~ubuntu-branches/ubuntu/lucid/openafs/lucid-security : changes

~ubuntu-branches/ubuntu/lucid/openafs/lucid-security » Changes from revision 26

From Revision 24 to 5

Rev	Summary	Authors	Tags	Date
24	* Apply upstream deltas: * Apply upstream deltas: - [135e196b] Create missing root directory when ORPH_ATTACH - [190ef2cb] volmonitor keep vtrans lock - [812dcc2c] Increase the maximum number of sysnames - [a123d4ab] Print rxdebug statistics as unsigned values * If the user configures openafs-client to use AFSDB records for VLDB server location, don't prompt the user for VLDB servers for the local cell even if they're not present in CellServDB and don't try to add an entry for the local cell to CellServDB. (Closes: #575299)	Russ Allbery	1.4.12+dfsg-3	14 years ago
23	* Apply upstream deltas: * Apply upstream deltas: - [4ca7b6fc] Remove lih_r - [f3899ac3] Allow GetSomeSpace_r to select an optimal host - [94a43966] h_TossStuff_r: check held-ness after lock - [b78eeb0c] h_TossStuff_r: make sure host does not go away - [0583af32] volmonitor copy link before calling free - [eb799d07] Move non-executable stack assembly code to end of file * Build with -fno-strict-aliasing. The upstream development branch has a better fix that selectively enables this for specific files with known problems, but be conservative for the stable release.	Russ Allbery	1.4.12+dfsg-2	14 years ago
22	* New upstream release. * New upstream release. - Enable weak encryption types in aklog and klog.krb5. - Build support for Linux 2.6.33. - Improvements to host tracking safety in the file server. - Fall back to current kernel credentials if we can't use stored ones. - Fix truncation handling in some large file situations. - Further fixes to mmap handling. - Avoid double-free in some FetchData64 error situations. - Stop warning about system call hooks when keyrings are in use. - Flush vcaches when a mount fails to avoid inconsistent data. - New dump tag and length standard for vos dump. - Fix stack executability for programs containing assembly code. - Various salvager robustness fixes. * Use dh_dkms from the DKMS package to handle creation of the maintainer scripts for openafs-modules-dkms rather than rolling our own. (LP: #497149) * Update init script to require $remote_fs be started first and stopped after OpenAFS. This won't be the case in the long run, but for now some important boot-time options need /usr/bin/fs to set them. * List $syslog in Should-Start for the openafs-client init script, since otherwise if loading the module causes a kernel panic, it won't be logged to disk. * Update CellServDB to the 2010-02-28 version. * Add README.source explaining maintenance procedures and a debian/import-upstream script to do a Git-aware merge of a new upstream release that will allow us to cherry-pick upstream patches and do proper merges. * Stop linking the openafs-fileserver doc directory to openafs-client so that we can provide a separate NEWS.Debian. * Update standards version to 3.8.4 (no changes required).	Russ Allbery	1.4.12+dfsg-1	14 years ago
21	* Apply upstream deltas: * Apply upstream deltas: - [c12ec354] Fix write_begin configure test for recent RHEL kernels - [b7198421] Fix memory allocation warnings at shutdown - [7183c113] Do not check aoutSize in PGetPAG - [c0323c49] cm: address race condition in afs_QueueVCB - [ad6dabdc] Clean up console message - [c9f7fe37] Make ktc_curpag also detect ONEGROUP PAG gids - [2f87c43e] volser transaction object race conditions - [2d6c0390] Add array bounds checking in h_Enumerate - [70f6a328] Check for (hostFlags & HOSTDELETED) after h_Lock_r - [c7a59397] Avoid IHandle leak when failing to attach volume Remove incorrect return call in shutdown_icl() introduced by b7198421. * Do not attempt to build the kernel module with DKMS if the appropriate Linux headers aren't installed. Based on code from the common DKMS postinst script (which we'll just use once it's reliably available). Thanks, Anders Kaseorg. (LP: #487535) * Fix configure flags used for enabling or disabling LWP and kernel debugging flags and always pass --disable-strip-binaries. * Fix the openafs-dbg dependencies and package description to reflect its inclusion of debugging symbols for all server binaries in openafs-fileserver and openafs-dbserver, but not the legacy PAM modules. * In anticipation of a change in dpkg-source's defaults, force source package format 1.0. The package is maintained using Git and generating a proper quilt series is complex and relatively pointless work, so the additional complexity of the 3.0 format is currently not that useful. * Change section of openafs-modules-dkms to kernel to match override.	Russ Allbery	1.4.11+dfsg-6	14 years ago
20	* Apply upstream deltas: * Apply upstream deltas: - [7833e472] Make afsd.pod reflect reality - [c9974c7a] Avoid prematurely destroying callback_rxcon - [9b37972e] Linux: 2.6.32 - Adapt to writeback changes - [abdf72bc] Linux: Avoid deadlock in readdir - release GLOCK for filldir - [bdb4f98a] Protect rx_call iovq from simultaneous attempts to empty it - [c08609ae] Avoid using released hosts - [a410b7fd] Linux - Fix disk cache access for selinux/AppArmor constrained processes (LP: #415766) - [49094ccf] Add automatic sysname detection for ARM Linux - [525b594a] Make ktc_curpag generally available (LP: #446521) * In the postinst of openafs-modules-dkms, if the openafs module is already added in DKMS, try to remove it first before adding it. This should more correctly handle the case of a user installing this package without the correct kernel headers, having it fail in postinst, and then installing the correct headers and having dpkg attempt to configure the package again. Thanks, Philipp Kaluza. (Closes: #553542)	Russ Allbery	1.4.11+dfsg-5	14 years ago
19	When changing the name of the source package built by When changing the name of the source package built by openafs-modules-source, we need to change the package name in the changelog as well or dpkg-gencontrol explodes. Thanks, Aaron M. Ucko. (Closes: #549140)	Russ Allbery	1.4.11+dfsg-4	14 years ago
18	* Add armv5tel to debian/sysname, mapping it to arm_linux26.... * Add armv5tel to debian/sysname, mapping it to arm_linux26. Patch from Daniel Bayer. Also make the similar change for the module source package. (Closes: #542315) * Also install restorevol in the openafs-client package. * Swap maintainer and uploaders in the packaging files for the module source package, matching the main package. * Update standards version to 3.8.3. - Change section of packages generated by openafs-modules-source to kernel. - Add Homepage to packages generated by openafs-modules-source.	Russ Allbery		14 years ago
17	New upstream release. New upstream release.	Russ Allbery		14 years ago
16	* New upstream release. * New upstream release. - OPENAFS-SA-2009-001: Avoid a potential kernel memory overrun if more items than requested are returned from an InlineBulk or BulkStatus message. (CVE-2009-1251) - OPENAFS-SA-2009-002: Avoid converting negative errors into invalid kernel memory pointers. (CVE-2009-1250) - Preliminary support for 2.6.30 kernels. - Dynamic vcache allocation support to deal with inotify vcache pinning. - Do appropriate locking for CellServDB in /proc. - Use +dfsg instead of .dfsg for saner version sorting. * Debian's 2.6.29 packages no longer include symlinks from the architecture-specific header tree to the common header tree and instead overlay both header trees using kbuild. Change the Autoconf probes to always use kbuild and generate stub headers in the paths that OpenAFS expects that include the linux headers. Patch from Aaron M. Ucko. (Closes: #521745) * Build PIC versions of libafsauthent and libafsrpc and install them in libopenafs-dev for use when AFS code should be embedded into shared libraries. Patch from Garrett Wollman. * Update CellServDB to 2008-11-07 version. (Closes: #522451) * Update debian/watch for +dfsg naming instead of .dfsg. * Update standards version to 3.8.1 (no changes required). * Translation updates: - Japanese, thanks Hideki Yamane. (Closes: #521518)	Russ Allbery	1.4.10+dfsg1-1	15 years ago
15	* Apply upstream CVS deltas: * Apply upstream CVS deltas: - STABLE14-cbr-free-what-you-alloc-20090325: dequeue items in the same way they were allocated. - STABLE14-shutdown-vcache-avoid-null-deref-20090324: avoid oops on shutdown. (LP: #333197) - STABLE14-uphys-invalidate-returns-void-20081130: fix apparent Ubik synchronization errors due to incorrect use of a void return value. * Update package sections for the new archive organization.	Russ Allbery	1.4.8.dfsg1-3	15 years ago
14	* Make openafs-modules-source architecture-specific (arch: a... * Make openafs-modules-source architecture-specific (arch: any instead of arch: all). The new method for generating the kernel source tree only generates correct build machinery for the architecture on which it was built, making the package architecture-specific. The generated tree is so much smaller that this still only uses about 1MB of archive space more than the old method and makes each openafs-modules-source package much smaller. This is a workaround until we can fix libafs_tree to include enough build machinery to handle all Linux architectures from one source tree. (Closes: #516023) * Explicitly remove *-stamp files in the clean target of the module build until the module build is upgraded to debhelper 7.	Russ Allbery	1.4.8.dfsg1-2	15 years ago
13	* Apply upstream patch to free /proc entries in the correct ... * Apply upstream patch to free /proc entries in the correct order. Thanks, Marc Dionne. (Closes: #493914) * Apply upstream deltas to support 2.6.27 kernels and to stop using COMMON_KERN_CFLAGS for all 2.6 kernels uniformly, which fixes problems on amd64 with newer kernels. Thanks, Björn Torkelsson. (LP: #267504) * Translation updates: - Swedish, thanks Martin Bagge. (Closes: #493120)	Russ Allbery	1.4.7.dfsg1-6	15 years ago
12	* Update documentation to note that enabling v4 support or r... * Update documentation to note that enabling v4 support or running krb524d is no longer required for aklog to work. * Translation updates: - German, thanks Henrik Kroeger. (Closes: #400800)	Russ Allbery	1.4.2-4	17 years ago
11	* No longer pass explicit cache tuning options to afsd and i... * No longer pass explicit cache tuning options to afsd and instead let OpenAFS automatically choose tuning based on the cache size. * Accept trailing whitespace in ThisCell. * Fix path canonicalization on the server, enabling bos getlog with a simple log name to work properly against a Debian bosserver. * Change the documentation of afsd -shutdown to be less dire and more accurate. Thanks, Daniel J. Priem. (Closes: #394990) * Document (at least partially) AFS's mapping of Kerberos v5 principal names to Kerberos v4 format in the aklog man page. Thanks, Daniel J. Priem. (Closes: #394832) * Document that aklog -setpag may not always work.	Russ Allbery	1.4.2-3	17 years ago
10	Upstream fix to prevent butc segfaulting. Upstream fix to prevent butc segfaulting.	Sam Hartman	1.4.2-2	17 years ago
9	Apply upstream fix from Derek Atkins for compilation with ke... Apply upstream fix from Derek Atkins for compilation with kernel versions prior to 2.6.10. (Closes: #376576)	Russ Allbery	1.4.1-4	17 years ago
8	* Include all of AFS's local XDR implementation in the build... * Include all of AFS's local XDR implementation in the build for shlibafsrpc, fixing problems with undefined symbols in the PAM module on AMD64. * When creating a new file server in afs-newcell, use a set of tuning flags from Harald Barth rather than relying on the defaults. This doesn't help with general bos create; long term, the defaults need to be fixed. (Closes: #364100) * Add a note in README.servers about fileserver tuning options. * Update debconf templates to follow the best practice recommendations from the Developer's Reference. * Regenerate the man pages on build since the pre-generated ones were done with a very old version of pod2man. * Update standards version to 3.7.2 (no changes required). * Use a better method of optionally running make distclean. * Add build-arch and build-indep targets, just in case. * Translation updates: - Czech, thanks Martin Šín. - Portuguese (Brazil), thanks André Luís Lopes. - French, thanks Christian Perrier. - Vietnamese, thanks Clytie Siddall.	Russ Allbery	1.4.1-3	17 years ago
7	* Exit successfully in the openafs-client init script if no ... * Exit successfully in the openafs-client init script if no module is installed, since otherwise openafs-client will fail to install until one builds a module. This restores previous accidental behavior due to a bug in debhelper. (Closes: #362695) * libopenafs-dev must conflict with liblwp-dev since they both provide liblwp.a. Thanks, Justin Pryzby. (Closes: #362842) * openafs-client recommends lsof, since the init script uses it for cleaner shutdown.	Russ Allbery	1.4.1-2	18 years ago
6	Fake sync from Debian, bringing in sparc64 and documentation... Fake sync from Debian, bringing in sparc64 and documentation fixes.	Adam Conrad	1.4.0-3.1	18 years ago
5	* Apply upstream patch from Chas Williams to be more careful... * Apply upstream patch from Chas Williams to be more careful about what dentry is used in renames, avoiding a kernel fault when renaming dentries accessed through multiple paths (such as RO and RW). * Apply patch to allow the module to build with the Ubuntu kernel. Thanks, Björn Torkelsson. (Closes: #342607) * Stop unconditionally forcing the compiler to cc or gcc in configure, allowing, among other things, building the kernel module with a compiler other than the default system compiler. (Closes: #338306) * Call kernel-version correctly from prep-modules, which fixes build issues with manually-built kernels. (Closes: #344851) * Backport man pages from upstream CVS. (Closes: #79763) * Include afsmonitor and livesys in openafs-client. * Include volinfo in openafs-fileserver. * Document FAM's lack of support for AFS's security model and recommend gamin instead. (Closes: #343246) * Add a hint to README.Debian on what to do about the cache partition if running ReiserFS or XFS without a spare partition. * Use make install into debian/tmp rather than make dest. make dest is mostly for Transarc compatibility and make install looks more like a typical package and makes it easier to evaluate differences in FHS location between upstream and Debian. As a side effect, there's no need to mess with the @sys link. (Closes: #165909) * Install more files with dh_install rather than install commands in debian/rules so that .install shows a more complete picture of what goes into each package. Don't ignore make distclean errors.	Russ Allbery	1.4.0-3	18 years ago

Older »