Author: Luke Faraone
Revision Date: 2013-03-05 01:01:49 UTC

Explicitly include -pthread in UAFS_XLIBS to fix build failure

Author: Luke Faraone
Revision Date: 2013-03-05 01:01:49 UTC

Explicitly include -pthread in UAFS_XLIBS to fix build failure

Author: Luke Faraone
Revision Date: 2013-03-05 01:01:49 UTC

Explicitly include -pthread in UAFS_XLIBS to fix build failure

Author: Luke Faraone
Revision Date: 2013-03-05 02:23:07 UTC

* SECURITY UPDATE: Fix fileserver buffer overflow when parsing
  client-supplied ACL entries and protect against client parsing of bad ACL
  entries.
  - OPENAFS-SA-2013-001
  - CVE-2013-1794
  - LP: #114556
* SECURITY UPDATE: Fix ptserver buffer overflow via integer overflow in the
  IdToName RPC
  - OPENAFS-SA-2013-002
  - CVE-2013-1795
  - LP: #1145560

Author: Luke Faraone
Revision Date: 2013-03-05 01:01:49 UTC

Explicitly include -pthread in UAFS_XLIBS to fix build failure

Author: Luke Faraone
Revision Date: 2013-03-05 01:01:49 UTC

Explicitly include -pthread in UAFS_XLIBS to fix build failure

Author: Anders Kaseorg
Revision Date: 2013-02-28 01:14:13 UTC

* Apply upstream deltas for Linux 3.5 (Closes: #685973)
  (LP: #1015925):
  - [2b33384] Linux 3.4: replace end_writeback with clear_inode
  - [5227148] Linux 3.5: encode_fh API change

Author: Anders Kaseorg
Revision Date: 2013-02-28 01:14:13 UTC

* Apply upstream deltas for Linux 3.5 (Closes: #685973)
  (LP: #1015925):
  - [2b33384] Linux 3.4: replace end_writeback with clear_inode
  - [5227148] Linux 3.5: encode_fh API change

Author: Luke Faraone
Revision Date: 2013-03-05 02:23:07 UTC

* SECURITY UPDATE: Fix fileserver buffer overflow when parsing
  client-supplied ACL entries and protect against client parsing of bad ACL
  entries.
  - OPENAFS-SA-2013-001
  - CVE-2013-1794
  - LP: #114556
* SECURITY UPDATE: Fix ptserver buffer overflow via integer overflow in the
  IdToName RPC
  - OPENAFS-SA-2013-002
  - CVE-2013-1795
  - LP: #1145560

Author: Russ Allbery
Revision Date: 2009-07-10 13:57:55 UTC

New upstream release.

Author: Anders Kaseorg
Revision Date: 2009-04-20 16:43:46 UTC

Fix the version number in the path to the DKMS tree. (LP: #288743)

Author: Russ Allbery
Revision Date: 2008-09-22 19:07:02 UTC

* Apply upstream patch to free /proc entries in the correct order.
  Thanks, Marc Dionne. (Closes: #493914)
* Apply upstream deltas to support 2.6.27 kernels and to stop using
  COMMON_KERN_CFLAGS for all 2.6 kernels uniformly, which fixes
  problems on amd64 with newer kernels. Thanks, Björn Torkelsson.
  (LP: #267504)
* Translation updates:
  - Swedish, thanks Martin Bagge. (Closes: #493120)

Author: Russ Allbery
Revision Date: 2007-03-26 18:56:55 UTC

* New upstream release. (Closes: #415699)
  - Support newer Linux kernels. (Closes: #409797, #410120)
  - Add aklog fallbacks for null realms to support the referral
    capability in MIT Kerberos 1.6 and later. (Closes: #410314)
* Apply patch from Thomas Sesselmann to support setting options to pass
  to bosserver in /etc/default/openafs-fileserver. (Closes: #409357)
* Remove the rx_Init calls in the PAM module. The internal counters
  that had to be initialized that way have been removed.
* Now that we're running regen.sh as part of the build process, only
  patch the Autoconf source files and not the generated output to make
  the diff easier to audit.

Author: Luke Faraone
Revision Date: 2013-03-05 01:01:49 UTC

Explicitly include -pthread in UAFS_XLIBS to fix build failure

Author: Russ Allbery
Revision Date: 2011-09-01 18:43:02 UTC

* New upstream stable release.
  - Rx NAT pings are not enabled until peer has answered
  - Numerous fixes to command argument parsing
  - Avoid crashing on host table exhaustion and defer clients instead
  - Rx connection reference counting is enabled
  - An Rx connection reference count leak is fixed in bulkstat
  - Handle unparsable directory objects
  - Handle Kerberos credential cache errors in aklog
* Generate stub header files that include the actual system header when
  building libuafs instead of symlinking h to the appropriate directory.
  Fixes build failures now that Debian has switched to multiarch and
  moved some of the system headers. (Closes: #639063, LP #831287)
* Fix another Doxygen call to generate a configuration file, and remove
  the generated configuration files after Doxygen runs.
* Update CellServDB to the 2011-08-14 release.

Author: Luke Faraone
Revision Date: 2013-03-05 01:01:49 UTC

Explicitly include -pthread in UAFS_XLIBS to fix build failure

Author: Luke Yelavich
Revision Date: 2012-09-13 09:45:52 UTC

Really fix for kernel 3.5. (LP: #1015925)

Author: Russ Allbery
Revision Date: 2012-03-28 17:25:05 UTC

* New upstream release.
  - Do not ignore all InlineBulkStatus errors in file server.
  - Support for Linux 3.3 and 3.4.
  - Fix incorrect kernel error handling in afs_notify_change.
  - Fix locking around RXS_PreparePacket.

Author: Russ Allbery
Revision Date: 2011-09-01 18:43:02 UTC

* New upstream stable release.
  - Rx NAT pings are not enabled until peer has answered
  - Numerous fixes to command argument parsing
  - Avoid crashing on host table exhaustion and defer clients instead
  - Rx connection reference counting is enabled
  - An Rx connection reference count leak is fixed in bulkstat
  - Handle unparsable directory objects
  - Handle Kerberos credential cache errors in aklog
* Generate stub header files that include the actual system header when
  building libuafs instead of symlinking h to the appropriate directory.
  Fixes build failures now that Debian has switched to multiarch and
  moved some of the system headers. (Closes: #639063, LP #831287)
* Fix another Doxygen call to generate a configuration file, and remove
  the generated configuration files after Doxygen runs.
* Update CellServDB to the 2011-08-14 release.

Author: Martin Pitt
Revision Date: 2011-02-09 15:12:55 UTC

No-change rebuild against current pkg-create-dbgsym to fix broken debug
symbol linking. (LP: #660360)

Author: Russ Allbery
Revision Date: 2007-12-30 15:08:04 UTC

* Apply additional upstream patches to the 2.6.24 support to fix
  builds with older kernels. Thanks to Felix Koop for the testing.
  (Closes: #458331)
* Remove old /etc/openafs/server-local files from older versions when
  purging openafs-fileserver.
* Minor reformatting of openafs-client's postrm.
* Remove databases on purge of openafs-dbserver.
* Remove log files when purging openafs-fileserver or openafs-dbserver
  per Policy 10.8.

Author: Russ Allbery
Revision Date: 2007-08-20 17:54:00 UTC

* Switch to quilt for managing patches to the upstream source.
* Stop installing the Administrator's Reference. All of the useful
  information in here has been converted to man pages.
* Use the upstream man page for pt_util, which lets us remove the
  docbook-to-man build dependency.
* Update to the latest CellServDB from grand.central.org.
* Trim additional unuseful debug information from openafs-dbg.
* Restructure the source for the module package. The build files for
  the module build are now in debian/module in the source package and
  there is a completely separate rules file. This way, the module build
  rules don't have to depend on quilt and the structure is clearer.
* Fix debhelper dependencies for the module build.
* Update module standards version to 3.7.2 (no changes required).

Author: Russ Allbery
Revision Date: 2006-07-09 12:35:44 UTC

Apply upstream fix from Derek Atkins for compilation with kernel
versions prior to 2.6.10. (Closes: #376576)

Author: Russ Allbery
Revision Date: 2006-04-15 15:47:04 UTC

* Exit successfully in the openafs-client init script if no module is
  installed, since otherwise openafs-client will fail to install until
  one builds a module. This restores previous accidental behavior due
  to a bug in debhelper. (Closes: #362695)
* libopenafs-dev must conflict with liblwp-dev since they both provide
  liblwp.a. Thanks, Justin Pryzby. (Closes: #362842)
* openafs-client recommends lsof, since the init script uses it for
  cleaner shutdown.

Author: Anders Kaseorg
Revision Date: 2011-02-22 20:17:04 UTC

* Apply upstream deltas for kernel 2.6.38 support (LP: #675768):
  - [02f2c7cb] Linux: Add autoconf macro for structure checks
  - [a89d6b02] Linux: Add general autoconf macro for Linux kernel
  - [08bb83d9] linux: 2.6.38: New d_op handling
  - [52556d50] linux: 2.6.38: Make d_revalidate RCU-walk aware
  - [ca38c954] Linux: allow compile flags to be passed to AC_CHECK_LINUX_BUILD
  - [5bcc0ea7] Linux: 2.6.38: Adjust for permission inode operation changes
  - [2eca7aef] Linux: 2.6.38: deal with dcache_lock removal
  - [281f5bf5] Linux: 2.6.38: dentry->d_count is not an atomic
* Apply upstream deltas:
  - [c4537f04] Don't count root session keyrings against quota (LP: #723481)
  - [dfcd3fca] Linux: Reduce key_alloc flags confusion
    (from http://gerrit.openafs.org/4033)
  - [01c6e6bb] Linux: install_session_keyring: key_alloc flags are
    unsigned long
    (from http://gerrit.openafs.org/4034)

Author: Russ Allbery
Revision Date: 2005-08-26 01:30:21 UTC

* New upstream version.
* Install pam_afs.krb.so on hppa. I believe the new PAM module build
  process fixes the issue that was being worked around before.
* Improve the documentation and scripts for setting up new servers or a
  new cell. afs-rootvol can now be run from a client configured to use
  dynroot. afs-newcell generates the server CellServDB directly to work
  around oddities with bos addhost. There are many other, more minor
  improvements as well. Thanks to Faheem Mitha and Sergio Gelato for
  analysis and patches. (Closes: #322638)
* Update the configuration transcript to reflect the current packages,
  messages, and instructions. Thanks, Faheem Mitha.
* Fill in the server CellServDB with information about the local cell,
  if available in the client CellServDB, rather than always initializing
  it to contain just the name of the cell.
* Detect AFS caches on non-ext2/ext3 file systems and abort AFS client
  initialization. (Closes: #249315)
* Provide a way of setting sysname in afs.conf. (Closes: #324694)
* Don't create the unused /etc/openafs/AFSLog file. (Closes: #120097)
* Redo how library object files are found for the PAM module build to
  avoid assuming C locale character set behavior. (Closes: #323582)
* Remove the openafs-client warning against dynroot for the first system
  in a cell now that afs-rootvol can cope. Provide some basic
  documentation of the CellAlias syntax in that message until we have a
  real man page.
* Suggest openafs-doc.
* Update standards version to 3.6.2 for the kernel module packages (no
  changes required).
* Translation updates.
  - Czech, thanks Martin Sin.
  - Vietnamese, thanks Clytie Siddall.
  - French, thanks Christian Perrier.

Author: Sam Hartman
Revision Date: 2004-11-02 15:42:15 UTC

* New CellServDB
* New upstream version.

Author: Sam Hartman
Revision Date: 2004-01-10 16:37:33 UTC

* Versions prior to 1.2.10 stopped working with multiple servers in a
  cell because of a ubik bug prompting the 1.2.11 release.
* Fix afs startup script not to start afsd if already running; really
  fixed in 1.2.10-3, but not documented, Closes: #219702

Author: Russ Allbery
Revision Date: 2009-11-03 20:57:21 UTC

* Apply upstream deltas:
  - [7833e472] Make afsd.pod reflect reality
  - [c9974c7a] Avoid prematurely destroying callback_rxcon
  - [9b37972e] Linux: 2.6.32 - Adapt to writeback changes
  - [abdf72bc] Linux: Avoid deadlock in readdir - release GLOCK for
    filldir
  - [bdb4f98a] Protect rx_call iovq from simultaneous attempts to empty
    it
  - [c08609ae] Avoid using released hosts
  - [a410b7fd] Linux - Fix disk cache access for selinux/AppArmor
    constrained processes (LP: #415766)
  - [49094ccf] Add automatic sysname detection for ARM Linux
  - [525b594a] Make ktc_curpag generally available (LP: #446521)
* In the postinst of openafs-modules-dkms, if the openafs module is
  already added in DKMS, try to remove it first before adding it. This
  should more correctly handle the case of a user installing this
  package without the correct kernel headers, having it fail in
  postinst, and then installing the correct headers and having dpkg
  attempt to configure the package again. Thanks, Philipp Kaluza.
  (Closes: #553542)

Author: Evan Broder
Revision Date: 2009-11-13 10:07:28 UTC

* Backport fix for Debian #553542 to Karmic: (LP: #463429)
  - In the postinst of openafs-modules-dkms, if the openafs module
    is already added in DKMS, try to remove it first before adding
    it. This should more correctly handle the case of a user
    installing this package without the correct kernel headers,
    having it fail in postinst, and then installing the correct
    headers and having dpkg attempt to configure the package again.
    Thanks, Philipp Kaluza. (Closes: #553542)

Author: Russ Allbery
Revision Date: 2009-07-10 13:57:55 UTC

New upstream release.

Author: Evan Broder
Revision Date: 2009-11-13 10:07:28 UTC

* Backport fix for Debian #553542 to Jaunty: (LP: #463429)
  - In the postinst of openafs-modules-dkms, if the openafs module
    is already added in DKMS, try to remove it first before adding
    it. This should more correctly handle the case of a user
    installing this package without the correct kernel headers,
    having it fail in postinst, and then installing the correct
    headers and having dpkg attempt to configure the package again.
    Thanks, Philipp Kaluza. (Closes: #553542)

Author: Russ Allbery
Revision Date: 2010-06-14 18:45:02 UTC

* Apply upstream deltas to fix crashes in the file server:
  - [f9e1b702] Do not use AFS_PTR_FMT or %p in 1.4
* Remove the lpia architecture. This was an experiment in Ubuntu that
  has apparently been dropped.
* Add preliminary support for powerpcspe, mapping that architecture to
  ppc_linux26. The kernel build won't work unless uname -m on that
  architecture returns ppc.
* Minor update to README.Debian for openafs-doc: the old IBM release
  notes are no longer included.

Author: Russ Allbery
Revision Date: 2010-03-26 16:05:30 UTC

* Apply upstream deltas:
  - [135e196b] Create missing root directory when ORPH_ATTACH
  - [190ef2cb] volmonitor keep vtrans lock
  - [812dcc2c] Increase the maximum number of sysnames
  - [a123d4ab] Print rxdebug statistics as unsigned values
* If the user configures openafs-client to use AFSDB records for VLDB
  server location, don't prompt the user for VLDB servers for the local
  cell even if they're not present in CellServDB and don't try to add an
  entry for the local cell to CellServDB. (Closes: #575299)

Author: Evan Broder
Revision Date: 2009-04-21 12:18:57 UTC

Apply upstream deltas shutdown-vcache-avoid-null-deref-20090324 and
cbr-free-what-you-alloc-20090325 to fix oops and hang at shutdown.
(LP: #333197)

Author: Evan Broder
Revision Date: 2009-11-13 10:07:28 UTC

* Backport fix for Debian #553542 to Karmic: (LP: #463429)
  - In the postinst of openafs-modules-dkms, if the openafs module
    is already added in DKMS, try to remove it first before adding
    it. This should more correctly handle the case of a user
    installing this package without the correct kernel headers,
    having it fail in postinst, and then installing the correct
    headers and having dpkg attempt to configure the package again.
    Thanks, Philipp Kaluza. (Closes: #553542)

Author: Evan Broder
Revision Date: 2009-11-13 10:07:28 UTC

* Backport fix for Debian #553542 to Jaunty: (LP: #463429)
  - In the postinst of openafs-modules-dkms, if the openafs module
    is already added in DKMS, try to remove it first before adding
    it. This should more correctly handle the case of a user
    installing this package without the correct kernel headers,
    having it fail in postinst, and then installing the correct
    headers and having dpkg attempt to configure the package again.
    Thanks, Philipp Kaluza. (Closes: #553542)

Author: Evan Broder
Revision Date: 2009-11-13 10:07:28 UTC

* Backport fix for Debian #553542 to Karmic: (LP: #463429)
  - In the postinst of openafs-modules-dkms, if the openafs module
    is already added in DKMS, try to remove it first before adding
    it. This should more correctly handle the case of a user
    installing this package without the correct kernel headers,
    having it fail in postinst, and then installing the correct
    headers and having dpkg attempt to configure the package again.
    Thanks, Philipp Kaluza. (Closes: #553542)

Author: Evan Broder
Revision Date: 2009-11-13 10:07:28 UTC

* Backport fix for Debian #553542 to Jaunty: (LP: #463429)
  - In the postinst of openafs-modules-dkms, if the openafs module
    is already added in DKMS, try to remove it first before adding
    it. This should more correctly handle the case of a user
    installing this package without the correct kernel headers,
    having it fail in postinst, and then installing the correct
    headers and having dpkg attempt to configure the package again.
    Thanks, Philipp Kaluza. (Closes: #553542)

Author: Evan Broder
Revision Date: 2009-04-16 14:31:15 UTC

* Apply upstream security patches from 1.4.9 (LP: #356861):
  - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
    items than requested are returned from an InlineBulk or BulkStatus
    message. (CVE-2009-1251)
  - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
    kernel memory pointers. (CVE-2009-1250)

Author: Evan Broder
Revision Date: 2009-04-16 14:31:15 UTC

* Apply upstream security patches from 1.4.9 (LP: #356861):
  - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
    items than requested are returned from an InlineBulk or BulkStatus
    message. (CVE-2009-1251)
  - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
    kernel memory pointers. (CVE-2009-1250)

Author: Evan Broder
Revision Date: 2009-04-16 11:16:19 UTC

* Apply upstream security patches from 1.4.9 (LP: #356861, #180792,
  #94787):
    - OPENAFS-SA-2007-001: Avoid a potential privilege escalation from a
      spoofed setuid file by disabling setuid on all cells by default.
      (CVE-2007-1507)
    - OPENAFS-SA-2007-003: Avoid a potential denial of service against an
      AFS fileserver. (CVE-2007-6599)
    - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
      items than requested are returned from an InlineBulk or BulkStatus
      message. (CVE-2009-1251)
    - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
      kernel memory pointers. (CVE-2009-1250)

Author: Evan Broder
Revision Date: 2009-04-14 13:59:51 UTC

* Apply upstream security patches from 1.4.9:
    - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
      items than requested are returned from an InlineBulk or BulkStatus
      message. (CVE-2009-1251)
    - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
      kernel memory pointers. (CVE-2009-1250)
* Fix a FTBFS when trying to delete non-existant files and directories.

Author: Evan Broder
Revision Date: 2009-04-14 13:59:51 UTC

* Apply upstream security patches from 1.4.9:
    - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
      items than requested are returned from an InlineBulk or BulkStatus
      message. (CVE-2009-1251)
    - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
      kernel memory pointers. (CVE-2009-1250)
* Fix a FTBFS when trying to delete non-existant files and directories.

Author: John Dong
Revision Date: 2007-04-29 20:58:49 UTC

Automated backport upload; no source changes.

Author: Evan Broder
Revision Date: 2009-04-16 11:16:19 UTC

* Apply upstream security patches from 1.4.9 (LP: #356861, #180792,
  #94787):
    - OPENAFS-SA-2007-001: Avoid a potential privilege escalation from a
      spoofed setuid file by disabling setuid on all cells by default.
      (CVE-2007-1507)
    - OPENAFS-SA-2007-003: Avoid a potential denial of service against an
      AFS fileserver. (CVE-2007-6599)
    - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
      items than requested are returned from an InlineBulk or BulkStatus
      message. (CVE-2009-1251)
    - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
      kernel memory pointers. (CVE-2009-1250)

Author: Ubuntu Archive Auto-Sync
Revision Date: 2005-12-22 01:14:33 UTC

Automated backport upload; no source changes.