Public bug reported:

Binary package hint: heartbeat

1. Availability: all

2. Rationale: The package helps meet
https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-cluster-
stack blueprint goal. Needed binary packages are libheartbeat2 and
libheartbeat2-dev. We don't need heartbeat binary cause we will use
corosync as supported messaging layer. For those that would like to use
heartbeat messaging layer, pacemaker needs to be compiled with
libheartbeat2-dev.

3. Security: No CVEs (heartbeat 3 had no CVEs). Older versions had
couple:

http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-5873&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3815&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3121&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-2272&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2005-2231&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2002-1215&ctype=cve

4. QA: Source doesn't exist in Debian, new package in Ubuntu (no bugs).
Upstream is very active (http://hg.linux-ha.org/dev/). There are 33 bugs
in Debian and 5 in Ubuntu for older version of heartbeat (before the
split), but none of them are related to libheartbeat2 or
libheartbeat2-dev.

5. UI standards: none

6. Dependencies: all in main, except cluster-glue and it's deps. MIRs:

https://bugs.edge.launchpad.net/ubuntu/+source/libnet/+bug/515973
https://bugs.edge.launchpad.net/ubuntu/+source/openhpi/+bug/515976
https://bugs.edge.launchpad.net/ubuntu/+source/libesmtp/+bug/515996

7. Standards: Lintian warnings:

W: libheartbeat2: package-name-doesnt-match-sonames libapphb2 libccmclient1 
libclm1 libhbclient1
W: libheartbeat2: latest-debian-changelog-entry-without-new-version
W: libheartbeat2-dev: latest-debian-changelog-entry-without-new-version

Package is packaged with debhelper and has no patching system.

8. Maintenance: easy, upstream is willing to take our work into upstream

9. Background information: this package is one of dependencies for new
cluster stack in Ubuntu. This package, cluster-agents and cluster-glue
together form what was known as heartbeat 2.99.

** Affects: heartbeat (Ubuntu)
     Importance: Undecided
         Status: New

** Description changed:

  Binary package hint: heartbeat
  
  1. Availability: all
  
  2. Rationale: The package helps meet
  https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-cluster-
  stack blueprint goal. Needed binary packages are libheartbeat2 and
  libheartbeat2-dev. We don't need heartbeat binary cause we will use
  corosync as supported messaging layer. For those that would like to use
  heartbeat messaging layer, pacemaker needs to be compiled with
  libheartbeat2-dev.
  
  3. Security: No CVEs (heartbeat 3 had no CVEs). Older versions had
  couple:
  
  http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-5873&ctype=cve
  http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3815&ctype=cve
  http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3121&ctype=cve
  http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-2272&ctype=cve
  http://www.securityspace.com/smysecure/catid.html?id=CVE-2005-2231&ctype=cve
  http://www.securityspace.com/smysecure/catid.html?id=CVE-2002-1215&ctype=cve
  
- 4. QA: Source doesn't exist in Debian, new package in Ubuntu (no bugs). 
Upstream is very active (http://hg.linux-ha.org/dev/)
-            There are 33 bugs in Debian and 5 in Ubuntu for older version of 
heartbeat (before the split), but none of them are
-            related to libheartbeat2 or libheartbeat2-dev.
+ 4. QA: Source doesn't exist in Debian, new package in Ubuntu (no bugs).
+ Upstream is very active (http://hg.linux-ha.org/dev/). There are 33 bugs
+ in Debian and 5 in Ubuntu for older version of heartbeat (before the
+ split), but none of them are related to libheartbeat2 or
+ libheartbeat2-dev.
  
  5. UI standards: none
  
  6. Dependencies: all in main, except cluster-glue and it's deps. MIRs:
  
  https://bugs.edge.launchpad.net/ubuntu/+source/libnet/+bug/515973
  https://bugs.edge.launchpad.net/ubuntu/+source/openhpi/+bug/515976
  https://bugs.edge.launchpad.net/ubuntu/+source/libesmtp/+bug/515996
  
  7. Standards: Lintian warnings:
  
  W: libheartbeat2: package-name-doesnt-match-sonames libapphb2 libccmclient1 
libclm1 libhbclient1
  W: libheartbeat2: latest-debian-changelog-entry-without-new-version
  W: libheartbeat2-dev: latest-debian-changelog-entry-without-new-version
  
  Package is packaged with debhelper and has no patching system.
  
  8. Maintenance: easy, upstream is willing to take our work into upstream
  
  9. Background information: this package is one of dependencies for new
  cluster stack in Ubuntu. This package, cluster-agents and cluster-glue
  together form what was known as heartbeat 2.99.

-- 
[MIR] heartbeat
https://bugs.launchpad.net/bugs/527182
You received this bug notification because you are a member of Ubuntu
High Availability Team, which is subscribed to heartbeat in ubuntu.

Status in “heartbeat” package in Ubuntu: New

Bug description:
Binary package hint: heartbeat

1. Availability: all

2. Rationale: The package helps meet 
https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-cluster-stack 
blueprint goal. Needed binary packages are libheartbeat2 and libheartbeat2-dev. 
We don't need heartbeat binary cause we will use corosync as supported 
messaging layer. For those that would like to use heartbeat messaging layer, 
pacemaker needs to be compiled with libheartbeat2-dev.

3. Security: No CVEs (heartbeat 3 had no CVEs). Older versions had couple:

http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-5873&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3815&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3121&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-2272&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2005-2231&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2002-1215&ctype=cve

4. QA: Source doesn't exist in Debian, new package in Ubuntu (no bugs). 
Upstream is very active (http://hg.linux-ha.org/dev/). There are 33 bugs in 
Debian and 5 in Ubuntu for older version of heartbeat (before the split), but 
none of them are related to libheartbeat2 or libheartbeat2-dev.

5. UI standards: none

6. Dependencies: all in main, except cluster-glue and it's deps. MIRs:

https://bugs.edge.launchpad.net/ubuntu/+source/libnet/+bug/515973
https://bugs.edge.launchpad.net/ubuntu/+source/openhpi/+bug/515976
https://bugs.edge.launchpad.net/ubuntu/+source/libesmtp/+bug/515996

7. Standards: Lintian warnings:

W: libheartbeat2: package-name-doesnt-match-sonames libapphb2 libccmclient1 
libclm1 libhbclient1
W: libheartbeat2: latest-debian-changelog-entry-without-new-version
W: libheartbeat2-dev: latest-debian-changelog-entry-without-new-version

Package is packaged with debhelper and has no patching system.

8. Maintenance: easy, upstream is willing to take our work into upstream

9. Background information: this package is one of dependencies for new cluster 
stack in Ubuntu. This package, cluster-agents and cluster-glue together form 
what was known as heartbeat 2.99.





_______________________________________________
Mailing list: https://launchpad.net/~ubuntu-ha
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~ubuntu-ha
More help   : https://help.launchpad.net/ListHelp

Reply via email to