lp:ubuntu/edgy/heartbeat

Created by James Westby and last modified
Get this branch:
bzr branch lp:ubuntu/edgy/heartbeat
Members of Ubuntu branches can upload to this branch. Log in for directions.

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Development

Recent revisions

13. By Martin Pitt

* Fake-sync a newer Debian version to fix vulnerability (but not the newest
  package since that is a new upstream version).
* Fixed CVE number in previous changelog (also fixed in latest Debian
  version).

12. By Simon Horman <email address hidden>

* shmget-perms.patch
  Fix local denial of service caused by incorrect permisions
  on a shared memory page.
  CVE-2006-3815, DSA-1128
  (closes: #379904)
* ldirectord-1.141-emailalert-1-quiet.patch
  Don't send email alerts if the alert address is not configured
  (closes: #380593)
* ldirectord-1.139.patch, ldirectord-1.141-emailalert-2-global.patch
  Allow emailalert and emailalertfreq directives to be global
  as well as per-virtual service
* ldirectord-1.141-readline_workaround.patch
  readline doesn't seem to return lines after Net::FTP
  has been called, so split them up by hand.
* Added build dependancy on iptables, as it is needed to
  supply the correct path to iptables for the portblock resource
  (closes: #380180)
* Added recommends iptables to heartbeat-2, as it is needed
  for the portblock resource to function correctly

11. By Martin Pitt

* SECURITY UPDATE: Local DoS.
* Add debian/patches/01-shm_permissions.patch:
  - Fix permissions of created shared memory block to not be
    world-read/writable.
  - Patch taken from upstream:
    http://cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514
  - CVE-2006-3815
* Apply above patch inline (build system does not do that automatically).

10. By Simon Horman <email address hidden>

* ldirectord: Add dependancy on libmailtools-perl (Mail::Send)
  (closes: #376786)
* ldirectord: Add misggingdependancy on libnet-perl
                (Net::SMTP, Net::FTP, Net::POP3)
* ldirectord: Remove unneccesary depenancy on adduser

9. By Simon Horman <email address hidden>

Remove the unneccesary Build-Depends on automake as part of
automake transition. http://wiki.debian.org/AutomakeTransition
(closes #376623)

8. By Simon Horman <email address hidden>

* Update ldirectordy from 1.77.2.32 to 1.77.2.45 (1.135)
  - 1.77.2.45
    Only log to stdio during init
    Thanks to Jan Yenya Kasprzak
  - 1.77.2.44
    When daemonised, use /dev/null instead of /dev/console for stdout
    and stderr as /dev/console may not always be available
    Thanks to Jan Yenya Kasprzak
  - 1.77.2.43
    Test for istead of defined as (Fedora Core at least) the latter
    is always true.
    Thanks to Jan Yenya Kasprzak
  - 1.77.2.42
    Add email alerts to ldirectord.
    Thanks to anthony
  - 1.77.2.41
    Make sure ldirectord does not detatch from the terminal in debug mode.
  - 1.77.2.40
    Actually sync with head 1.130
    (previous commits were missing some older changes)
  - 1.77.2.39
    Remove uncaught alarm in eval which is a race condition in the connect
    and sip checks.
    Thanks to Keith Bucher and Julien Ducros
  - 1.77.2.38
    the the -> the
  - 1.77.2.37
    Fix a problem relating to zombie real servers appearing if the real
    and virtual servers have different ports - comment inline
  - 1.77.2.36
    Allow authenticted LDAP access.
    Thanks to Andreas Nolte
  - 1.77.2.35
    Actually use DNS over TCP for TCP servers.
    Thanks to Todd Lyons
  - 1.77.2.34
    Delay checking of duplicates until we have enough information to
    generate an acurate id for the service
  - 1.77.2.33
    Fix url check, seems like a regression from when the http and https
    checks were merged
  - 1.77.2.32
    Handle socket errors, regresion introduced when SIP check was added
* Don't run deluser and delgroup in postrm
  - These commands may not be available at this time (closes: #375507)
  - If there are any files left that belong to this user or group
    then they will be left unowned and get inhereited by the
    next user that comes along that happens to have hacluster's
    old userid or the old haclient groupid respectively.

7. By Simon Horman <email address hidden>

Move IPv6addr from /etc/ha.d/resource.d/ into /usr/lib/heartbeat,
and then symlink that back into /etc/ha.d/resource.d/ as binaries
are not allowed in /etc (closes: #369815)

6. By Horms

* Rebuild, as i386 upload was missing depenancies on vanessa libraries.
  This was caused by a ~/.magic in the build environment that had very
  unexpected side affects. Primarily causing file to return "data"
  instead of "ELF" on ELF executables, and thus causing all executables
  to be skipped by dh_shlibdeps.
* Add dependancy on openssh-client which is needed as 00-ssh_scp_path.patch
  was removed in 1.2.4-1
* Slightly Enhanced package descriptions
  (closes: #337895, #337896)

5. By Horms

* New Upstream
* Make sure adduser is passed the --system flag
  (closes: #336180)
* Don't apply 00-ssh_scp_path.patch as it shouldn't be
  needed and it creates a lot of diff due to automake and
  autoconf regenerating everything.

4. By Simon Horman <email address hidden>

* 11-tmpfile-problems.patch, 12-tmpfile-problems-2.patch
  Don't use predictable temp files
  [heartbeat/lib/BasicSanityCheck.in, heartbeat/resource.d/WAS.in
   lib/plugins/stonith/meatware.c, lib/stonith/meatclient.c,
   cts/CM_hb.py.in, cts/CTStests.py.in CAN-2005-2231] (closes: #318287)
* debian/apply
  Apply patches in the correct order.
* 12-tmpfile-problems-2.patch
  Added CTS back in with security fix
  [usr/lib/heartbeat/cts/CM_fs.py, usr/lib/heartbeat/cts/CM_hb.py,
  usr/lib/heartbeat/cts/CTS.py, usr/lib/heartbeat/cts/CTSaudits.py,
  usr/lib/heartbeat/cts/CTSlab.py, usr/lib/heartbeat/cts/CTStests.py
  CAN-2005-2231]
* 13-confdir.patch
  Change CONF_D defined (and missing) in some resources
  to HA_CONFDIR in shelfuncs, allowing arp_config to function
  correctly in IPaddr2 and SendArp. (closes: #318266)
* debian/rules
  Include cts documentation
* 14-ipadd2_no_loopback_delete.patch
  Fix IPaddr2 so it doesn't remove loopback interfaces on stop
* 15-LVM2.patch
  Allow the LVM resource to work with LVM2 as well as LVM1
  (closes: #309906)
* Upgrade Standards-Version from 3.6.1 to 3.6.2

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/lucid/heartbeat
This branch contains Public information 
Everyone can see this information.

Subscribers