new version 2.8.2-1

3 files changed, 20 insertions, 5 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 51ac7259061d..1b8e79f980f3 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,8 +1,9 @@
 pkgbase = icinga2
 	pkgdesc = An open source host, service and network monitoring program
-	pkgver = 2.8.1
+	pkgver = 2.8.2
 	pkgrel = 1
 	url = http://www.icinga.org
+	changelog = icinga2.changelog
 	arch = i686
 	arch = x86_64
 	license = GPL
@@ -15,8 +16,8 @@ pkgbase = icinga2
 	depends = libedit
 	depends = openssl
 	depends = yajl
-	source = https://github.com/Icinga/icinga2/archive/v2.8.1.tar.gz
-	sha256sums = 83930bf95a5c6562cc31c37ddb01b361665497ef7001e9cc8763fd499a4d709d
+	source = https://github.com/Icinga/icinga2/archive/v2.8.2.tar.gz
+	sha256sums = 508820905c86906117a616e90eb16b646007e178621b0df9f27fcaf1a491151c
 
 pkgname = icinga2-common
 	pkgdesc = Common files for Icinga2
diff --git a/PKGBUILD b/PKGBUILD
index f9428a646fa0..dd4ece69f27a 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -4,7 +4,7 @@
 
 pkgname=('icinga2-common' 'icinga2' 'icinga-studio')
 pkgbase=icinga2
-pkgver=2.8.1
+pkgver=2.8.2
 pkgrel=1
 pkgdesc="An open source host, service and network monitoring program"
 license=('GPL')
@@ -12,8 +12,9 @@ arch=('i686' 'x86_64')
 url="http://www.icinga.org"
 depends=('boost-libs' 'libedit' 'openssl' 'yajl')
 makedepends=('boost' 'cmake' 'libmariadbclient' 'postgresql-libs' 'wxgtk')
+changelog="icinga2.changelog"
 source=("https://github.com/Icinga/$pkgbase/archive/v$pkgver.tar.gz")
-sha256sums=('83930bf95a5c6562cc31c37ddb01b361665497ef7001e9cc8763fd499a4d709d')
+sha256sums=('508820905c86906117a616e90eb16b646007e178621b0df9f27fcaf1a491151c')
 
 build() {
   mkdir -p "$srcdir/$pkgbase-$pkgver/build"
diff --git a/icinga2.changelog b/icinga2.changelog
new file mode 100644
index 000000000000..01db0bc094e0
--- /dev/null
+++ b/icinga2.changelog
@@ -0,0 +1,13 @@
+2.8.2-1
+  - New upstream version 2.8.2, including security fixes for:
+    - CVE-2017-16933: chmod on user-writable symlinks, allowing privilege
+      escalation.
+    - CVE-2018-6532: Denial of service by memory exhaustion if the API
+      component is enabled.
+    - CVE-2018-6533: Possible privilege escalation via init.conf.
+    - CVE-2018-6534: Denial of service due to a NULL pointer dereference.
+    - CVE-2018-6535: API lacks a constant-time password comparison.
+    - CVE-2018-6536: (not affected when using systemd) The init.d script kills
+      a PID supplied by the icinga user as root.
+  - As the update removes /etc/icinga2/init.conf, you have to update
+    /etc/default/icinga2 if you changed the user or group in init.conf.