssl-dev (upstream 4.5.x now hard-requires OpenSSL
      headers at configure time)
    - add gperf (needed at build time to regenerate
      base/wpres-phash.h from base/wpres.gperf, since we stripped
      the pre-generated file via Files-Excluded:)

  * Audit upstream for phone-home / marketing / upsell content
    and rewrite the patches against 4.5.12:
      - 80_no_phone_home.patch (refreshed): strip the YouTube
        page-tour vidbox, "Check for updates" link, mainsplash
        CSP marketing div with utm_ tracking, and updateversioninfo
        block from html/main.php.
      - 81_no_update_api.patch (new): disable the daemon's 22-hour
        HTTP POST to api.nagios.org.  Flips DEFAULT_CHECK_FOR_UPDATES
        to 0, sets check_for_updates=0 in sample nagios.cfg.in, and
        stubs query_update_api() in base/utils.c so no socket is
        opened regardless of config.
      - 82_no_tour_videos.patch (new): drop the "Nagios Core 4 Tour"
        YouTube vidbox emitted by cgi/tac.c, cgi/extinfo.c and
        cgi/status.c.  The non-marketing #top_page_numbers append
        logic in status.c is kept.
      - 83_strip_marketing_links.patch (new): drop the navbar logo
        hyperlink to nagios.org in html/side.php; remove the
        library.nagios.com / support.nagios.com pointers from the
        Makefile.in install banner.
      - 84_replace_docs_index.patch (new): replace upstream's
        html/docs/index.html (a 534-char-paragraph redirect page
        to assets.nagios.com docs) with a small plain stub that
        points readers at the manpages.

  * nagios4-common:
    - drop the now-obsolete lsb-base (>= 3.0-6) dependency;
      /lib/lsb/init-functions is provided by sysvinit-utils on
      bookworm/trixie/sid.
    - add Pre-Depends: ${misc:Pre-Depends} for the systemd helper
      maintainer-script snippets generated by dh_installsystemd.
    - wire up dh_installsystemd --name nagios4 in debian/rules so
      the nagios4.service unit file is actually installed (it had
      been silently ignored under the explicit-dh_* rules).
    - harden nagios4.service: ProtectSystem=full, ProtectHome=true,
      PrivateTmp=true, ProtectKernelTunables/Modules/ControlGroups,
      RestrictSUIDSGID, LockPersonality, RestrictRealtime,
      RestrictNamespaces, SystemCallArchitectures=native.
      NoNewPrivileges is deliberately *not* set -- plugins like
      check_ping rely on /bin/ping's cap_net_raw file capability.

  * debian/copyright cleanup:
    - drop html/angularjs/* stanza (upstream removed angularjs)
    - drop lib/pqueue.[ch] stanza (upstream removed in 4.5.x)
    - drop the deprecated 51 Franklin St FSF mailing address
    - Format URI: http:// -> https://

  * debian/nagios4-cgi.install: drop angularjs/, bootstrap-*, d3/
    and spin/ paths (upstream removed those directories).

  * debian/nagios4-cgi.lintian-overrides: drop -- current lintian
    no longer emits the tag the overrides were suppressing.

  * debian/nagios4-common.lintian-overrides: rewrite using the
    current `tag detail [path]` syntax so the resource.cfg 0600
    permissions override matches lintian's emission.

  * debian/nagios4-common.examples: drop the
    sample-config/template-object/{commands,localhost}.cfg entries
    (they were also shipped under examples/template-object/ via
    the .install file).

  * debian/{nagios4,nagios4stats}.8: rewrite the FILES section to
    drop the nested `.TP ; .IP path` sequence (sid's newer groff
    rejects nested .TP).

  * Maintainer scripts: switch `#!/bin/sh -e` shebang to
    `#!/bin/sh` followed by an explicit `set -e`.

  * Add a stub debian/upstream/metadata pointing at upstream's
    GitHub repository and issue tracker.

  * Modernise debian/watch: HTTPS via sf.net shortcut.  Note:
    pgpsigurlmangle is not used because upstream does not publish
    detached OpenPGP signatures on GitHub or SourceForge.

  * debian/rules: strip trailing whitespace; delete
    base/wpres-phash.h in the configure step so make's
    `wpres-phash.h: wpres.gperf` rule fires (only matters for
    the now-extremely-unlikely case where some future Files-Excluded
    drift lets the file survive into the source).

  * debian/README.Debian: refresh the Documentation section --
    point at the canonical upstream docs URL (https on
    assets.nagios.com, no marketing redirector) and replace
    the long-deprecated nagios-users@lists.sourceforge.net
    mailing list with the GitHub issue tracker.

 -- Russell Stuart <russell-debian@stuart.id.au>  Sun, 17 May 2026 17:00:00 +1000

nagios4 (4.4.6-4) unstable; urgency=low

  * Fix syntax in nagios4.service.  Closes: #986397.

 -- Russell Stuart <russell-debian@stuart.id.au>  Wed,  7 Apr 2021 20:43:46 +1000

nagios4 (4.4.6-3) unstable; urgency=low

  * Fix nagios4-ci not installing with recommends.  Closes: #985043.

 -- Russell Stuart <russell-debian@stuart.id.au>  Mon, 22 Mar 2021 12:10:04 +1000

nagios4 (4.4.6-2) unstable; urgency=low

  * Source only upload for migration to testing.

 -- Russell Stuart <russell-debian@stuart.id.au>  Mon, 23 Nov 2020 18:48:30 +1000

nagios4 (4.4.6-1) unstable; urgency=low

  * New release - fixes memory leak.
  * Fix bad apache2 config.  Closes: #931664
  * Don't remove js function set_limit().  Closes: #945219
  * Enable apache2 authz_groupfile on nagios4-cgi install.  Closes: #931664.

 -- Russell Stuart <russell-debian@stuart.id.au>  Thu, 20 Aug 2020 20:04:50 +1000

nagios4 (4.3.4-3) unstable; urgency=low

  * Fix CVE-2018-18245 (closes: #902138)
  * Fix CVE-2018-13441, CVE-2018-13457, CVE-2018-13458 (closes: #917160)
  * Removed /etc/nagios4/htdigest.users purge (closes: #905523)
  * Fix unknown RPM_ARCH (closes: #902216)

 -- Russell Stuart <russell-debian@stuart.id.au>  Thu,  7 Feb 2019 19:35:53 +1000

nagios4 (4.3.4-2) unstable; urgency=low

  * Remove lookup of nagios_check_command from nagios4.init.  It
    doesn't exist in nagios4.

  * ITP (closes: #894696)

 -- Russell Stuart <russell-debian@stuart.id.au>  Mon,  9 Apr 2018 17:20:50 +1000
