~ubuntu-branches/ubuntu/hardy/openldap2.3/hardy-updates : changes

~ubuntu-branches/ubuntu/hardy/openldap2.3/hardy-updates » Changes from revision 19

From Revision 19

Rev	Summary	Authors	Tags	Date
19	* SECURITY UPDATE: fix successful anonymous bind via chain o... * SECURITY UPDATE: fix successful anonymous bind via chain overlay when using forwarded authentication failures - debian/patches/CVE-2011-1024 - CVE-2011-1024 * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests and requestDN is empty - debian/patches/CVE-2011-1081 - CVE-2011-1081	Jamie Strandboge	2.4.9-0ubuntu0.8.04.5	13 years ago
18	* SECURITY UPDATE: null ptr deref, free uninitialized data i... * SECURITY UPDATE: null ptr deref, free uninitialized data in modrdn calls - openldap-2.4.22-CVE-2010-0211-modrdn_check_error.patch: - check return for errors and clean up uninitialized data - openldap-2.4.22-CVE-2010-0212-modrdn_null_deref.patch: - return error on 0-length or binary RDNs - CVE-2010-0211, CVE-2010-0212	Steve Beattie	2.4.9-0ubuntu0.8.04.4	13 years ago
17	* SECURITY UPDATE: denial of service via broken BER decoding... * SECURITY UPDATE: denial of service via broken BER decoding. * Added debian/patches/security-ber-decoding.patch: upstream fixes. * References CVE-2008-2952	Kees Cook	2.4.9-0ubuntu0.8.04.1	15 years ago
16	remove apparmor-profile workaround for Launchpad #202161 (it... remove apparmor-profile workaround for Launchpad #202161 (it's now fixed in klibc)	Jamie Strandboge	2.4.7-6ubuntu3	16 years ago
15	* apparmor-profile workaround for Launchpad #202161 * apparmor-profile workaround for Launchpad #202161 * follow ApparmorProfileMigration and force apparmor complain mode on some upgrades (LP: #203529) - debian/control: Recommends apparmor >= 2.1+1075-0ubuntu6 - debian/slapd.dirs: add etc/apparmor.d/force-complain - debian/slapd.preinst: create symlink for force-complain/ on pre-feisty upgrades, upgrades where apparmor-profiles profile is unchanged (ie non-enforcing) and upgrades where apparmor profile does not exist - debian/slapd.postrm: remove symlink in force-complain/ on purge * debian/rules, debian/slapd.links: use hard links to slapd instead of symlinks for slap* so these applications aren't confined by apparmor (LP: #203898)	Jamie Strandboge	2.4.7-6ubuntu2	16 years ago
14	* Merge from Debian unstable, remaining changes: * Merge from Debian unstable, remaining changes: + debian/patches/SECURITY_CVE-2008-0658.patch (LP: #197077) slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698. + debian/apparmor-profile: add AppArmor profile + debian/slapd.postinst: Reload AA profile on configuration + updated debian/slapd.README.Debian for note on AppArmor + debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we should now take control + debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmor-profiles gets installed it won't overwrite our profile + Modify Maintainer value to match the DebianMaintainerField specification.	Steve Langasek	2.4.7-6ubuntu1	16 years ago
13	* SECURITY UPDATE: * SECURITY UPDATE: + debian/patches/SECURITY_CVE-2008-0658.patch (LP: #197077) slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control, a related issue to CVE-2007-6698. * References - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2008-0658 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=5358	Emanuele Gentili	2.4.7-5ubuntu2	16 years ago
12	* add AppArmor profile * add AppArmor profile + debian/apparmor-profile + debian/slapd.postinst: Reload AA profile on configuration * updated debian/slapd.README.Debian for note on AppArmor * debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we should now take control * debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 to make sure that if earlier version of apparmor-profiles gets installed it won't overwrite our profile * Modify Maintainer value to match the DebianMaintainerField specification.	Jamie Strandboge	2.4.7-5ubuntu1	16 years ago
11	[ Updated debconf translations ] [ Updated debconf translations ] * Finnish, thanks to Esko Arajärvi <edu@iki.fi>. Closes: #462688. * Galician, thanks to Jacobo Tarrio <jtarrio@trasno.net>. Closes: #462987. * French, thanks to Christian Perrier <bubulle@debian.org>. Closes: #463149. * Russian, thanks to Yuri Kozlov <kozlov.y@gmail.com>. Closes: #463442. * Czech, thanks to Miroslav Kure <kurem@debian.cz>. Closes: #463472. * German, thanks to Helge Kreutzmann <debian@helgefjell.de>. Closes: #464718. [ Steve Langasek ] * Fix various regressions related to the introduction of GnuTLS: - Add new patch, gnutls-ciphers, to fix support for specifying multiple ciphers with TLSCipherSuite option in slapd.conf. Thanks to Kyle Moffett <kyle@moffetthome.net> for the patch. Closes LP: #188200. - Add new patch, slapd-tlsverifyclient-default, to set the intended default value of "TLSVerifyClient never" in the right place. - Add new patch, gnutls-altname-nulterminated, to account for differences in how the "length" is returned for commonName vs. subjectAltName. - Comment out TLSCipherSuite settings on upgrade from all versions prior to 2.4.7-5, and throw a debconf error to the user notifying them of this, since all OpenSSL cipher suite values are incompatible with GnuTLS. Closes: #462588. * Add new patch from upstream, entryCSN-backwards-compatibility, to support auto-converting entryCSN attributes in a previously supported old format, fixing an upgrade failure. Closes: #462099. * Use --retry TERM/10 instead of --retry 10 when stopping slapd, since the latter resorts to a SIGKILL and may corrupt backend data; whereas the former will exit non-zero if slapd is still running but won't directly cause data-loss. Thanks to Mark McDonald for the patch. LP: #92139. * Fix manpage symlinks in libldap2-dev; thanks to Reuben Thomas for reporting. Closes: #463971. * Fix a superfluous space in the debconf templates, due to a trailing space in the templates. Closes: #464719.	Steve Langasek	2.4.7-5	16 years ago
10	[ Steve Langasek ] [ Steve Langasek ] * Build-conflict with libicu-dev, for consistent dependencies in all build environments. * Fix an oversight in the checkpoint migration, which caused the checkpoint option to not be moved far enough down. Closes: #462304, LP: #185257. * Build-depend on unixodbc instead of iODBC. [ Updated debconf translations ] * Japanese, thanks to Kenshi Muto <kmuto@debian.org>. Closes: #462191.	Steve Langasek	2.4.7-4	16 years ago
9	Add missing build-dependency on groff-base, to allow use of ... Add missing build-dependency on groff-base, to allow use of soelim during build.	Steve Langasek	2.4.7-3	16 years ago
8	* Medium severity due to denial of service fix. * Medium severity due to denial of service fix. * New upstream release. - CVE-2007-5708: Fix remote denial of service attack in slapo-pcache (the overlay for proxy caching). (Closes: #448644) - Multiple additional more minor bug fixes. * Document in the default slapd.conf that dbconfig options only generate the DB_CONFIG file on first slapd start and have no effect afterwards unless DB_CONFIG is removed. (Closes: #442191) * Inline the checkpoint and BerkeleyDB backend settings in the default slapd.conf rather than generating them dynamically in postinst. All the allowable default database choices are now BerekelyDB variants and will probably continue to be so for the forseeable future, and this is easier to maintain. * Drop debconf questions, warnings, and maintainer script functions dealing with upgrades from OpenLDAP 2.1, which is now too hold for supported direct upgrades. (Closes: #444806) * Add a watch file. Thanks, Fernando Ribeiro. (Closes: #435290) * Add Homepage, Vcs-Svn, and Vcs-Browser control fields.	Russ Allbery	2.3.39-1	16 years ago
7	[ Steve Langasek ] [ Steve Langasek ] * Drop debian/patches/use-lpthread, which is no longer needed on mips* because gcc has been fixed. * Drop debian/patches/add-autogen-sh, also no longer needed now that the above patch is gone. [ Matthijs Mohlmann ] * Fix bashism in initscript. (Closes: #428883) * Drop upstream patches ITS4924, ITS4925 and ITS4966. * Add patch for objectClasses which causes slapd to crash. (Closes: #440632) - Upstream bug ITS5119. * Change default loglevel to none, to log high priority messages. (Closes: #442000) * Tighten up the build dependencies, now that autogen patch is removed.	Matthijs Mohlmann	2.3.38-1	16 years ago
6	* New upstream release with many bug fixes. * New upstream release with many bug fixes. - Allow syncprov to follow aliases. (Closes: #422087) * Apply upstream patches: - ITS#4924: client crash on incorrectly tagged result from server. - ITS#4925: NOOP modify with BDB backend crashed slapd. - ITS#4966: Delete of valsort-controlled entries crashed slapd. * Enable SLAPI support. (Closes: #390954) * Re-enable use of the epoll system call since Debian no longer supports 2.4 kernels. This means that the OpenLDAP packages will not work on pre-2.6 kernels. * Remove schema files that contain text from IETF RFCs from the upstream source since that text is not DFSG-free. Instead, install stripped versions of those schema files containing only the functional interface specifications, a comment explaining why this is needed, and a pointer to the relevant RFC. (Closes: #361846) * Document the repackaging of the upstream source in debian/copyright. * Update config.guess and config.sub during the build instead of in the clean target and remove them in the clean target for a clean diff. Build-depend on autotools-dev so that we can unconditionally copy over the latest versions. * Added commentary and upstream ITS numbers for several patches applicable upstream. * Use debian/compat rather than the deprecated DH_COMPAT rules setting. * Update to debhelper compatibility level V5 (no changes required).	Russ Allbery	2.3.35-1	16 years ago
5	[ Steve Langasek ] [ Steve Langasek ] * Add Portuguese debconf translation; thanks to Tiago Fernandes. Closes: #409632. * Re-add .la files to the slapd package, for greater compatibility with upstream documentation. [ Russ Allbery ] * When starting slapd, create a symlink from /var/run/ldapi to /var/run/slapd/ldapi for compatibility with 2.1 client libraries. Closes: #385809. * Apply upstream patch to prevent a race condition in slapd when shutting down connections. * Update the Brazilian Portuguese debconf translation; thanks to Felipe Augusto van de Wiel.	Russ Allbery	2.3.30-5	17 years ago
4	Make sure that the pidfile directory doesn't exist in the in... Make sure that the pidfile directory doesn't exist in the init script. (Closes: #402705)	Matthijs Mohlmann	2.3.30-2	17 years ago
3	* New upstream release. * New upstream release. - Fixed authzTo/authzFrom URL matching. - Fixed syncrepl consumer memory leaks. - Fixed slapd-hdb livelock. - Fixed slapo-ppolicy external quality check. - Fixed ldapsearch(1) man page acknowledgement. * Added patch to make sure that the pidfile directory exists. (Closes: #390337) * Do not ask the question allow ldap v2 logins when user wants manual configuration. (Closes: #401003) * Add patch to look also in /etc/ldap/sasl2 for sasl configuration. (Closes: #398657) * Removed db4.2-util recommend, the slapd binary includes checking code to fix DB errors. * Updated README in schema directory. It doesn't list collective.schema anymore. (Closes: #287358) * Updated manpages to point to right paths. (Closes: #398790)	Matthijs Mohlmann	2.3.30-1	17 years ago
2	[ Matthijs Mohlmann ] [ Matthijs Mohlmann ] * New upstream release. - Fixes Denial of Service through a certain combination of LDAP BIND requests (CVE-2006-5779) (Closes: #397673) * LSB section added to the init script. * Updated README.Debian about running as non-root user (Closes: #389369) * Updated de translation (Closes: #396096) * Added some documentation / warning when running slapindex as root. * Remove drafts and rfc from the tarball. (Closes: #393404)	Matthijs Mohlmann	2.3.29-1	17 years ago
1	Import upstream version 2.3.29 Import upstream version 2.3.29	Matthijs Mohlmann	upstream-2.3.29	17 years ago