corosync (3.1.6-1ubuntu1.2) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via wrong return value
    - debian/patches/CVE-2026-35091.patch: return error if sanity check
      fails in exec/totemsrp.c.
    - CVE-2026-35091
  * SECURITY UPDATE: DoS via integer overflow
    - debian/patches/CVE-2026-35092.patch: fix integer overflow in
      memb_join_sanity in exec/totemsrp.c.
    - CVE-2026-35092

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 10 Apr 2026 08:40:45 -0400

corosync (3.1.6-1ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: stack buffer overflow
    - debian/patches/CVE-2025-30472.patch: check size of orf_token msg in
      exec/totemsrp.c.
    - CVE-2025-30472

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 27 Mar 2025 14:22:57 -0400

corosync (3.1.6-1ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946852). Remaining changes:
    - d/control: corosync binary depends on libqb-dev (LP #1677684).
    - d/p/Make-the-example-config-valid.patch: comment out the
      node name in config file. With this, we will keep the same
      behavior as we have in Bionic which is using the output of
      "uname -n" as the node name (LP #1874719).
    - d/p/lp1918735/0001-allow_knet_handle_fallback_default_yes.patch:
      Retry knet_handle_new without privileged flag (LP #1918735).
    - d/t/quorumtool: search for localhost instead of node1.
    - d/t/control: add allow-stderr restriction.

 -- Miriam España Acebal <miriam.espana@canonical.com>  Wed, 12 Jan 2022 11:58:06 +0100

corosync (3.1.6-1) unstable; urgency=medium

  * [1c6e48f] Make use of the execute_before_* feature of dh 12.8+
  * [e6b31ef] New upstream release (3.1.6)
  * [81eed39] Refresh our patches

 -- Ferenc Wágner <wferi@debian.org>  Mon, 22 Nov 2021 19:40:15 +0100

corosync (3.1.5-2) unstable; urgency=medium

  * [a836090] Revert "No need to override the default /usr/lib/systemd/system
    systemd directory anymore"
    This reverts commit e710e1f5bec1bcbc9d47f639701a6f2fde54346b.
    dh_installsystemd apparently does not find the service files under
    /usr/lib, and consequently does not insert the maintainer script
    snippets necessary to start the services on installation (for example).

 -- Ferenc Wágner <wferi@debian.org>  Fri, 01 Oct 2021 20:28:56 +0200

corosync (3.1.5-1) unstable; urgency=medium

  * [929fb0c] New upstream release (3.1.5)
  * [56b0b8f] Remove upstreamed patches, refresh the rest
  * [f231d94] Switch to Debhelper compatibility level 13
  * [65638bc] Update Standards-Version to 4.6.0 (no changes required)
  * [e710e1f] No need to override the default /usr/lib/systemd/system systemd
    directory anymore

 -- Ferenc Wágner <wferi@debian.org>  Thu, 30 Sep 2021 22:38:39 +0200

corosync (3.1.2-2ubuntu1) impish; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/t/control: add allow-stderr restriction
    - d/control: corosync binary depends on libqb-dev
      (LP #1677684)
    - Retry knet_handle_new without privileged flag (LP #1918735)
      + d/p/lp1918735/0001-allow_knet_handle_fallback_default_yes.patch
    - d/p/Make-the-example-config-valid.patch: comment out the node name in
      config file
      + With this, we will keep the same behavior as we have in Bionic which is
        using the output of "uname -n" as the node name (LP #1874719).
    - d/t/quorumtool: search for localhost instead of node1
  * Dropped:
    - d/p/lp1911904-Don-t-lock-all-current-and-future-memory-if-can-t-in.patch:
      + Don't mlockall() if setrlimit() fails (LP #1911904)
      [Applied by upstream in version 3.1.1]
    - Retry knet_handle_new without privileged flag (LP #1918735)
      + d/p/lp1918735/0001-try-unprivileged-knet-handle-new.patch
      [Applied by upstream in version 3.1.1]

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Fri, 23 Jul 2021 16:27:47 -0300

corosync (3.1.2-2) unstable; urgency=medium

  * [f641780] New patch: stats: fix crash when iterating over deleted keys.
    Cherry-picked from v3.1.4.
    Thanks to Christine Caulfield

 -- Ferenc Wágner <wferi@debian.org>  Mon, 05 Jul 2021 09:11:09 +0200

corosync (3.1.2-1) unstable; urgency=medium

  * [2c66d6d] New upstream release (3.1.2)
  * [158e261] Drop upstreamed patch, refresh the rest

 -- Ferenc Wágner <wferi@debian.org>  Wed, 07 Apr 2021 14:19:13 +0200

corosync (3.1.1-1) unstable; urgency=medium

  * [d0fe5b2] New upstream release (3.1.1) (Closes: #985070)
  * [e867d55] Refresh our patches
  * [9d9b3d5] Acknowledge new symbols
  * [069e608] Adapt autopkgtest to the new cfgtool output format
  * [a447ac3] New patch: totemknet: pass correct handle to knet_handle_compress.
    Thanks to Fabio M. Di Nitto (Closes: #986325)
  * [dc2b18f] New patch: man: corosync-cfgtool.8: use proper single quotes

 -- Ferenc Wágner <wferi@debian.org>  Sat, 03 Apr 2021 17:27:29 +0200

# For older changelog entries, run 'apt-get changelog libcorosync-common4'
