Re: [OpenAFS-devel] OpenAFS 1.8.7 available

Thanks for the quick response from the OpenAFS team. Is there an
official Debian package available for 1.8.7?

Regards,

Stephen Quinney

On Thu, 14 Jan 2021 at 23:42, Benjamin Kaduk <[email protected]> wrote:
>
> The OpenAFS Guardians are happy to announce the availability of OpenAFS 1.8.7.
> Source files can be accessed via the web at:
>
>        https://www.openafs.org/release/openafs-1.8.7.html
>
> or via AFS at:
>
>        UNIX: /afs/grand.central.org/software/openafs/1.8.7/
>        UNC: \\afs\grand.central.org\software\openafs\1.8.7\
>
> This release fixes a critical issue with the generation of Rx connection IDs
> (CIDs) for Rx clients started after 14 Jan 2021 08:25:36 AM UTC (Unix epoch
> time 0x60000000).  Unpatched systems will always use the fixed value of
> 0x80000002 as the CID, which causes connections to fail for multiple reasons.
> Client commands such as `vos examine` will time out if run after that
> time, cache managers started after that time will be unable to access files,
> fileservers started after that time will be unable to access the Ubik databases,
> and database servers started after that time will be unable to participate
> in a quorum or Ubik elections.  In particular, fileservers that restart,
> including due to a scheduled weekly restart, will not be able to register
> with the volume location service or verify group membership with the
> protection service.
>
> The fix causes the initial CID to be randomly generated (without dependence
> on the current time) and removes the faulty logic intended to detect signed
> integer overflow (which is not needed since the field in question is now
> an unsigned integer).
>
> Thanks to Jeffrey Altman of Auristor Inc. for tracking down the key issue.
>
> Bug reports should be filed to [email protected].
>
> Benjamin Kaduk
> for the OpenAFS Guardians
>