Format: 1.8 Date: Wed, 31 Jul 2019 18:01:14 -0300 Source: openldap Binary: ldap-utils libldap-2.4-2 libldap2-dev slapd slapd-contrib slapi-dev Architecture: ppc64el ppc64el_translations Version: 2.4.48+dfsg-1ubuntu1 Distribution: eoan-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Andreas Hasenack Description: ldap-utils - OpenLDAP utilities libldap-2.4-2 - OpenLDAP libraries libldap2-dev - OpenLDAP development libraries slapd - OpenLDAP server (slapd) slapd-contrib - contributed plugins for OpenLDAP slapd slapi-dev - development libraries for OpenLDAP SLAPI plugin interface Changes: openldap (2.4.48+dfsg-1ubuntu1) eoan; urgency=medium . * Merge with Debian unstable. Remaining changes: - Enable AppArmor support: - d/apparmor-profile: add AppArmor profile - d/rules: use dh_apparmor - d/control: Build-Depends on dh-apparmor - d/slapd.README.Debian: add note about AppArmor - Enable GSSAPI support: - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - d/configure.options: Configure with --with-gssapi - d/control: Added heimdal-dev as a build depend - d/rules: - Explicitly add -I/usr/include/heimdal to CFLAGS. - Explicitly add -I/usr/lib//heimdal to LDFLAGS. - Enable ufw support: - d/control: suggest ufw. - d/rules: install ufw profile. - d/slapd.ufw.profile: add ufw profile. - Enable nss overlay: - d/rules: - add nssov to CONTRIB_MODULES - add sysconfdir to CONTRIB_MAKEVARS - d/slapd.install: - install nssov overlay - d/slapd.manpages: - install slapo-nssov(5) man page - d/{rules,slapd.py}: Add apport hook. - d/slapd.init.ldif: don't set olcRootDN since it's not defined in either the default DIT nor via an Authn mapping. - d/slapd.scripts-common: - add slapcat_opts to local variables. - Fix backup directory naming for multiple reconfiguration. - d/{slapd.default,slapd.README.Debian}: use the new configuration style. - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open - Show distribution in version: - d/control: added lsb-release - d/patches/fix-ldap-distribution.patch: show distribution in version - d/libldap-2.4-2.symbols: Add symbols not present in Debian. - CLDAP (UDP) was added in 2.4.17-1ubuntu2 - GSSAPI support was enabled in 2.4.18-0ubuntu2 - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding Debian bug #919136, we also have to patch the nssov makefile accordingly and thus update this patch. * Dropped: - Fix sysv-generator unit file by customizing parameters (LP #1821343) + d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow correct systemctl status for slapd daemon. + d/slapd.install: place override file in correct location. [Included in 2.4.48+dfsg-1] - SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases + debian/patches/CVE-2019-13057-1.patch: add restriction to servers/slapd/saslauthz.c. + debian/patches/CVE-2019-13057-2.patch: add tests to tests/data/idassert.out, tests/data/slapd-idassert.conf, tests/data/test-idassert1.ldif, tests/scripts/test028-idassert. + debian/patches/CVE-2019-13057-3.patch: fix typo in tests/scripts/test028-idassert. + debian/patches/CVE-2019-13057-4.patch: fix typo in tests/scripts/test028-idassert. + CVE-2019-13057 [Fixed upstream] - SECURITY UPDATE: SASL SSF not initialized per connection + debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in connection_init in servers/slapd/connection.c. + CVE-2019-13565 [Fixed upstream] Checksums-Sha1: 74a62f709a6ca4e800622f32c8c7f586fe88fdb9 581900 ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb 99e98e23780c24bc429933a51b7a9be95014600c 124364 ldap-utils_2.4.48+dfsg-1ubuntu1_ppc64el.deb 5eab221159dfcb5b2581b6f796227d08632214ae 580156 libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb d93eb03bb25e585808809d6d1e9a44814a0c0704 175388 libldap-2.4-2_2.4.48+dfsg-1ubuntu1_ppc64el.deb 5add8e6dd50087f72d27e18ad64645f5c7824e4f 312400 libldap2-dev_2.4.48+dfsg-1ubuntu1_ppc64el.deb 75500245a69261a92622dc0547ddeb3107c9f06e 10417 openldap_2.4.48+dfsg-1ubuntu1_ppc64el.buildinfo 4e33452031a806385fe27bad9060c84ccbb1f97a 63770 openldap_2.4.48+dfsg-1ubuntu1_ppc64el_translations.tar.gz aaba53c3b996b13474726f7f4cd0681dff2ce279 65704 slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb 7ffee4eff3b08661681c2985276f3a69d09fc534 27276 slapd-contrib_2.4.48+dfsg-1ubuntu1_ppc64el.deb fab56042dde78113e04a852d50e87f48beb221c8 7410188 slapd-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb bbc0f80263bff7291ad57c7f5ab95574afa2c344 1486284 slapd_2.4.48+dfsg-1ubuntu1_ppc64el.deb 7e3285df411f4179c1859d314d40380da895afc7 14632 slapi-dev_2.4.48+dfsg-1ubuntu1_ppc64el.deb Checksums-Sha256: 655fcd66f9100d140845b330d83b5f84f5cc09f75f66ffea6ce15eb7e2e24cc6 581900 ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb c8c3820c1432099599d5d87b22a5bf2c15d723e836d7d78b2b421eefcdf373bd 124364 ldap-utils_2.4.48+dfsg-1ubuntu1_ppc64el.deb fa8a73048bf9916054d3c51491de144d2b01c69da3d03d80b1f9c27c62f721e1 580156 libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb c9625183510772dbb07a57bade440fec394b8af8dbd361ae5db6f0ecb2b537e2 175388 libldap-2.4-2_2.4.48+dfsg-1ubuntu1_ppc64el.deb 35069393cf26de620cd9c574626a17097b6b495e7cce5ceb5b3ceb2e00c18188 312400 libldap2-dev_2.4.48+dfsg-1ubuntu1_ppc64el.deb 64a13dca7150b980c2e7276e8c4b1ab7bff2220c0e521bcac309a9c5b9984c82 10417 openldap_2.4.48+dfsg-1ubuntu1_ppc64el.buildinfo 893de9f3f212493233dbeb670acd05f9b118257799fefe9a937978099475a769 63770 openldap_2.4.48+dfsg-1ubuntu1_ppc64el_translations.tar.gz bfc8540a3909b8b9bea4af61fdb35030b343813cc99a45d2963a050a8bc2d5ee 65704 slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb 8e452bd53e34a0fea7f408a72f421df42aae28ee19650a4fa68a33d2bd722d32 27276 slapd-contrib_2.4.48+dfsg-1ubuntu1_ppc64el.deb 896687e08b49bc88cf705804a0ec67378dd30e67d9c98a8b0c85f8b404019ba8 7410188 slapd-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb 0b01c6c8f5bd75e5fb5c2f5b0305f0fe045324504aca68ccdee0e27f66d8ab72 1486284 slapd_2.4.48+dfsg-1ubuntu1_ppc64el.deb e57945be713f9b4690307595a8289908cfaa2cece729537f86b7f6869dc133b9 14632 slapi-dev_2.4.48+dfsg-1ubuntu1_ppc64el.deb Files: 39397a859f0e43525f952317694841e3 581900 debug optional ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb ae05d727e88fc0e2589e612c38b1b828 124364 net optional ldap-utils_2.4.48+dfsg-1ubuntu1_ppc64el.deb ecc648aa4571667defa6f03849bccb2e 580156 debug optional libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb c414bce18dbd02b9579df4f1df3f2295 175388 libs optional libldap-2.4-2_2.4.48+dfsg-1ubuntu1_ppc64el.deb ac896929e6c5d5f5a1f128c701b3f42f 312400 libdevel optional libldap2-dev_2.4.48+dfsg-1ubuntu1_ppc64el.deb 3c3f40cdc3a74dd9ce597d5e44ce8e7d 10417 net optional openldap_2.4.48+dfsg-1ubuntu1_ppc64el.buildinfo ddca00f04363e20b979c40019d98b028 63770 raw-translations - openldap_2.4.48+dfsg-1ubuntu1_ppc64el_translations.tar.gz 4baf6152f5f5c9762f482f8bb362f8ff 65704 debug optional slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb afe60426857f65d2c4eeab4e1063268b 27276 net optional slapd-contrib_2.4.48+dfsg-1ubuntu1_ppc64el.deb edf741c2ebc68529794038fe49328ddc 7410188 debug optional slapd-dbgsym_2.4.48+dfsg-1ubuntu1_ppc64el.ddeb c1aade6d19a9545e25ccb2316c08c6ea 1486284 net optional slapd_2.4.48+dfsg-1ubuntu1_ppc64el.deb c8044e5468e8bd85805456885d0901eb 14632 libdevel optional slapi-dev_2.4.48+dfsg-1ubuntu1_ppc64el.deb Original-Maintainer: Debian OpenLDAP Maintainers