On 25.02.2010 19:48, Kees Cook wrote: > Why is 3.0.2 not in Debian? It looks like 2.99 is in experimental; why > can't that package be used instead of having a full fork in Ubuntu? I'm > nervous about doing such a fork for an LTS.
Debian will base their packages for corosync/openais/pacemaker/heartbeat on the same base Ubuntu packages are built. They'll most probably adopt most (if not all) of our changes. Debian is a bit slow in this area. 2.99 can't be used for anything any more. It was a snapshot in development process. -- [MIR] heartbeat https://bugs.launchpad.net/bugs/527182 You received this bug notification because you are a member of Ubuntu High Availability Team, which is subscribed to heartbeat in ubuntu. Status in “heartbeat” package in Ubuntu: Incomplete Bug description: Binary package hint: heartbeat 1. Availability: all 2. Rationale: The package helps meet https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-cluster-stack blueprint goal. Needed binary packages are libheartbeat2 and libheartbeat2-dev. We don't need heartbeat binary cause we will use corosync as supported messaging layer. For those that would like to use heartbeat messaging layer, pacemaker needs to be compiled with libheartbeat2-dev. 3. Security: No CVEs (heartbeat 3 had no CVEs). Older versions had couple: http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-5873&ctype=cve http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3815&ctype=cve http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-3121&ctype=cve http://www.securityspace.com/smysecure/catid.html?id=CVE-2006-2272&ctype=cve http://www.securityspace.com/smysecure/catid.html?id=CVE-2005-2231&ctype=cve http://www.securityspace.com/smysecure/catid.html?id=CVE-2002-1215&ctype=cve 4. QA: Source doesn't exist in Debian, new package in Ubuntu (no bugs). Upstream is very active (http://hg.linux-ha.org/dev/). There are 33 bugs in Debian and 5 in Ubuntu for older version of heartbeat (before the split), but none of them are related to libheartbeat2 or libheartbeat2-dev. 5. UI standards: none 6. Dependencies: all in main, except cluster-glue and it's deps. MIRs: https://bugs.edge.launchpad.net/ubuntu/+source/libnet/+bug/515973 https://bugs.edge.launchpad.net/ubuntu/+source/openhpi/+bug/515976 https://bugs.edge.launchpad.net/ubuntu/+source/libesmtp/+bug/515996 7. Standards: Lintian warnings: W: libheartbeat2: package-name-doesnt-match-sonames libapphb2 libccmclient1 libclm1 libhbclient1 W: libheartbeat2: latest-debian-changelog-entry-without-new-version W: libheartbeat2-dev: latest-debian-changelog-entry-without-new-version Package is packaged with debhelper and has no patching system. 8. Maintenance: easy, upstream is willing to take our work into upstream 9. Background information: this package is one of dependencies for new cluster stack in Ubuntu. This package, cluster-agents and cluster-glue together form what was known as heartbeat 2.99. _______________________________________________ Mailing list: https://launchpad.net/~ubuntu-ha Post to : [email protected] Unsubscribe : https://launchpad.net/~ubuntu-ha More help : https://help.launchpad.net/ListHelp

