Format: 1.8 Date: Wed, 31 Jul 2019 18:01:14 -0300 Source: openldap Binary: ldap-utils libldap-2.4-2 libldap2-dev slapd slapd-contrib slapi-dev Architecture: s390x s390x_translations Version: 2.4.48+dfsg-1ubuntu1 Distribution: eoan-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Andreas Hasenack Description: ldap-utils - OpenLDAP utilities libldap-2.4-2 - OpenLDAP libraries libldap2-dev - OpenLDAP development libraries slapd - OpenLDAP server (slapd) slapd-contrib - contributed plugins for OpenLDAP slapd slapi-dev - development libraries for OpenLDAP SLAPI plugin interface Changes: openldap (2.4.48+dfsg-1ubuntu1) eoan; urgency=medium . * Merge with Debian unstable. Remaining changes: - Enable AppArmor support: - d/apparmor-profile: add AppArmor profile - d/rules: use dh_apparmor - d/control: Build-Depends on dh-apparmor - d/slapd.README.Debian: add note about AppArmor - Enable GSSAPI support: - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - d/configure.options: Configure with --with-gssapi - d/control: Added heimdal-dev as a build depend - d/rules: - Explicitly add -I/usr/include/heimdal to CFLAGS. - Explicitly add -I/usr/lib//heimdal to LDFLAGS. - Enable ufw support: - d/control: suggest ufw. - d/rules: install ufw profile. - d/slapd.ufw.profile: add ufw profile. - Enable nss overlay: - d/rules: - add nssov to CONTRIB_MODULES - add sysconfdir to CONTRIB_MAKEVARS - d/slapd.install: - install nssov overlay - d/slapd.manpages: - install slapo-nssov(5) man page - d/{rules,slapd.py}: Add apport hook. - d/slapd.init.ldif: don't set olcRootDN since it's not defined in either the default DIT nor via an Authn mapping. - d/slapd.scripts-common: - add slapcat_opts to local variables. - Fix backup directory naming for multiple reconfiguration. - d/{slapd.default,slapd.README.Debian}: use the new configuration style. - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open - Show distribution in version: - d/control: added lsb-release - d/patches/fix-ldap-distribution.patch: show distribution in version - d/libldap-2.4-2.symbols: Add symbols not present in Debian. - CLDAP (UDP) was added in 2.4.17-1ubuntu2 - GSSAPI support was enabled in 2.4.18-0ubuntu2 - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding Debian bug #919136, we also have to patch the nssov makefile accordingly and thus update this patch. * Dropped: - Fix sysv-generator unit file by customizing parameters (LP #1821343) + d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow correct systemctl status for slapd daemon. + d/slapd.install: place override file in correct location. [Included in 2.4.48+dfsg-1] - SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases + debian/patches/CVE-2019-13057-1.patch: add restriction to servers/slapd/saslauthz.c. + debian/patches/CVE-2019-13057-2.patch: add tests to tests/data/idassert.out, tests/data/slapd-idassert.conf, tests/data/test-idassert1.ldif, tests/scripts/test028-idassert. + debian/patches/CVE-2019-13057-3.patch: fix typo in tests/scripts/test028-idassert. + debian/patches/CVE-2019-13057-4.patch: fix typo in tests/scripts/test028-idassert. + CVE-2019-13057 [Fixed upstream] - SECURITY UPDATE: SASL SSF not initialized per connection + debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in connection_init in servers/slapd/connection.c. + CVE-2019-13565 [Fixed upstream] Checksums-Sha1: cb5ba9211b6cbd79adf58d9bea05bb109c3fbb60 567920 ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb bcdf8ecd58b6f4b7c7454ee02ea0df9d5fdb9e1c 121252 ldap-utils_2.4.48+dfsg-1ubuntu1_s390x.deb 0672ea992de91e65e9ffcadf3d8fb1be3c862357 550800 libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb 9b773dc0fe5a06f965a1ffc973c01f312a356ae2 143664 libldap-2.4-2_2.4.48+dfsg-1ubuntu1_s390x.deb 2053316264afa0d422be1d509d7492e2b38c1030 253272 libldap2-dev_2.4.48+dfsg-1ubuntu1_s390x.deb f59474d5f1140e3684ab056bf24604ae3c6058fe 10247 openldap_2.4.48+dfsg-1ubuntu1_s390x.buildinfo 4f64ae90335fc125aac5888d2fe4b5451f6f8310 65408 openldap_2.4.48+dfsg-1ubuntu1_s390x_translations.tar.gz d4fe579310c582fdaec4a04793bcdeec3f95c1f7 62204 slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb 2122c1471a2d249d6020e70fab67a30c4b989a67 24024 slapd-contrib_2.4.48+dfsg-1ubuntu1_s390x.deb 28db63513af731559fe6d92da681a7af9a20fb0e 7160240 slapd-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb 1a85183a5009a202685eb9cba9efffb9573dd3b7 1287660 slapd_2.4.48+dfsg-1ubuntu1_s390x.deb af283c79ceefab75e83fe086a0f8de8bb82cc9d2 14620 slapi-dev_2.4.48+dfsg-1ubuntu1_s390x.deb Checksums-Sha256: 604d3050388e60865bc964b2ee6c34e0d554045348a9943ff761138a0a5c9a74 567920 ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb 599a10ba1403de679f7b81e224087b874a7e9e710ff58c63f8b76b93da690aaa 121252 ldap-utils_2.4.48+dfsg-1ubuntu1_s390x.deb 73e2aedb0da6d8ad98f622e5d32420be9b227e1fa4429c853387ab529cfe55a0 550800 libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb e59ef8fb9672cef6ed4e53f5fcbcb06b184b479ff12ffaea6feb45265a035403 143664 libldap-2.4-2_2.4.48+dfsg-1ubuntu1_s390x.deb 2fb5a0d38a761b2d7cc6359b54d518ff3e78d15bce44d3ea79022585ee08c07a 253272 libldap2-dev_2.4.48+dfsg-1ubuntu1_s390x.deb 89b894ba94d708bf78ffa32adc36e1f4c43f8a1597184d55bf72d14dfaca461d 10247 openldap_2.4.48+dfsg-1ubuntu1_s390x.buildinfo 4ac77cef8f1a4ad0a7f01698875935c6485895668cb2fe39444c6514a3e4ba8c 65408 openldap_2.4.48+dfsg-1ubuntu1_s390x_translations.tar.gz 39d4b3e59fd892b3822104c68c687f266de4f90d282cfa841fee8be2a619f555 62204 slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb 14622fb6ec129d690b75d515ec723c9798d114437f040ff3c0df9705873ac6fb 24024 slapd-contrib_2.4.48+dfsg-1ubuntu1_s390x.deb 3b50df95b21584f973cc0d57bf4f2bb814f8b812783035bd3d704a0bd403970e 7160240 slapd-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb e638fe8e176c8b357702bb429d0e5ba8d174f106bb880a5ec899ae9c25194e8c 1287660 slapd_2.4.48+dfsg-1ubuntu1_s390x.deb e35f4a4210c6468bdc1612d80af220b2b170701686dc449ddee382c1f12aa5e0 14620 slapi-dev_2.4.48+dfsg-1ubuntu1_s390x.deb Files: ee929d054fec270d655c3901c322a74f 567920 debug optional ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb 41a2fc549bfd6aacc0e58cb7f4980e8f 121252 net optional ldap-utils_2.4.48+dfsg-1ubuntu1_s390x.deb 5d7324c8e94ade147421da29616b5428 550800 debug optional libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb 4fc5e6e805964cfd87531b303072835d 143664 libs optional libldap-2.4-2_2.4.48+dfsg-1ubuntu1_s390x.deb 74bf16ab7ea79265631bdb4927cdb4ab 253272 libdevel optional libldap2-dev_2.4.48+dfsg-1ubuntu1_s390x.deb 3ff1e15e4d350602cf49f58d412e24dd 10247 net optional openldap_2.4.48+dfsg-1ubuntu1_s390x.buildinfo 7ff1c22c9a28978fcc8bdf98dca6647f 65408 raw-translations - openldap_2.4.48+dfsg-1ubuntu1_s390x_translations.tar.gz 44d9012523df10637b04b5d22674fdf2 62204 debug optional slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb ad823ed9f40af474f7b6a34ca45225d9 24024 net optional slapd-contrib_2.4.48+dfsg-1ubuntu1_s390x.deb 0fe57692985d842b46b6fddf2c2eb19d 7160240 debug optional slapd-dbgsym_2.4.48+dfsg-1ubuntu1_s390x.ddeb 0ae6f0e789cb2c61a0523a1d721b0054 1287660 net optional slapd_2.4.48+dfsg-1ubuntu1_s390x.deb b8c0ce7f8e161805e483fb8c1ebad409 14620 libdevel optional slapi-dev_2.4.48+dfsg-1ubuntu1_s390x.deb Original-Maintainer: Debian OpenLDAP Maintainers