corosync (3.1.7-1ubuntu3.2) noble-security; urgency=medium

  * SECURITY UPDATE: DoS via wrong return value
    - debian/patches/CVE-2026-35091.patch: return error if sanity check
      fails in exec/totemsrp.c.
    - CVE-2026-35091
  * SECURITY UPDATE: DoS via integer overflow
    - debian/patches/CVE-2026-35092.patch: fix integer overflow in
      memb_join_sanity in exec/totemsrp.c.
    - CVE-2026-35092

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 10 Apr 2026 08:40:11 -0400

corosync (3.1.7-1ubuntu3.1) noble-security; urgency=medium

  * SECURITY UPDATE: stack buffer overflow
    - debian/patches/CVE-2025-30472.patch: check size of orf_token msg in
      exec/totemsrp.c.
    - CVE-2025-30472

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 27 Mar 2025 14:22:38 -0400

corosync (3.1.7-1ubuntu3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 17:56:22 +0000

corosync (3.1.7-1ubuntu2) noble; urgency=medium

  * No-change rebuild for readline time64 change.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 14 Mar 2024 02:53:08 +0100

corosync (3.1.7-1ubuntu1) lunar; urgency=medium

  * Merge with Debian unstable (LP: #1993393). Remaining changes:
    - d/t/quorumtool: search for localhost instead of node1
    - d/p/Make-the-example-config-valid.patch: comment out the node name
      in config file. With this, we will keep the same behavior as we
      have in Bionic which is using the output of "uname -n" as the node
      name (LP #1874719).
    - d/p/lp1918735/0001-allow_knet_handle_fallback_default_yes.patch:
      Retry knet_handle_new without privileged flag (LP #1918735).
    - d/control: corosync binary depends on libqb-dev
      (LP #1677684)
  * Dropped
    - d/t/control: add allow-stderr restriction
      [Not needed anymore]
    - d/control: corosync binary depends on libqb-dev
      (LP #1677684)
      [The qb-blackbox was moved from libqb-dev to libqb-tools]
  * Added:
    - d/control: corosync recommends libqb-tools (LP #1677684).
      corosync-blackbox relies on libqb-tools.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Wed, 25 Jan 2023 17:08:20 -0300

corosync (3.1.7-1) unstable; urgency=medium

  * [f3d69c9] New upstream release (3.1.7)
  * [7ca438c] Delete upstream patch, refresh the rest
  * [36863f4] Update Standards-Version to 4.6.2 (no changes required)
  * [02c7690] Update copyright of the packaging
  * [ae14a7c] Adapt Lintian overrides to new message format
  * [7732c89] The initscript-dir variable has long fallen out of use
  * [faafc6e] New patch: Revert "logrotate: Use copytruncate method by default"
  * [cab0938] Add logrotate autopkgtest

 -- Ferenc Wágner <wferi@debian.org>  Sun, 15 Jan 2023 15:00:42 +0100

corosync (3.1.6-2ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/t/quorumtool: search for localhost instead of node1
    - d/t/control: add allow-stderr restriction
    - d/p/Make-the-example-config-valid.patch: comment out the node name
      in config file. With this, we will keep the same behavior as we
      have in Bionic which is using the output of "uname -n" as the node
      name (LP #1874719).
    - d/p/lp1918735/0001-allow_knet_handle_fallback_default_yes.patch:
      Retry knet_handle_new without privileged flag (LP #1918735).
    - d/control: corosync binary depends on libqb-dev
      (LP #1677684)

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Tue, 19 Jul 2022 06:16:37 -0300

corosync (3.1.6-2) unstable; urgency=medium

  [ Debian Janitor ]
  * [290ca16] Remove 2 obsolete maintscript entries in 2 files.
    Changes-By: lintian-brush
  * [8d89318] Update renamed lintian tag names in lintian overrides.
    Changes-By: lintian-brush
    Fixes: lintian: renamed-tag
    See-also: https://lintian.debian.org/tags/renamed-tag.html

  [ Ferenc Wágner ]
  * [f8c32e7] New patch: Remove bashism from configure script (Closes: #998785)

 -- Ferenc Wágner <wferi@debian.org>  Sun, 06 Mar 2022 20:07:05 +0100

corosync (3.1.6-1ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946852). Remaining changes:
    - d/control: corosync binary depends on libqb-dev (LP #1677684).
    - d/p/Make-the-example-config-valid.patch: comment out the
      node name in config file. With this, we will keep the same
      behavior as we have in Bionic which is using the output of
      "uname -n" as the node name (LP #1874719).
    - d/p/lp1918735/0001-allow_knet_handle_fallback_default_yes.patch:
      Retry knet_handle_new without privileged flag (LP #1918735).
    - d/t/quorumtool: search for localhost instead of node1.
    - d/t/control: add allow-stderr restriction.

 -- Miriam España Acebal <miriam.espana@canonical.com>  Wed, 12 Jan 2022 11:58:06 +0100

corosync (3.1.6-1) unstable; urgency=medium

  * [1c6e48f] Make use of the execute_before_* feature of dh 12.8+
  * [e6b31ef] New upstream release (3.1.6)
  * [81eed39] Refresh our patches

 -- Ferenc Wágner <wferi@debian.org>  Mon, 22 Nov 2021 19:40:15 +0100

corosync (3.1.5-2) unstable; urgency=medium

  * [a836090] Revert "No need to override the default /usr/lib/systemd/system
    systemd directory anymore"
    This reverts commit e710e1f5bec1bcbc9d47f639701a6f2fde54346b.
    dh_installsystemd apparently does not find the service files under
    /usr/lib, and consequently does not insert the maintainer script
    snippets necessary to start the services on installation (for example).

 -- Ferenc Wágner <wferi@debian.org>  Fri, 01 Oct 2021 20:28:56 +0200

corosync (3.1.5-1) unstable; urgency=medium

  * [929fb0c] New upstream release (3.1.5)
  * [56b0b8f] Remove upstreamed patches, refresh the rest
  * [f231d94] Switch to Debhelper compatibility level 13
  * [65638bc] Update Standards-Version to 4.6.0 (no changes required)
  * [e710e1f] No need to override the default /usr/lib/systemd/system systemd
    directory anymore

 -- Ferenc Wágner <wferi@debian.org>  Thu, 30 Sep 2021 22:38:39 +0200

corosync (3.1.2-2ubuntu1) impish; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/t/control: add allow-stderr restriction
    - d/control: corosync binary depends on libqb-dev
      (LP #1677684)
    - Retry knet_handle_new without privileged flag (LP #1918735)
      + d/p/lp1918735/0001-allow_knet_handle_fallback_default_yes.patch
    - d/p/Make-the-example-config-valid.patch: comment out the node name in
      config file
      + With this, we will keep the same behavior as we have in Bionic which is
        using the output of "uname -n" as the node name (LP #1874719).
    - d/t/quorumtool: search for localhost instead of node1
  * Dropped:
    - d/p/lp1911904-Don-t-lock-all-current-and-future-memory-if-can-t-in.patch:
      + Don't mlockall() if setrlimit() fails (LP #1911904)
      [Applied by upstream in version 3.1.1]
    - Retry knet_handle_new without privileged flag (LP #1918735)
      + d/p/lp1918735/0001-try-unprivileged-knet-handle-new.patch
      [Applied by upstream in version 3.1.1]

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Fri, 23 Jul 2021 16:27:47 -0300

corosync (3.1.2-2) unstable; urgency=medium

  * [f641780] New patch: stats: fix crash when iterating over deleted keys.
    Cherry-picked from v3.1.4.
    Thanks to Christine Caulfield

 -- Ferenc Wágner <wferi@debian.org>  Mon, 05 Jul 2021 09:11:09 +0200

corosync (3.1.2-1) unstable; urgency=medium

  * [2c66d6d] New upstream release (3.1.2)
  * [158e261] Drop upstreamed patch, refresh the rest

 -- Ferenc Wágner <wferi@debian.org>  Wed, 07 Apr 2021 14:19:13 +0200

corosync (3.1.1-1) unstable; urgency=medium

  * [d0fe5b2] New upstream release (3.1.1) (Closes: #985070)
  * [e867d55] Refresh our patches
  * [9d9b3d5] Acknowledge new symbols
  * [069e608] Adapt autopkgtest to the new cfgtool output format
  * [a447ac3] New patch: totemknet: pass correct handle to knet_handle_compress.
    Thanks to Fabio M. Di Nitto (Closes: #986325)
  * [dc2b18f] New patch: man: corosync-cfgtool.8: use proper single quotes

 -- Ferenc Wágner <wferi@debian.org>  Sat, 03 Apr 2021 17:27:29 +0200

corosync (3.1.0-3) unstable; urgency=medium

  [ Helmut Grohne ]
  * [b8b9ff1] Reduce Build-Depends
    + Drop unused libxml2-dev dependency. It deals with xml via xsltproc.
    + Drop unused augeas-tools dependency. While it ships a lens, it does not
      further integrate with augeas. (Closes: #980989)

 -- Ferenc Wágner <wferi@debian.org>  Sun, 28 Feb 2021 10:06:39 +0100

corosync (3.1.0-2ubuntu4) impish; urgency=medium

  * d/p/Make-the-example-config-valid.patch: comment out the node name in
    config file (LP: #1874719). With this, we will keep the same behavior as we
    have in Bionic which is using the output of "uname -n" as the node name.
  * d/t/quorumtool: search for localhost instead of node1.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Thu, 17 Jun 2021 10:38:07 -0300

corosync (3.1.0-2ubuntu3) hirsute; urgency=medium

  * d/p/lp1918735-try-unprivileged-knet-handle-new.patch,
    d/p/lp1918735/0001-try-unprivileged-knet-handle-new.patch,
    d/p/lp1918735/0002-allow_knet_handle_fallback_default_yes.patch:
    - Update patch with final adjustments from upstream,
      adding conf param which we default to enabled

 -- Dan Streetman <ddstreet@canonical.com>  Fri, 19 Mar 2021 07:45:13 -0400

corosync (3.1.0-2ubuntu2) hirsute; urgency=medium

  * d/p/lp1911904-Don-t-lock-all-current-and-future-memory-if-can-t-in.patch:
    - Don't mlockall() if setrlimit() fails (LP: #1911904)
  * d/p/lp1918735-try-unprivileged-knet-handle-new.patch:
    - Retry knet_handle_new without privileged flag (LP: #1918735)
  * d/t: don't skip tests now that we fixed crashing in container

 -- Dan Streetman <ddstreet@canonical.com>  Wed, 10 Mar 2021 12:55:26 -0500

corosync (3.1.0-2ubuntu1) hirsute; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - Skip autopkgtest for unprivileged containers: (LP #1828228)
      + d/t/control: allow stderr and mark tests as skippable
      + d/t/{cfgtool,quorumtool}: skips when inside unpriv containers
    - d/control: corosync binary depends on libqb-dev
      (LP #1677684)
  * Dropped:
    - Post v3.0.3 release fixes backported to Ubuntu (LP #1869622)
      debian/patches/ubuntu-v3.0.3-fixes/:
      + lp1869622-09f6d34a-logconfig-Remove-double-free-of-value.patch
      + lp1869622-0c118d8f-totemknet-Check-result-of-fcntl-O_NONBLOCK-call.patch
      + lp1869622-0c16442f-votequorum-Change-check-of-expected_votes.patch
      + lp1869622-1fb095b0-notifyd-Check-cmap_track_add-result.patch
      + lp1869622-29109683-totemknet-Assert-strcpy-length.patch
      + lp1869622-35c312f8-votequorum-Assert-copied-strings-length.patch
      + lp1869622-380b744e-totemknet-Don-t-mix-corosync-and-knet-error-codes.patch
      + lp1869622-56ee8503-quorumtool-Assert-copied-string-length.patch
      + lp1869622-5f543465-quorumtool-exit-on-invalid-expected-votes.patch
      + lp1869622-624b6a47-stats-Assert-value_len-when-value-is-needed.patch
      + lp1869622-74eed54a-sync-Assert-sync_callbacks.name-length.patch
      + lp1869622-89b0d62f-stats-Check-return-code-of-stats_map_get.patch
      + lp1869622-8ce65bf9-votequorum-Reflect-runtime-change-of-2Node-to-WFA.patch
      + lp1869622-8ff7760c-cmapctl-Free-bin_value-on-error.patch
      + lp1869622-a24cbad5-totemconfig-Initialize-warnings-variable.patch
      + lp1869622-c631951e-icmap-icmap_init_r-leaks-if-trie_create-fails.patch
      + lp1869622-ca320bea-votequorum-set-wfa-status-only-on-startup.patch
      + lp1869622-efe48120-totemconfig-Free-leaks-found-by-coverity.patch
      [applied by upstream]
    - debian/corosync-notifyd.init: fix for 2 PIDFILEs declared (LP #1437359)
      [fixed in Debian]
    - Post v3.0.3 release fixes backported to Ubuntu (LP #1895366)
      debian/patches/ubuntu-v3.0.3-fixes/:
      + lp1895366-7f64a1dc-cmapctl-return-error-on-no-result-of-print-prefix.patch
      + lp1895366-ec889e89-cmapctl-check-NULL-for-key-type-and-value-for-p.patch
      + lp1895366-9105d94a-cmapctl-return-EXIT_FAILURE-on-failure.patch
      + lp1895366-21e1c711-cfgtool-Remove-unused-callbacks.patch
      + lp1895366-ee38d93c-cpghum-Remove-unused-time-variables-and-functions.patch
      + lp1895366-f31a31f9-cmap-Assert-copied-string-length.patch
      [applied by upstream]
    - d/{libcfg7,libcmap4,libcpg4,libquorum5,libsam4,libvotequorum8}.symbols:
      Drop linker magic injecting start/stop symbols due to libqb 2
      update.
      Thanks to Ferenc Wágner <wferi@debian.org>.
      [fixed in Debian]

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Tue, 19 Jan 2021 17:55:45 -0300

corosync (3.1.0-2) unstable; urgency=medium

  * [d92f1d8] Drop the log directory placeholder file.
    According to #604807 the buster logrotate already skips missing
    directories gracefully, so we don't need this workaround anymore,
    as #588515 is fixed.
  * [ace09cc] libqb 2 dropped the linker magic injecting start/stop symbols
  * [52cf9ae] Update Standards-Version to 4.5.1 (no changes needed)

 -- Ferenc Wágner <wferi@debian.org>  Fri, 01 Jan 2021 09:11:36 +0100

corosync (3.1.0-1) unstable; urgency=medium

  * [25c1719] New upstream release (3.1.0)
  * [124e796] Drop upstreamed patches, refresh the rest
  * [b63c8d2] The upstream default systemd directory moved into /usr.
    But Debian still uses /lib/systemd/system for unit files.
  * [a950a80] Wildcard all installed shared object versions.
    So they don't need changing on future version bumps (like the current
    libquorum.so.5.0.0 -> 5.1.0).
  * [2354b72] Update libquorum5 symbols file

 -- Ferenc Wágner <wferi@debian.org>  Mon, 26 Oct 2020 20:26:19 +0100

corosync (3.0.4-2) unstable; urgency=medium

  * [cff365e] autopkgtest fix: cfgtool output got reworked in 3.0.4.
    Since 720a892 the status of the localhost link is not displayed, because
    it is safe to expect that it is always connected.

 -- Ferenc Wágner <wferi@debian.org>  Wed, 30 Sep 2020 15:32:39 +0200

corosync (3.0.4-1) unstable; urgency=medium

  [ Debian Janitor ]
  * [b31fa99] Set upstream metadata fields: Bug-Database, Bug-Submit,
    Repository, Repository-Browse.

  [ Ferenc Wágner ]
  * [5a801c3] Current dwz works already.
    This reverts bf80b75 and also adds a version constraint.
  * [686d0b0] New upstream release (3.0.4)
  * [51bcecc] Delete upstreamed patch, refresh the rest
  * [2ddaa1e] Update Standards-Version to 4.5.0 (no changes required)
  * [8ecf0a6] New patch: man: votequorum.5: use proper single quotes

  [ Rafael David Tinoco ]
  * [4f72296] * debian/corosync-notifyd.init: fix for 2 PIDFILEs declared
    (LP: #1437359)

 -- Ferenc Wágner <wferi@debian.org>  Wed, 30 Sep 2020 12:45:33 +0200

corosync (3.0.3-2ubuntu6) hirsute; urgency=medium

  * d/{libcfg7,libcmap4,libcpg4,libquorum5,libsam4,libvotequorum8}.symbols:
    Drop linker magic injecting start/stop symbols due to libqb 2
    update.
    Thanks to Ferenc Wágner <wferi@debian.org>.

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Mon, 11 Jan 2021 17:29:30 -0500

corosync (3.0.3-2ubuntu5) hirsute; urgency=medium

  * No-change upload due to net-snmp transition.

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Thu, 07 Jan 2021 10:49:19 -0500

corosync (3.0.3-2ubuntu4) hirsute; urgency=medium

  * No-change rebuild for libqb soname change.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 01 Jan 2021 14:37:31 +0100

corosync (3.0.3-2ubuntu3) groovy; urgency=medium

  * Post v3.0.3 release fixes backported to Ubuntu (LP: #1895366)
    debian/patches/ubuntu-v3.0.3-fixes/:
    - lp1895366-7f64a1dc-cmapctl-return-error-on-no-result-of-print-prefix.patch
    - lp1895366-ec889e89-cmapctl-check-NULL-for-key-type-and-value-for-p.patch
    - lp1895366-9105d94a-cmapctl-return-EXIT_FAILURE-on-failure.patch
    - lp1895366-21e1c711-cfgtool-Remove-unused-callbacks.patch
    - lp1895366-ee38d93c-cpghum-Remove-unused-time-variables-and-functions.patch
    - lp1895366-f31a31f9-cmap-Assert-copied-string-length.patch

 -- Rafael David Tinoco <rafaeldtinoco@ubuntu.com>  Sat, 12 Sep 2020 04:27:43 +0000

corosync (3.0.3-2ubuntu2) focal; urgency=medium

  [Jorge Niedbalski]
  * d/control: corosync binary depends on libqb-dev (LP: #1677684)

  [Rafael David Tinoco]
  * debian/corosync-notifyd.init: fix for 2 PIDFILEs declared (LP: #1437359)
  * Post v3.0.3 release fixes backported to Ubuntu (LP: #1869622)
    debian/patches/ubuntu-v3.0.3-fixes/:
    - lp1869622-09f6d34a-logconfig-Remove-double-free-of-value.patch
    - lp1869622-0c118d8f-totemknet-Check-result-of-fcntl-O_NONBLOCK-call.patch
    - lp1869622-0c16442f-votequorum-Change-check-of-expected_votes.patch
    - lp1869622-1fb095b0-notifyd-Check-cmap_track_add-result.patch
    - lp1869622-29109683-totemknet-Assert-strcpy-length.patch
    - lp1869622-35c312f8-votequorum-Assert-copied-strings-length.patch
    - lp1869622-380b744e-totemknet-Don-t-mix-corosync-and-knet-error-codes.patch
    - lp1869622-56ee8503-quorumtool-Assert-copied-string-length.patch
    - lp1869622-5f543465-quorumtool-exit-on-invalid-expected-votes.patch
    - lp1869622-624b6a47-stats-Assert-value_len-when-value-is-needed.patch
    - lp1869622-74eed54a-sync-Assert-sync_callbacks.name-length.patch
    - lp1869622-89b0d62f-stats-Check-return-code-of-stats_map_get.patch
    - lp1869622-8ce65bf9-votequorum-Reflect-runtime-change-of-2Node-to-WFA.patch
    - lp1869622-8ff7760c-cmapctl-Free-bin_value-on-error.patch
    - lp1869622-a24cbad5-totemconfig-Initialize-warnings-variable.patch
    - lp1869622-c631951e-icmap-icmap_init_r-leaks-if-trie_create-fails.patch
    - lp1869622-ca320bea-votequorum-set-wfa-status-only-on-startup.patch
    - lp1869622-efe48120-totemconfig-Free-leaks-found-by-coverity.patch

 -- Rafael David Tinoco <rafaeldtinoco@ubuntu.com>  Sun, 29 Mar 2020 21:50:35 +0000

corosync (3.0.3-2ubuntu1) focal; urgency=medium

  * Merge with Debian unstable (LP: #1864087). Remaining changes:
    - Skip autopkgtest for unprivileged containers: (LP: 1828228)
      - d/t/control: allow stderr and mark tests as skippable
      - d/t/{cfgtool,quorumtool}: skips when inside unpriv containers

 -- Rafael David Tinoco <rafaeldtinoco@ubuntu.com>  Fri, 21 Feb 2020 04:33:11 +0000

corosync (3.0.3-2) unstable; urgency=medium

  * [d0a06e5] Separate the autopkgtests and make them generate artifacts
  * [8680d48] Run Salsa CI reprotest with diffoscope
  * [1d89c4f] Recognize the autopkgtest artifacts in Salsa CI
  * [8e09226] New patch: man: move cmap_keys man page from section 8 to 7

 -- Ferenc Wágner <wferi@debian.org>  Sat, 04 Jan 2020 14:07:31 +0100

corosync (3.0.3-1) unstable; urgency=medium

  * [d103a33] New upstream release (3.0.3)
  * [e6f6831] Refresh our patches
  * [f1e85a3] Enable nozzle support
  * [19d3dd3] Package the votequorum simulator in corosync-vqsim
  * [8ae3235] Update Standards-Version to 4.4.1 (no changes required)
  * [bfd9560] Advertise Rules-Requires-Root: no

 -- Ferenc Wágner <wferi@debian.org>  Sat, 07 Dec 2019 23:02:16 +0100

corosync (3.0.2-1ubuntu2) focal; urgency=medium

  * Rebuild for libsnmp35.

 -- Rafael David Tinoco <rafaeldtinoco@ubuntu.com>  Tue, 14 Jan 2020 17:55:39 +0000

corosync (3.0.2-1ubuntu1) focal; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - Skip autopkgtest for unprivileged containers: (LP #1828228)
      + d/t/control: mark corosync test as skippable
      + d/t/corosync: skip if memlock can't be set to unlimited by root

 -- Rafael David Tinoco <rafaeldtinoco@ubuntu.com>  Mon, 04 Nov 2019 17:37:30 -0300

corosync (3.0.2-1) unstable; urgency=medium

  * [163a97e] Releases can already be downloaded over HTTPS (#413)
  * [2884ec0] New upstream release (3.0.2)
  * [937a16e] Delete upstreamed patches, refresh the rest
  * [56f5a8b] Enroll to basic Salsa CI
  * [45fb249] Update Standards-Version to 4.4.0 (no changes required)
  * [05e7216] Switch to the debhelper-compat way
  * [a60406a] New patch: man: fix typo: avaialable
  * [0b7debb] Adjust autopkgtest to the new cfgtool output format

 -- Ferenc Wágner <wferi@debian.org>  Sun, 25 Aug 2019 16:48:57 +0200

corosync (3.0.1-2ubuntu1) eoan; urgency=medium

  * Skip autopkgtest for unprivileged containers: (LP: #1828228)
    - d/t/control: mark corosync test as skippable
    - d/t/corosync: skip if memlock can't be set to unlimited by root

 -- Rafael David Tinoco <rafaeldtinoco@ubuntu.com>  Mon, 22 Jul 2019 18:38:46 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog corosync-doc`.
