~ubuntu-branches/ubuntu/precise/openldap/precise-security : changes

~ubuntu-branches/ubuntu/precise/openldap/precise-security » Changes from revision 51

From Revision 51 to 32

Rev	Summary	Authors	Tags	Date
51	* SECURITY UPDATE: denial of service via an LDAP search quer... * SECURITY UPDATE: denial of service via an LDAP search query with attrsOnly set to true. (LP: #1446809) - debian/patches/CVE-2012-1164.1.patch: don't leave empty slots in normalized attr values - debian/patches/CVE-2012-1164.2.patch: add FIXME comment, note that current patch is not ideal - debian/patches/CVE-2012-1164.3.patch: fix attr_dup2 when no values are present (attrsOnly = TRUE) - CVE-2012-1164 * SECURITY UPDATE: fix rwm overlay reference counting - debian/patches/CVE-2013-4449.patch: fix reference counting - CVE-2013-4449 * SECURITY UPDATE: fix NULL pointer dereference in deref_parseCtrl() - debian/patches/CVE-2015-1545.patch: require non-empty AttributeList - CVE-2015-1545	Felipe Reyes	2.4.28-1.1ubuntu4.5	8 years ago
50	debian/control: Build-Depends on dh-apparmor (LP: #948481) debian/control: Build-Depends on dh-apparmor (LP: #948481)	Jamie Strandboge	2.4.28-1.1ubuntu4	12 years ago
49	Add its-7176-only-poll-sockets-for-write-as-needed.diff Add its-7176-only-poll-sockets-for-write-as-needed.diff (LP: #932823).	Timo Aaltonen	2.4.28-1.1ubuntu3	12 years ago
48	Remove debian/patches/CVE-2011-4079; it's already in this up... Remove debian/patches/CVE-2011-4079; it's already in this upstream version. Fixes FTBFS.	Daniel T Chen	2.4.28-1.1ubuntu2	12 years ago
47	* Merge from Debian testing. Remaining changes: * Merge from Debian testing. Remaining changes: - Install a default DIT (LP: #442498). - Document cn=config in README file (LP: #370784). - remaining changes: + AppArmor support: - debian/apparmor-profile: add AppArmor profile - use dh_apparmor: - debian/rules: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain + Enable GSSAPI support (LP: #495418): - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - debian/patches/series: apply gssapi.diff patch. - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) + Don't build smbk5pwd overlay since it uses heimdal instead of krb5: - debian/control: - remove build-dependency on heimdal-dev. - remove slapd-smbk5pwd binary package. - debian/rules: don't build smbk5pwd slapd module. + debian/{control,rules}: enable PIE hardening + ufw support (LP: #423246): - debian/control: suggest ufw. - debian/rules: install ufw profile. - debian/slapd.ufw.profile: add ufw profile. + Enable nssoverlay: - debian/patches/nssov-build, debian/series, debian/rules: Apply, build and package the nss overlay. - debian/schema/extra/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). + debian/rules, debian/schema/extra/: Fix configure rule to supports extra schemas shipped as part of the debian/schema/ directory. + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544) + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in neither the default DIT nor via an Authn mapping. + debian/slapd.scripts-common: adjust minimum version that triggers a database upgrade. Upgrade from maverick shouldn't trigger database upgrade (which would happen with the version used in Debian). + debian/slapd.scripts-common: add slapcat_opts to local variables. Remove unused variable new_conf. + debian/slapd.script-common: Fix package reconfiguration. - Fix backup directory naming for multiple reconfiguration. + debian/slapd.default, debian/slapd.README.Debian: use the new configuration style. + Install nss overlay (LP: #675391): - debian/rules: run install target for nssov module. - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema + debian/patches/gssapi.diff: - Update patch so that likewise-open is usuable again. (LP: #661547) + debian/patches/service-operational-before-detach: New patch replacing old one of the same name as previous could cause database corruption based on upstream commits. (LP: #727973) + debian/patches/CVE-2011-4079: fix off by one error in postalAddressNormalize() (CVE-2011-4079)	Chuck Short	2.4.28-1.1ubuntu1	12 years ago
46	* Merge from Debian testing. Remaining changes: * Merge from Debian testing. Remaining changes: - Install a default DIT (LP: #442498). - Document cn=config in README file (LP: #370784). - remaining changes: + AppArmor support: - debian/apparmor-profile: add AppArmor profile - use dh_apparmor: - debian/rules: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain + Enable GSSAPI support (LP: #495418): - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - debian/patches/series: apply gssapi.diff patch. - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) + Don't build smbk5pwd overlay since it uses heimdal instead of krb5: - debian/control: - remove build-dependency on heimdal-dev. - remove slapd-smbk5pwd binary package. - debian/rules: don't build smbk5pwd slapd module. + debian/{control,rules}: enable PIE hardening + ufw support (LP: #423246): - debian/control: suggest ufw. - debian/rules: install ufw profile. - debian/slapd.ufw.profile: add ufw profile. + Enable nssoverlay: - debian/patches/nssov-build, debian/series, debian/rules: Apply, build and package the nss overlay. - debian/schema/extra/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). + debian/rules, debian/schema/extra/: Fix configure rule to supports extra schemas shipped as part of the debian/schema/ directory. + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544) + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in neither the default DIT nor via an Authn mapping. + debian/slapd.scripts-common: adjust minimum version that triggers a database upgrade. Upgrade from maverick shouldn't trigger database upgrade (which would happen with the version used in Debian). + debian/slapd.scripts-common: add slapcat_opts to local variables. Remove unused variable new_conf. + debian/slapd.script-common: Fix package reconfiguration. - Fix backup directory naming for multiple reconfiguration. + debian/slapd.default, debian/slapd.README.Debian: use the new configuration style. + Install nss overlay (LP: #675391): - debian/rules: run install target for nssov module. - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema + debian/patches/gssapi.diff: - Update patch so that likewise-open is usuable again. (LP: #661547) + debian/patches/service-operational-before-detach: New patch replacing old one of the same name as previous could cause database corruption based on upstream commits. (LP: #727973) + debian/patches/CVE-2011-4079: fix off by one error in postalAddressNormalize() (CVE-2011-4079)	Chuck Short	2.4.25-4ubuntu1	12 years ago
45	Rebuild for Perl 5.14. Rebuild for Perl 5.14.	Colin Watson	2.4.25-3ubuntu3	12 years ago
44	* SECURITY UPDATE: potential denial of service (LP: #884163) * SECURITY UPDATE: potential denial of service (LP: #884163) - debian/patches/CVE-2011-4079: fix off by one error in postalAddressNormalize() - CVE-2011-4079	Jamie Strandboge	2.4.25-3ubuntu2	12 years ago
43	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - Install a default DIT (LP: #442498). - Document cn=config in README file (LP: #370784). - remaining changes: + AppArmor support: - debian/apparmor-profile: add AppArmor profile - use dh_apparmor: - debian/rules: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain + Enable GSSAPI support (LP: #495418): - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - debian/patches/series: apply gssapi.diff patch. - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) + Don't build smbk5pwd overlay since it uses heimdal instead of krb5: - debian/control: - remove build-dependency on heimdal-dev. - remove slapd-smbk5pwd binary package. - debian/rules: don't build smbk5pwd slapd module. + debian/{control,rules}: enable PIE hardening + ufw support (LP: #423246): - debian/control: suggest ufw. - debian/rules: install ufw profile. - debian/slapd.ufw.profile: add ufw profile. + Enable nssoverlay: - debian/patches/nssov-build, debian/series, debian/rules: Apply, build and package the nss overlay. - debian/schema/extra/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). + debian/rules, debian/schema/extra/: Fix configure rule to supports extra schemas shipped as part of the debian/schema/ directory. + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544) + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in neither the default DIT nor via an Authn mapping. + debian/slapd.scripts-common: adjust minimum version that triggers a database upgrade. Upgrade from maverick shouldn't trigger database upgrade (which would happen with the version used in Debian). + debian/slapd.scripts-common: add slapcat_opts to local variables. Remove unused variable new_conf. + debian/slapd.script-common: Fix package reconfiguration. - Fix backup directory naming for multiple reconfiguration. + debian/slapd.default, debian/slapd.README.Debian: use the new configuration style. + Install nss overlay (LP: #675391): - debian/rules: run install target for nssov module. - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema + debian/patches/gssapi.diff: - Update patch so that likewise-open is usuable again. (LP: #661547) + debian/patches/service-operational-before-detach: New patch replacing old one of the same name as previous could cause database corruption based on upstream commits. (LP: #727973)	Chuck Short	2.4.25-3ubuntu1	12 years ago
42	Brown paper bag: really fix the .links.in handling, so we do... Brown paper bag: really fix the .links.in handling, so we don't generate broken /usr/lib/${DEB_HOST_MULTIARCH} dirs.	Steve Langasek	2.4.25-1.1ubuntu4	12 years ago
41	* Cherry-pick multiarch support from Debian (LP: #826601): * Cherry-pick multiarch support from Debian (LP: #826601): - Bump to compat level 7, so we don't have to spell out debian/tmp in every single .install file - Build for multiarch.	Steve Langasek	2.4.25-1.1ubuntu3	12 years ago
40	debian/apparmor-profile: Allow /var/run and /run. (LP: #8102... debian/apparmor-profile: Allow /var/run and /run. (LP: #810270)	Martin Pitt	2.4.25-1.1ubuntu2	12 years ago
39	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - Install a default DIT (LP: #442498). - Document cn=config in README file (LP: #370784). - remaining changes: + AppArmor support: - debian/apparmor-profile: add AppArmor profile - use dh_apparmor: - debian/rules: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain + Enable GSSAPI support (LP: #495418): - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - debian/patches/series: apply gssapi.diff patch. - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) + Don't build smbk5pwd overlay since it uses heimdal instead of krb5: - debian/control: - remove build-dependency on heimdal-dev. - remove slapd-smbk5pwd binary package. - debian/rules: don't build smbk5pwd slapd module. + debian/{control,rules}: enable PIE hardening + ufw support (LP: #423246): - debian/control: suggest ufw. - debian/rules: install ufw profile. - debian/slapd.ufw.profile: add ufw profile. + Enable nssoverlay: - debian/patches/nssov-build, debian/series, debian/rules: Apply, build and package the nss overlay. - debian/schema/extra/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). + debian/rules, debian/schema/extra/: Fix configure rule to supports extra schemas shipped as part of the debian/schema/ directory. + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544) + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in neither the default DIT nor via an Authn mapping. + debian/slapd.scripts-common: adjust minimum version that triggers a database upgrade. Upgrade from maverick shouldn't trigger database upgrade (which would happen with the version used in Debian). + debian/slapd.scripts-common: add slapcat_opts to local variables. Remove unused variable new_conf. + debian/slapd.script-common: Fix package reconfiguration. - Fix backup directory naming for multiple reconfiguration. + debian/slapd.default, debian/slapd.README.Debian: use the new configuration style. + Install nss overlay (LP: #675391): - debian/rules: run install target for nssov module. - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema + debian/patches/gssapi.diff: - Update patch so that likewise-open is usuable again. (LP: #661547) + debian/patches/service-operational-before-detach: New patch replacing old one of the same name as previous could cause database corruption based on upstream commits. (LP: #727973)	Chuck Short	2.4.25-1.1ubuntu1	12 years ago
38	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - Install a default DIT (LP: #442498). - Document cn=config in README file (LP: #370784). - remaining changes: + AppArmor support: - debian/apparmor-profile: add AppArmor profile - use dh_apparmor: - debian/rules: use dh_apparmor - debian/control: Build-Depends on debhelper 7.4.20ubuntu5 - updated debian/slapd.README.Debian for note on AppArmor - debian/slapd.dirs: add etc/apparmor.d/force-complain + Enable GSSAPI support (LP: #495418): - debian/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - debian/patches/series: apply gssapi.diff patch. - debian/configure.options: Configure with --with-gssapi - debian/control: Added libkrb5-dev as a build depend + debian/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open (LP: #390579) + Don't build smbk5pwd overlay since it uses heimdal instead of krb5: - debian/control: - remove build-dependency on heimdal-dev. - remove slapd-smbk5pwd binary package. - debian/rules: don't build smbk5pwd slapd module. + debian/{control,rules}: enable PIE hardening + ufw support (LP: #423246): - debian/control: suggest ufw. - debian/rules: install ufw profile. - debian/slapd.ufw.profile: add ufw profile. + Enable nssoverlay: - debian/patches/nssov-build, debian/series, debian/rules: Apply, build and package the nss overlay. - debian/schema/extra/misc.ldif: add ldif file for the misc schema which defines rfc822MailMember (required by the nss overlay). + debian/rules, debian/schema/extra/: Fix configure rule to supports extra schemas shipped as part of the debian/schema/ directory. + debian/rules, debian/slapd.py: Add apport hook. (LP: #610544) + debian/slapd.init.ldif: don't set olcRootDN since it's not defined in neither the default DIT nor via an Authn mapping. + debian/slapd.scripts-common: adjust minimum version that triggers a database upgrade. Upgrade from maverick shouldn't trigger database upgrade (which would happen with the version used in Debian). + debian/slapd.scripts-common: add slapcat_opts to local variables. Remove unused variable new_conf. + debian/slapd.script-common: Fix package reconfiguration. - Fix backup directory naming for multiple reconfiguration. + debian/slapd.default, debian/slapd.README.Debian: use the new configuration style. + Install nss overlay (LP: #675391): - debian/rules: run install target for nssov module. - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema + debian/patches/gssapi.diff: - Update patch so that likewise-open is usuable again. (LP: #661547) + debian/patches/service-operational-before-detach: New patch replacing old one of the same name as previous could cause database corruption based on upstream commits. (LP: #727973) + Dropped: - debian/patches/gold: Use the debian version instead - debian/patches/CVE-2011-1024: Fixed upstream - debian/patches/CVE-2011-1025: Fixed upstream - debian/patches/CVE-2011-1081: Fixed upstream	Chuck Short	2.4.25-1ubuntu1	12 years ago
37	Rebuild for Perl 5.12. Rebuild for Perl 5.12.	Colin Watson	2.4.23-6ubuntu7	12 years ago
36	* SECURITY UPDATE: fix successful anonymous bind via chain o... * SECURITY UPDATE: fix successful anonymous bind via chain overlay when using forwarded authentication failures - debian/patches/CVE-2011-1024 - CVE-2011-1024 * SECURITY UPDATE: verify password when authenticating to rootdn and using ndb backend. Note: Ubuntu is not compiled with --enable-ndb by default - debian/patches/CVE-2011-1025 - CVE-2011-1025 * SECURITY UPDATE: fix DoS when processing unauthenticated modrdn requests and requestDN is empty - debian/patches/CVE-2011-1081 - CVE-2011-1081 - LP: #742104	Jamie Strandboge	2.4.23-6ubuntu6	13 years ago
35	debian/patches/service-operational-before-detach: New patch ... debian/patches/service-operational-before-detach: New patch replacing old one of same name as previous could cause database corruption, based on upstream commits. (LP: #727973)	Dave Walker (Daviey)	2.4.23-6ubuntu5	13 years ago
34	Fix FTBFS with ld.gold. Fix FTBFS with ld.gold.	Matthias Klose	2.4.23-6ubuntu4	13 years ago
33	debian/patches/gssapi.diff: debian/patches/gssapi.diff: Update patch so that likewise-open is usable again (LP: #661547)	Thierry Carrez (ttx)	2.4.23-6ubuntu3	13 years ago
32	* Install nss overlay (LP: #675391): * Install nss overlay (LP: #675391): - debian/rules: run install target for nssov module. - debian/patches/nssov-build: fix patch to install schema in /etc/ldap/schema.	Mathias Gug	2.4.23-6ubuntu2	13 years ago

Older »