On Wed, 09 Jun 2021 09:17:26 +0200 wf...@niif.hu wrote:
> Andreas kindly provided further refinements for his patch in #985173.
> I'll update this stable update request with the new debdiff shortly.
Here it is:
$ debdiff pacemaker_2.0.1-5+deb10u1.dsc pacemaker_2.0.1-5+deb10u2.dsc
diff -Nru pacemaker-2.0.1/debian/changelog pacemaker-2.0.1/debian/changelog
--- pacemaker-2.0.1/debian/changelog 2020-11-07 20:21:48.000000000 +0100
+++ pacemaker-2.0.1/debian/changelog 2021-06-10 21:45:34.000000000 +0200
@@ -1,3 +1,19 @@
+pacemaker (2.0.1-5+deb10u2) buster; urgency=medium
+
+ [ Andreas Beckmann ]
+ * [1088b23] pacemaker-resource-agents: Bump Breaks+Replaces: pacemaker
+ to (<< 2)
+ A new upstream release instroduced as security update 1.1.24-0+deb9u1 in
+ stretch added the new file /usr/lib/ocf/resource.d/pacemaker/ifspeed to
+ pacemaker, while it resides in pacemaker-resource-agents in buster.
+ (Closes: #985173)
+ * [4f1844b] libpe-status28/libpengine27: Add Breaks against libpe-
+ status10/libpengine10 (>= 1.1.24)
+ The version in stretch-security shipped libraries with SOVERSION 16
+ instead of 10. (See: #981088)
+
+ -- Ferenc Wágner <wf...@debian.org> Thu, 10 Jun 2021 21:45:34 +0200
+
pacemaker (2.0.1-5+deb10u1) buster-security; urgency=high
* [bf23450] Apply patch series fixing CVE-2020-25654: ACL bypass.
diff -Nru pacemaker-2.0.1/debian/control pacemaker-2.0.1/debian/control
--- pacemaker-2.0.1/debian/control 2020-11-07 20:21:48.000000000 +0100
+++ pacemaker-2.0.1/debian/control 2021-06-10 21:44:36.000000000 +0200
@@ -84,9 +84,9 @@
${misc:Depends},
# split out of pacemaker so that pacemaker-remote can also use them:
Breaks:
- pacemaker (<< 1.1.14-2~),
+ pacemaker (<< 2),
Replaces:
- pacemaker (<< 1.1.14-2~),
+ pacemaker (<< 2),
Description: cluster resource manager general resource agents
${S:X-Common-Description}
.
@@ -270,6 +270,10 @@
Depends:
${misc:Depends},
${shlibs:Depends},
+Breaks:
+# The new upstream version in stretch-security shipped
+# SOVERSION 16 instead of 10 (see #981088), get it removed:
+ libpe-status10 (>= 1.1.24),
Description: cluster resource manager Policy Engine status library
${S:X-Common-Description}
.
@@ -282,6 +286,10 @@
Depends:
${misc:Depends},
${shlibs:Depends},
+Breaks:
+# The new upstream version in stretch-security shipped
+# SOVERSION 16 instead of 10 (see #981088), get it removed:
+ libpengine10 (>= 1.1.24),
Description: cluster resource manager Policy Engine library
${S:X-Common-Description}
.
I'm ready to upload if you agree.
--
Thanks,
Feri
