Sounds okay to me, upstream is responsive to issues, and security looks
good. +1
** Changed in: heartbeat (Ubuntu)
Status: Incomplete => In Progress
** Changed in: heartbeat (Ubuntu)
Assignee: Kees Cook (kees) => (unassigned)
--
[MIR] heartbeat
https://bugs.launchpad.net/bugs/527182
You received this bug notification because you are a member of Ubuntu
High Availability Team, which is subscribed to heartbeat in ubuntu.
Status in “heartbeat” package in Ubuntu: In Progress
Bug description:
Binary package hint: heartbeat
1. Availability: all
2. Rationale: The package helps meet
https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-cluster-stack
blueprint goal. Needed binary packages are libheartbeat2 and libheartbeat2-dev.
We don't need heartbeat binary cause we will use corosync as supported
messaging layer. For those that would like to use heartbeat messaging layer,
pacemaker needs to be compiled with libheartbeat2-dev.
3. Security: No CVEs (heartbeat 3 had no CVEs). Older versions had couple:
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-5873&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3815&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3121&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-2272&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2005-2231&ctype=cve
http://www.securityspace.com/smysecure/catid.html?id=CVE-2002-1215&ctype=cve
4. QA: Source doesn't exist in Debian, new package in Ubuntu (no bugs).
Upstream is very active (http://hg.linux-ha.org/dev/). There are 33 bugs in
Debian and 5 in Ubuntu for older version of heartbeat (before the split), but
none of them are related to libheartbeat2 or libheartbeat2-dev.
5. UI standards: none
6. Dependencies: all in main, except cluster-glue and it's deps. MIRs:
https://bugs.edge.launchpad.net/ubuntu/+source/libnet/+bug/515973
https://bugs.edge.launchpad.net/ubuntu/+source/openhpi/+bug/515976
https://bugs.edge.launchpad.net/ubuntu/+source/libesmtp/+bug/515996
7. Standards: Lintian warnings:
W: libheartbeat2: package-name-doesnt-match-sonames libapphb2 libccmclient1
libclm1 libhbclient1
W: libheartbeat2: latest-debian-changelog-entry-without-new-version
W: libheartbeat2-dev: latest-debian-changelog-entry-without-new-version
Package is packaged with debhelper and has no patching system.
8. Maintenance: easy, upstream is willing to take our work into upstream
9. Background information: this package is one of dependencies for new cluster
stack in Ubuntu. This package, cluster-agents and cluster-glue together form
what was known as heartbeat 2.99.
_______________________________________________
Mailing list: https://launchpad.net/~ubuntu-ha
Post to : [email protected]
Unsubscribe : https://launchpad.net/~ubuntu-ha
More help : https://help.launchpad.net/ListHelp
