lp:ubuntu/intrepid-security/openafs

Created by James Westby and last modified
Get this branch:
bzr branch lp:ubuntu/intrepid-security/openafs
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

14. By Evan Broder

* Apply upstream security patches from 1.4.9 (LP: #356861):
  - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more
    items than requested are returned from an InlineBulk or BulkStatus
    message. (CVE-2009-1251)
  - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid
    kernel memory pointers. (CVE-2009-1250)

13. By Russ Allbery

* Apply upstream patch to free /proc entries in the correct order.
  Thanks, Marc Dionne. (Closes: #493914)
* Apply upstream deltas to support 2.6.27 kernels and to stop using
  COMMON_KERN_CFLAGS for all 2.6 kernels uniformly, which fixes
  problems on amd64 with newer kernels. Thanks, Björn Torkelsson.
  (LP: #267504)
* Translation updates:
  - Swedish, thanks Martin Bagge. (Closes: #493120)

12. By Russ Allbery

* Update documentation to note that enabling v4 support or running
  krb524d is no longer required for aklog to work.
* Translation updates:
  - German, thanks Henrik Kroeger. (Closes: #400800)

11. By Russ Allbery

* No longer pass explicit cache tuning options to afsd and instead let
  OpenAFS automatically choose tuning based on the cache size.
* Accept trailing whitespace in ThisCell.
* Fix path canonicalization on the server, enabling bos getlog with a
  simple log name to work properly against a Debian bosserver.
* Change the documentation of afsd -shutdown to be less dire and more
  accurate. Thanks, Daniel J. Priem. (Closes: #394990)
* Document (at least partially) AFS's mapping of Kerberos v5 principal
  names to Kerberos v4 format in the aklog man page. Thanks, Daniel
  J. Priem. (Closes: #394832)
* Document that aklog -setpag may not always work.

10. By Sam Hartman

Upstream fix to prevent butc segfaulting.

9. By Russ Allbery

Apply upstream fix from Derek Atkins for compilation with kernel
versions prior to 2.6.10. (Closes: #376576)

8. By Russ Allbery

* Include all of AFS's local XDR implementation in the build for
  shlibafsrpc, fixing problems with undefined symbols in the PAM module
  on AMD64.
* When creating a new file server in afs-newcell, use a set of tuning
  flags from Harald Barth rather than relying on the defaults. This
  doesn't help with general bos create; long term, the defaults need to
  be fixed. (Closes: #364100)
* Add a note in README.servers about fileserver tuning options.
* Update debconf templates to follow the best practice recommendations
  from the Developer's Reference.
* Regenerate the man pages on build since the pre-generated ones were
  done with a very old version of pod2man.
* Update standards version to 3.7.2 (no changes required).
* Use a better method of optionally running make distclean.
* Add build-arch and build-indep targets, just in case.
* Translation updates:
  - Czech, thanks Martin Šín.
  - Portuguese (Brazil), thanks André Luís Lopes.
  - French, thanks Christian Perrier.
  - Vietnamese, thanks Clytie Siddall.

7. By Russ Allbery

* Exit successfully in the openafs-client init script if no module is
  installed, since otherwise openafs-client will fail to install until
  one builds a module. This restores previous accidental behavior due
  to a bug in debhelper. (Closes: #362695)
* libopenafs-dev must conflict with liblwp-dev since they both provide
  liblwp.a. Thanks, Justin Pryzby. (Closes: #362842)
* openafs-client recommends lsof, since the init script uses it for
  cleaner shutdown.

6. By Adam Conrad

Fake sync from Debian, bringing in sparc64 and documentation fixes.

5. By Russ Allbery

* Apply upstream patch from Chas Williams to be more careful about what
  dentry is used in renames, avoiding a kernel fault when renaming
  dentries accessed through multiple paths (such as RO and RW).
* Apply patch to allow the module to build with the Ubuntu kernel.
  Thanks, Björn Torkelsson. (Closes: #342607)
* Stop unconditionally forcing the compiler to cc or gcc in configure,
  allowing, among other things, building the kernel module with a
  compiler other than the default system compiler. (Closes: #338306)
* Call kernel-version correctly from prep-modules, which fixes build
  issues with manually-built kernels. (Closes: #344851)
* Backport man pages from upstream CVS. (Closes: #79763)
* Include afsmonitor and livesys in openafs-client.
* Include volinfo in openafs-fileserver.
* Document FAM's lack of support for AFS's security model and recommend
  gamin instead. (Closes: #343246)
* Add a hint to README.Debian on what to do about the cache partition if
  running ReiserFS or XFS without a spare partition.
* Use make install into debian/tmp rather than make dest. make dest is
  mostly for Transarc compatibility and make install looks more like a
  typical package and makes it easier to evaluate differences in FHS
  location between upstream and Debian. As a side effect, there's no
  need to mess with the @sys link. (Closes: #165909)
* Install more files with dh_install rather than install commands in
  debian/rules so that *.install shows a more complete picture of what
  goes into each package.
* Don't ignore make distclean errors.

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/karmic/openafs
This branch contains Public information 
Everyone can see this information.

Subscribers