lp:ubuntu/hoary-security/heartbeat

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

7. By Martin Pitt on 2006-08-16

* SECURITY UPDATE: Remote DoS.
* Add debian/patches/16-oob-read.patch: Fix buffer overread in
  clplumbing/cl_netstring.c.
* Apply above patch inline (build system does not do that automatically).
* CVE-2006-3121

6. By Martin Pitt on 2006-07-26

* SECURITY UPDATE: Local DoS.
* Add debian/patches/01-shm_permissions.patch:
  - Fix permissions of created shared memory block to not be
    world-read/writable.
  - Patch taken from upstream:
    http://cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514
  - CVE-2006-3815
* Apply above patch inline (build system does not do that automatically).

5. By Martin Pitt on 2005-08-11

* SECURITY UPDATE: Fix insecure temporary files.
* cts/CM_hb.py.in, cts/CTStests.py.in:
  - Move debugging files with static name from /tmp to /var/run to avoid
    symlink attack.
  - CAN-2005-2231

4. By Martin Pitt on 2005-02-24

debian/control: Removed raidtools2 build dependency, to help demotion of
raidtools2 to universe.

3. By Simon Horman <email address hidden> on 2004-06-23

* The previous version never made it into testing because
   the build failed on arm because the ssh package was broken
   at the time. I have not had any luck contacting someone to
   rebuild the package.
* Updated ldirectord to 1.77.2.4 (from 1.77.2.2).
   Fixes a problem where real servers present in multiple
   virtuals would only be added to one virtual service.

2. By Martin Schulze <email address hidden> on 2002-10-09

* Non-maintainer upload by security team
* Fixed several buffer overflows found by Nathan Wallwork.

1. By Martin Schulze <email address hidden> on 2002-10-09

Import upstream version 0.4.9.0l