Branches for Dapper

Author: Fabio Massimo Di Nitto
Revision Date: 2006-05-09 13:15:17 UTC

* Upstream informs us about 2 critical bugs in our kernel modules:
  - Add patch fix-critical-dlm-cman-kernel-issues.dpatch.
(Thanks Patrick for the info/patches/etc.)

Author: Jamie Strandboge
Revision Date: 2009-12-02 15:30:37 UTC

* SECURITY UPDATE: insecure temporary file handling in multiple places.
  - debian/patches/900_tempfix_fs.dpatch: move logfile to protected
    directory (and update rgmanager/make/defines.mk.input)
  - debian/patches/900_tempfix_oracledb.dpatch: use mktemp and move logfile
    to protected directory (fix in the source even though it is not
    installed)
  - debian/patches/900_tempfix_smb.dpatch: use mktemp
  - debian/patches/900_ccstool.dpatch: use mkstemp()
  - Patches based on upstream changes
  - CVE-2008-6552
* SECURITY UDPATE: insecure temporary file handling on /tmp/apclog
  - debian/patches/900_fence_apc.dpatch: don't reference /tmp/apclog
    in fence_apc man page, since it is not used. Update fence_apc.pl,
    fence_apc.py and fence_apc_snmp.py to use @LOGDIR@/apclog. Updated
    fence/agents/apc/Makefile and fence/make/defines.mk.input to substitute
    @LOGDIR@
  - CVE-2008-4579
* SECURITY UPDATE: insecure temporary file handling on
  /tmp/fence_manual.fifo
  - debian/patches/901_fence_manual.dpatch: move fifo to /var/lib/fence
  - CVE-2008-4580
* debian/rules: update to call dh_installdirs
* debian/rgmanager.dirs and debian/fence.dirs: install /var/log/cluster
* debian/fence.dirs: install /var/lib/fence

Author: Jamie Strandboge
Revision Date: 2009-12-02 15:30:37 UTC

* SECURITY UPDATE: insecure temporary file handling in multiple places.
  - debian/patches/900_tempfix_fs.dpatch: move logfile to protected
    directory (and update rgmanager/make/defines.mk.input)
  - debian/patches/900_tempfix_oracledb.dpatch: use mktemp and move logfile
    to protected directory (fix in the source even though it is not
    installed)
  - debian/patches/900_tempfix_smb.dpatch: use mktemp
  - debian/patches/900_ccstool.dpatch: use mkstemp()
  - Patches based on upstream changes
  - CVE-2008-6552
* SECURITY UDPATE: insecure temporary file handling on /tmp/apclog
  - debian/patches/900_fence_apc.dpatch: don't reference /tmp/apclog
    in fence_apc man page, since it is not used. Update fence_apc.pl,
    fence_apc.py and fence_apc_snmp.py to use @LOGDIR@/apclog. Updated
    fence/agents/apc/Makefile and fence/make/defines.mk.input to substitute
    @LOGDIR@
  - CVE-2008-4579
* SECURITY UPDATE: insecure temporary file handling on
  /tmp/fence_manual.fifo
  - debian/patches/901_fence_manual.dpatch: move fifo to /var/lib/fence
  - CVE-2008-4580
* debian/rules: update to call dh_installdirs
* debian/rgmanager.dirs and debian/fence.dirs: install /var/log/cluster
* debian/fence.dirs: install /var/lib/fence