Format: 1.8 Date: Fri, 26 Jul 2019 13:27:16 -0400 Source: openldap Binary: slapd slapd-smbk5pwd ldap-utils libldap-2.4-2 libldap-common libldap2-dev Architecture: s390x s390x_translations Version: 2.4.45+dfsg-1ubuntu1.3 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: ldap-utils - OpenLDAP utilities libldap-2.4-2 - OpenLDAP libraries libldap-common - OpenLDAP common files for libraries libldap2-dev - OpenLDAP development libraries slapd - OpenLDAP server (slapd) slapd-smbk5pwd - Keeps Samba and Kerberos passwords in sync within slapd. Changes: openldap (2.4.45+dfsg-1ubuntu1.3) bionic-security; urgency=medium . * SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases - debian/patches/CVE-2019-13057-1.patch: add restriction to servers/slapd/saslauthz.c. - debian/patches/CVE-2019-13057-2.patch: add tests to tests/data/idassert.out, tests/data/slapd-idassert.conf, tests/data/test-idassert1.ldif, tests/scripts/test028-idassert. - debian/patches/CVE-2019-13057-3.patch: fix typo in tests/scripts/test028-idassert. - debian/patches/CVE-2019-13057-4.patch: fix typo in tests/scripts/test028-idassert. - CVE-2019-13057 * SECURITY UPDATE: SASL SSF not initialized per connection - debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in connection_init in servers/slapd/connection.c. - CVE-2019-13565 Checksums-Sha1: d814eb24f557392d6fe76f56b3c393eb6516af83 483600 ldap-utils-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb c1f9ee254cc8851b8af4de5fe53bc8d0ac2eef2d 121684 ldap-utils_2.4.45+dfsg-1ubuntu1.3_s390x.deb 0fd826f116a05c3f64df7bb98dd3b08507e40a74 487848 libldap-2.4-2-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb c6a87cea2ed037aa8e6d0db3fc4076b1ef222b0a 143488 libldap-2.4-2_2.4.45+dfsg-1ubuntu1.3_s390x.deb cc60db66e7769e952794c1a8a4a55d637c4156ae 252900 libldap2-dev_2.4.45+dfsg-1ubuntu1.3_s390x.deb 0f2a1bd897812a2b83b4bdb5d568ba2513660d5a 10359 openldap_2.4.45+dfsg-1ubuntu1.3_s390x.buildinfo b57323735cfb8535dcbe66e4a999369558e495cb 64023 openldap_2.4.45+dfsg-1ubuntu1.3_s390x_translations.tar.gz 2cc09a37ff91f13d2aa885678df26e7f047fc40f 6541556 slapd-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 5413740ff0e7a779f25e6e796ddb2770df07852f 42924 slapd-smbk5pwd-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 89ef9ff1725ad6f50603eec92fc352c1598eeac4 18456 slapd-smbk5pwd_2.4.45+dfsg-1ubuntu1.3_s390x.deb 3797f0fbc842a22fcf3ad376e275ea1402335362 1282596 slapd_2.4.45+dfsg-1ubuntu1.3_s390x.deb Checksums-Sha256: 11c13d9f4e5c47ae1e768c4948b347b7c8af2e6dd566d56d3d4976503f3631d5 483600 ldap-utils-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 43ee59763b5329410f88dd36a103f576db21db1d222bee2520cba99b466a4190 121684 ldap-utils_2.4.45+dfsg-1ubuntu1.3_s390x.deb 15e788f08a5155e8c08ea89b936bb36948a7836a9d911725bfdfe4f6c957e581 487848 libldap-2.4-2-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 5faa099b8852cf3b0b8bf3b86fde77c8cd4d903970d671a5244ac6d6ebe941f8 143488 libldap-2.4-2_2.4.45+dfsg-1ubuntu1.3_s390x.deb 6cb72f4f69436be4f9a631b0e1e990c93747d347761a4b80c180967acfdf1561 252900 libldap2-dev_2.4.45+dfsg-1ubuntu1.3_s390x.deb 8f0666a6244b5e95efb09b42d7093b4a2fcaaead63e3abcfade18e3fb488bab7 10359 openldap_2.4.45+dfsg-1ubuntu1.3_s390x.buildinfo 4a47e0385e138c6c961052c4aefc91339236d79e50530c387ec50326a2106bef 64023 openldap_2.4.45+dfsg-1ubuntu1.3_s390x_translations.tar.gz b6204985fc39826d4ffa63bb02e346a5d79e7fa48a87751c4d5d9864834ba65a 6541556 slapd-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 91d13ede8cf7e8adf04f5f3009ef94ef879cf0f1a5ee32f8727fcc3385084bae 42924 slapd-smbk5pwd-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 3c88f555c3f6b79aba6b198718eed455ab8f658043cc9db26389f8a0dda2a494 18456 slapd-smbk5pwd_2.4.45+dfsg-1ubuntu1.3_s390x.deb 08a2b355e3a8015543ccf423e0e6ef3486ecfb0bb3e0dab69c459cbfe2004bcc 1282596 slapd_2.4.45+dfsg-1ubuntu1.3_s390x.deb Files: b2a076ecf9ec8b5a370fed690ed8bfc4 483600 debug optional ldap-utils-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb bd0d04eb8113ca38c25982c1e517d094 121684 net optional ldap-utils_2.4.45+dfsg-1ubuntu1.3_s390x.deb f3891c31df23d2f2876c1dc47aedc919 487848 debug optional libldap-2.4-2-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 60f5daa3668ce4616bb7740698245fae 143488 libs standard libldap-2.4-2_2.4.45+dfsg-1ubuntu1.3_s390x.deb 3af136c5ad01a89a7992bc8939e1da78 252900 libdevel optional libldap2-dev_2.4.45+dfsg-1ubuntu1.3_s390x.deb 9d1b10ec9ef7510f563b36876627bd82 10359 net optional openldap_2.4.45+dfsg-1ubuntu1.3_s390x.buildinfo 499cd538f1bea9adf03c9cb0679506d5 64023 raw-translations - openldap_2.4.45+dfsg-1ubuntu1.3_s390x_translations.tar.gz 7936f2a0a3e794cbf9c668e590ac7e95 6541556 debug optional slapd-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 8809a353cf4f4fd66437bf70509cfa1b 42924 debug optional slapd-smbk5pwd-dbgsym_2.4.45+dfsg-1ubuntu1.3_s390x.ddeb 6f301fe2894d97136cd7d9d1f778fa3a 18456 net optional slapd-smbk5pwd_2.4.45+dfsg-1ubuntu1.3_s390x.deb a6392553dc2388b99c1cc7c4d3bf856c 1282596 net optional slapd_2.4.45+dfsg-1ubuntu1.3_s390x.deb Original-Maintainer: Debian OpenLDAP Maintainers