Author: Ubuntu Git Importer
Author Date: 2019-09-07 18:10:10 UTC

DSC file for 2.4.44+dfsg-5+deb9u3

Author: Ryan Tandy
Author Date: 2019-08-10 19:17:00 UTC

Import patches-unapplied version 2.4.44+dfsg-5+deb9u3 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: e51daa4f23a7a87b4c85edef81ddc54a2097448b

New changelog entries:
  * Fix slapd to restrict rootDN proxyauthz to its own databases
    (CVE-2019-13057) (ITS#9038) (Closes: #932997)
  * Fix slapd to enforce sasl_ssf ACL statement on every connection
    (CVE-2019-13565) (ITS#9052) (Closes: #932998)
  * Fix slapo-rwm to not free original filter when rewritten filter is invalid
    (ITS#8964) (Closes: #934277, LP: #1838370)

Author: Ryan Tandy
Author Date: 2019-08-10 19:17:00 UTC

Import patches-applied version 2.4.44+dfsg-5+deb9u3 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 791109fe13bf190845ef7c4deffd39de5b31b340
Unapplied parent: 5535d03515a5241ba815eeecbdf3230f7c068f11

New changelog entries:
  * Fix slapd to restrict rootDN proxyauthz to its own databases
    (CVE-2019-13057) (ITS#9038) (Closes: #932997)
  * Fix slapd to enforce sasl_ssf ACL statement on every connection
    (CVE-2019-13565) (ITS#9052) (Closes: #932998)
  * Fix slapo-rwm to not free original filter when rewritten filter is invalid
    (ITS#8964) (Closes: #934277, LP: #1838370)

Author: Ryan Tandy
Author Date: 2019-08-10 18:58:18 UTC

Import patches-applied version 2.4.47+dfsg-3+deb10u1 to applied/debian/buster

Imported using git-ubuntu import.

Changelog parent: 6adac9752fbca12cf06b9bdd5a97737fc71b2de9
Unapplied parent: 875c739a93cb5e6a17b15f96cbf88785d43177ad

New changelog entries:
  * Fix slapd to restrict rootDN proxyauthz to its own databases
    (CVE-2019-13057) (ITS#9038) (Closes: #932997)
  * Fix slapd to enforce sasl_ssf ACL statement on every connection
    (CVE-2019-13565) (ITS#9052) (Closes: #932998)
  * Fix slapo-rwm to not free original filter when rewritten filter is invalid
    (ITS#8964) (Closes: #934277, LP: #1838370)

Author: Ryan Tandy
Author Date: 2019-08-10 18:58:18 UTC

Import patches-unapplied version 2.4.47+dfsg-3+deb10u1 to debian/buster

Imported using git-ubuntu import.

Changelog parent: 2f26ebd53a3b7647ebc1f74cfc83b68015ac9260

New changelog entries:
  * Fix slapd to restrict rootDN proxyauthz to its own databases
    (CVE-2019-13057) (ITS#9038) (Closes: #932997)
  * Fix slapd to enforce sasl_ssf ACL statement on every connection
    (CVE-2019-13565) (ITS#9052) (Closes: #932998)
  * Fix slapo-rwm to not free original filter when rewritten filter is invalid
    (ITS#8964) (Closes: #934277, LP: #1838370)

Author: Ubuntu Git Importer
Author Date: 2019-08-20 16:16:20 UTC

DSC file for 2.4.42+dfsg-2ubuntu3.7

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:04:04 UTC

Import patches-unapplied version 2.4.47+dfsg-3ubuntu2.2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Upload parent: 3b21948eeb214141d6a9ddaf7eb2e98e1fb36de6

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:04:04 UTC

Import patches-applied version 2.4.47+dfsg-3ubuntu2.2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 3d899a76e121410753559b03e834bc3d9438301a
Unapplied parent: 9c342aa3c2ee7efa20e50ad61e03c94ef5ada617

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:04:04 UTC

Import patches-unapplied version 2.4.47+dfsg-3ubuntu2.2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Upload parent: 3b21948eeb214141d6a9ddaf7eb2e98e1fb36de6

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:04:04 UTC

Import patches-applied version 2.4.47+dfsg-3ubuntu2.2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 3d899a76e121410753559b03e834bc3d9438301a
Unapplied parent: 9c342aa3c2ee7efa20e50ad61e03c94ef5ada617

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:04:04 UTC

Import patches-applied version 2.4.47+dfsg-3ubuntu2.2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 3d899a76e121410753559b03e834bc3d9438301a
Unapplied parent: 9c342aa3c2ee7efa20e50ad61e03c94ef5ada617

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:04:04 UTC

Import patches-unapplied version 2.4.47+dfsg-3ubuntu2.2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Upload parent: 3b21948eeb214141d6a9ddaf7eb2e98e1fb36de6

Author: Lucas Kanashiro
Author Date: 2019-08-08 19:33:06 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu3.7 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: ccdca405de3b71eace5a6e30e7f0584b37d0d835
Unapplied parent: ae5429a84f4ef7d09ff9007f51157cd6fbeaa701

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 19:33:06 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu3.7 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Upload parent: 108d5ab75ef9d6ac9c8dd6902cfd56d5bb29782a

Author: Lucas Kanashiro
Author Date: 2019-08-08 19:33:06 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu3.7 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Upload parent: 108d5ab75ef9d6ac9c8dd6902cfd56d5bb29782a

Author: Lucas Kanashiro
Author Date: 2019-08-08 19:33:06 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu3.7 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: ccdca405de3b71eace5a6e30e7f0584b37d0d835
Unapplied parent: ae5429a84f4ef7d09ff9007f51157cd6fbeaa701

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 19:33:06 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu3.7 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: ccdca405de3b71eace5a6e30e7f0584b37d0d835
Unapplied parent: ae5429a84f4ef7d09ff9007f51157cd6fbeaa701

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 19:33:06 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu3.7 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Upload parent: 108d5ab75ef9d6ac9c8dd6902cfd56d5bb29782a

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:08:36 UTC

Import patches-applied version 2.4.45+dfsg-1ubuntu1.4 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 9e910e8e6d52e9a02615ebfa8593c84b56a0997d
Unapplied parent: 8fb81ef4ab91a9d6465f88e12e8e16f30fd744db

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:08:36 UTC

Import patches-applied version 2.4.45+dfsg-1ubuntu1.4 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 9e910e8e6d52e9a02615ebfa8593c84b56a0997d
Unapplied parent: 8fb81ef4ab91a9d6465f88e12e8e16f30fd744db

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:08:36 UTC

Import patches-applied version 2.4.45+dfsg-1ubuntu1.4 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 9e910e8e6d52e9a02615ebfa8593c84b56a0997d
Unapplied parent: 8fb81ef4ab91a9d6465f88e12e8e16f30fd744db

New changelog entries:
  * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370)

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:08:36 UTC

Import patches-unapplied version 2.4.45+dfsg-1ubuntu1.4 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Upload parent: 9f80d7055dcf38e47e01817f95e7563489ca488a

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:08:36 UTC

Import patches-unapplied version 2.4.45+dfsg-1ubuntu1.4 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Upload parent: 9f80d7055dcf38e47e01817f95e7563489ca488a

Author: Lucas Kanashiro
Author Date: 2019-08-08 18:08:36 UTC

Import patches-unapplied version 2.4.45+dfsg-1ubuntu1.4 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Upload parent: 9f80d7055dcf38e47e01817f95e7563489ca488a

Author: Andreas Hasenack
Author Date: 2019-07-31 21:01:14 UTC

Import patches-unapplied version 2.4.48+dfsg-1ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Upload parent: c764ab810f802f3f0a35fded361bb9f7a80e2cc1

Author: Andreas Hasenack
Author Date: 2019-07-31 21:01:14 UTC

Import patches-unapplied version 2.4.48+dfsg-1ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Upload parent: c764ab810f802f3f0a35fded361bb9f7a80e2cc1

Author: Andreas Hasenack
Author Date: 2019-07-31 21:01:14 UTC

Import patches-applied version 2.4.48+dfsg-1ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: ceb0024a2ba46b7f78646687f1b8d258b32f4724
Unapplied parent: 020e3d9a7891437b819dc5863dabe5a8292df9a1

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/rules:
        - add nssov to CONTRIB_MODULES
        - add sysconfdir to CONTRIB_MAKEVARS
      - d/slapd.install:
        - install nssov overlay
      - d/slapd.manpages:
        - install slapo-nssov(5) man page
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2
    - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding
      Debian bug #919136, we also have to patch the nssov makefile
      accordingly and thus update this patch.
  * Dropped:
    - Fix sysv-generator unit file by customizing parameters (LP #1821343)
      + d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
        correct systemctl status for slapd daemon.
      + d/slapd.install: place override file in correct location.
      [Included in 2.4.48+dfsg-1]
    - SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
      + debian/patches/CVE-2019-13057-1.patch: add restriction to
        servers/slapd/saslauthz.c.
      + debian/patches/CVE-2019-13057-2.patch: add tests to
        tests/data/idassert.out, tests/data/slapd-idassert.conf,
        tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
      + debian/patches/CVE-2019-13057-3.patch: fix typo in
        tests/scripts/test028-idassert.
      + debian/patches/CVE-2019-13057-4.patch: fix typo in
        tests/scripts/test028-idassert.
      + CVE-2019-13057
      [Fixed upstream]
    - SECURITY UPDATE: SASL SSF not initialized per connection
      + debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
        connection_init in servers/slapd/connection.c.
      + CVE-2019-13565
      [Fixed upstream]

Author: Andreas Hasenack
Author Date: 2019-07-31 21:01:14 UTC

Import patches-applied version 2.4.48+dfsg-1ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: ceb0024a2ba46b7f78646687f1b8d258b32f4724
Unapplied parent: 020e3d9a7891437b819dc5863dabe5a8292df9a1

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/rules:
        - add nssov to CONTRIB_MODULES
        - add sysconfdir to CONTRIB_MAKEVARS
      - d/slapd.install:
        - install nssov overlay
      - d/slapd.manpages:
        - install slapo-nssov(5) man page
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2
    - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding
      Debian bug #919136, we also have to patch the nssov makefile
      accordingly and thus update this patch.
  * Dropped:
    - Fix sysv-generator unit file by customizing parameters (LP #1821343)
      + d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
        correct systemctl status for slapd daemon.
      + d/slapd.install: place override file in correct location.
      [Included in 2.4.48+dfsg-1]
    - SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
      + debian/patches/CVE-2019-13057-1.patch: add restriction to
        servers/slapd/saslauthz.c.
      + debian/patches/CVE-2019-13057-2.patch: add tests to
        tests/data/idassert.out, tests/data/slapd-idassert.conf,
        tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
      + debian/patches/CVE-2019-13057-3.patch: fix typo in
        tests/scripts/test028-idassert.
      + debian/patches/CVE-2019-13057-4.patch: fix typo in
        tests/scripts/test028-idassert.
      + CVE-2019-13057
      [Fixed upstream]
    - SECURITY UPDATE: SASL SSF not initialized per connection
      + debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
        connection_init in servers/slapd/connection.c.
      + CVE-2019-13565
      [Fixed upstream]

Author: Andreas Hasenack
Author Date: 2019-07-31 21:01:14 UTC

Import patches-applied version 2.4.48+dfsg-1ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: ceb0024a2ba46b7f78646687f1b8d258b32f4724
Unapplied parent: 020e3d9a7891437b819dc5863dabe5a8292df9a1

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/rules:
        - add nssov to CONTRIB_MODULES
        - add sysconfdir to CONTRIB_MAKEVARS
      - d/slapd.install:
        - install nssov overlay
      - d/slapd.manpages:
        - install slapo-nssov(5) man page
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2
    - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding
      Debian bug #919136, we also have to patch the nssov makefile
      accordingly and thus update this patch.
  * Dropped:
    - Fix sysv-generator unit file by customizing parameters (LP #1821343)
      + d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
        correct systemctl status for slapd daemon.
      + d/slapd.install: place override file in correct location.
      [Included in 2.4.48+dfsg-1]
    - SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
      + debian/patches/CVE-2019-13057-1.patch: add restriction to
        servers/slapd/saslauthz.c.
      + debian/patches/CVE-2019-13057-2.patch: add tests to
        tests/data/idassert.out, tests/data/slapd-idassert.conf,
        tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
      + debian/patches/CVE-2019-13057-3.patch: fix typo in
        tests/scripts/test028-idassert.
      + debian/patches/CVE-2019-13057-4.patch: fix typo in
        tests/scripts/test028-idassert.
      + CVE-2019-13057
      [Fixed upstream]
    - SECURITY UPDATE: SASL SSF not initialized per connection
      + debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
        connection_init in servers/slapd/connection.c.
      + CVE-2019-13565
      [Fixed upstream]

Author: Andreas Hasenack
Author Date: 2019-07-31 21:01:14 UTC

Import patches-applied version 2.4.48+dfsg-1ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: ceb0024a2ba46b7f78646687f1b8d258b32f4724
Unapplied parent: 020e3d9a7891437b819dc5863dabe5a8292df9a1

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/rules:
        - add nssov to CONTRIB_MODULES
        - add sysconfdir to CONTRIB_MAKEVARS
      - d/slapd.install:
        - install nssov overlay
      - d/slapd.manpages:
        - install slapo-nssov(5) man page
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2
    - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding
      Debian bug #919136, we also have to patch the nssov makefile
      accordingly and thus update this patch.
  * Dropped:
    - Fix sysv-generator unit file by customizing parameters (LP #1821343)
      + d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
        correct systemctl status for slapd daemon.
      + d/slapd.install: place override file in correct location.
      [Included in 2.4.48+dfsg-1]
    - SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
      + debian/patches/CVE-2019-13057-1.patch: add restriction to
        servers/slapd/saslauthz.c.
      + debian/patches/CVE-2019-13057-2.patch: add tests to
        tests/data/idassert.out, tests/data/slapd-idassert.conf,
        tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
      + debian/patches/CVE-2019-13057-3.patch: fix typo in
        tests/scripts/test028-idassert.
      + debian/patches/CVE-2019-13057-4.patch: fix typo in
        tests/scripts/test028-idassert.
      + CVE-2019-13057
      [Fixed upstream]
    - SECURITY UPDATE: SASL SSF not initialized per connection
      + debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
        connection_init in servers/slapd/connection.c.
      + CVE-2019-13565
      [Fixed upstream]

Author: Andreas Hasenack
Author Date: 2019-07-31 21:01:14 UTC

Import patches-unapplied version 2.4.48+dfsg-1ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Upload parent: c764ab810f802f3f0a35fded361bb9f7a80e2cc1

Author: Andreas Hasenack
Author Date: 2019-07-31 21:01:14 UTC

Import patches-unapplied version 2.4.48+dfsg-1ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Upload parent: c764ab810f802f3f0a35fded361bb9f7a80e2cc1

Author: Marc Deslauriers
Author Date: 2019-07-26 17:27:16 UTC

Import patches-applied version 2.4.45+dfsg-1ubuntu1.3 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 593ce0ec8adca0c90c6a4fb6c25c21a94d12eded
Unapplied parent: 4f4fa64afe1ac27f1d69f6f1874383be8ed3e57c

New changelog entries:
  * SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
    - debian/patches/CVE-2019-13057-1.patch: add restriction to
      servers/slapd/saslauthz.c.
    - debian/patches/CVE-2019-13057-2.patch: add tests to
      tests/data/idassert.out, tests/data/slapd-idassert.conf,
      tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-3.patch: fix typo in
      tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-4.patch: fix typo in
      tests/scripts/test028-idassert.
    - CVE-2019-13057
  * SECURITY UPDATE: SASL SSF not initialized per connection
    - debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
      connection_init in servers/slapd/connection.c.
    - CVE-2019-13565

Author: Marc Deslauriers
Author Date: 2019-07-26 17:27:16 UTC

Import patches-unapplied version 2.4.45+dfsg-1ubuntu1.3 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 9c85c05e1379f5a2ab82f4ac157438280270a955

New changelog entries:
  * SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
    - debian/patches/CVE-2019-13057-1.patch: add restriction to
      servers/slapd/saslauthz.c.
    - debian/patches/CVE-2019-13057-2.patch: add tests to
      tests/data/idassert.out, tests/data/slapd-idassert.conf,
      tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-3.patch: fix typo in
      tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-4.patch: fix typo in
      tests/scripts/test028-idassert.
    - CVE-2019-13057
  * SECURITY UPDATE: SASL SSF not initialized per connection
    - debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
      connection_init in servers/slapd/connection.c.
    - CVE-2019-13565

Author: Marc Deslauriers
Author Date: 2019-07-26 17:28:04 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu3.6 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 6e8421b98e2dbd08ec4b50be2c3dac5bd526e086
Unapplied parent: aaff648daca477a61edeb566e4f9370a2ba40352

New changelog entries:
  * SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
    - debian/patches/CVE-2019-13057-1.patch: add restriction to
      servers/slapd/saslauthz.c.
    - debian/patches/CVE-2019-13057-2.patch: add tests to
      tests/data/idassert.out, tests/data/slapd-idassert.conf,
      tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-3.patch: fix typo in
      tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-4.patch: fix typo in
      tests/scripts/test028-idassert.
    - CVE-2019-13057
  * SECURITY UPDATE: SASL SSF not initialized per connection
    - debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
      connection_init in servers/slapd/connection.c.
    - CVE-2019-13565

Author: Marc Deslauriers
Author Date: 2019-07-26 17:21:00 UTC

Import patches-applied version 2.4.47+dfsg-3ubuntu2.1 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 9490b459f31853daac67bf4b6fa872a8243f2c5a
Unapplied parent: 2355719d1896ffc23986de7be3ac013f3ed9239a

New changelog entries:
  * SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
    - debian/patches/CVE-2019-13057-1.patch: add restriction to
      servers/slapd/saslauthz.c.
    - debian/patches/CVE-2019-13057-2.patch: add tests to
      tests/data/idassert.out, tests/data/slapd-idassert.conf,
      tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-3.patch: fix typo in
      tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-4.patch: fix typo in
      tests/scripts/test028-idassert.
    - CVE-2019-13057
  * SECURITY UPDATE: SASL SSF not initialized per connection
    - debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
      connection_init in servers/slapd/connection.c.
    - CVE-2019-13565

Author: Marc Deslauriers
Author Date: 2019-07-26 17:21:00 UTC

Import patches-unapplied version 2.4.47+dfsg-3ubuntu2.1 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: d26765ddbd018482926ece21f7ce51a74acc1c40

New changelog entries:
  * SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
    - debian/patches/CVE-2019-13057-1.patch: add restriction to
      servers/slapd/saslauthz.c.
    - debian/patches/CVE-2019-13057-2.patch: add tests to
      tests/data/idassert.out, tests/data/slapd-idassert.conf,
      tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-3.patch: fix typo in
      tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-4.patch: fix typo in
      tests/scripts/test028-idassert.
    - CVE-2019-13057
  * SECURITY UPDATE: SASL SSF not initialized per connection
    - debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
      connection_init in servers/slapd/connection.c.
    - CVE-2019-13565

Author: Marc Deslauriers
Author Date: 2019-07-26 17:28:04 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu3.6 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: ac72efbbac2d82c076530bbb548fc334962fa033

New changelog entries:
  * SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases
    - debian/patches/CVE-2019-13057-1.patch: add restriction to
      servers/slapd/saslauthz.c.
    - debian/patches/CVE-2019-13057-2.patch: add tests to
      tests/data/idassert.out, tests/data/slapd-idassert.conf,
      tests/data/test-idassert1.ldif, tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-3.patch: fix typo in
      tests/scripts/test028-idassert.
    - debian/patches/CVE-2019-13057-4.patch: fix typo in
      tests/scripts/test028-idassert.
    - CVE-2019-13057
  * SECURITY UPDATE: SASL SSF not initialized per connection
    - debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in
      connection_init in servers/slapd/connection.c.
    - CVE-2019-13565

Author: Ryan Tandy
Author Date: 2019-07-25 15:32:00 UTC

Import patches-applied version 2.4.48+dfsg-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 6adac9752fbca12cf06b9bdd5a97737fc71b2de9
Unapplied parent: 2645f47a26e791f19cef453c3d0d2bb3e2423d9f

New changelog entries:
  * New upstream release.
    - fixed slapd to restrict rootDN proxyauthz to its own databases
      (CVE-2019-13057) (ITS#9038) (Closes: #932997)
    - fixed slapd to enforce sasl_ssf ACL statement on every connection
      (CVE-2019-13565) (ITS#9052) (Closes: #932998)
    - added new openldap.h header with OpenLDAP specific libldap interfaces
      (ITS#8671)
    - updated lastbind overlay to support forwarding authTimestamp updates
      (ITS#7721) (Closes: #880656)
  * Update Standards-Version to 4.4.0.
  * Add a systemd drop-in to set RemainAfterExit=no on the slapd service, so
    that systemd marks the service as dead after it crashes or is killed.
    Thanks to Heitor Alves de Siqueira. (Closes: #926657, LP: #1821343)
  * Use more entropy for generating a random admin password, if none was set
    during initial configuration. Thanks to Judicael Courant.
    (Closes: #932270)
  * Replace debian/rules calls to dpkg-architecture and dpkg-parsechangelog
    with variables provided by dpkg-dev includes.
  * Declare R³: no.
  * Create a simple autopkgtest that tests installing slapd and connecting to
    it with an ldap tool.
  * Install the new openldap.h header in libldap2-dev.

Author: Ryan Tandy
Author Date: 2019-07-25 15:32:00 UTC

Import patches-unapplied version 2.4.48+dfsg-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 2f26ebd53a3b7647ebc1f74cfc83b68015ac9260

New changelog entries:
  * New upstream release.
    - fixed slapd to restrict rootDN proxyauthz to its own databases
      (CVE-2019-13057) (ITS#9038) (Closes: #932997)
    - fixed slapd to enforce sasl_ssf ACL statement on every connection
      (CVE-2019-13565) (ITS#9052) (Closes: #932998)
    - added new openldap.h header with OpenLDAP specific libldap interfaces
      (ITS#8671)
    - updated lastbind overlay to support forwarding authTimestamp updates
      (ITS#7721) (Closes: #880656)
  * Update Standards-Version to 4.4.0.
  * Add a systemd drop-in to set RemainAfterExit=no on the slapd service, so
    that systemd marks the service as dead after it crashes or is killed.
    Thanks to Heitor Alves de Siqueira. (Closes: #926657, LP: #1821343)
  * Use more entropy for generating a random admin password, if none was set
    during initial configuration. Thanks to Judicael Courant.
    (Closes: #932270)
  * Replace debian/rules calls to dpkg-architecture and dpkg-parsechangelog
    with variables provided by dpkg-dev includes.
  * Declare R³: no.
  * Create a simple autopkgtest that tests installing slapd and connecting to
    it with an ldap tool.
  * Install the new openldap.h header in libldap2-dev.

Author: Heitor Alves de Siqueira
Author Date: 2019-04-10 12:50:13 UTC

Import patches-unapplied version 2.4.46+dfsg-5ubuntu1.2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: e3ab6327a1d546993f3b3334203ba353ba707ac8

New changelog entries:
  * Fix sysv-generator unit file by customizing parameters (LP: #1821343)
    - d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
      correct systemctl status for slapd daemon.
    - d/slapd.install: place override file in correct location.

Author: Heitor Alves de Siqueira
Author Date: 2019-04-10 12:50:13 UTC

Import patches-unapplied version 2.4.46+dfsg-5ubuntu1.2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: e3ab6327a1d546993f3b3334203ba353ba707ac8

New changelog entries:
  * Fix sysv-generator unit file by customizing parameters (LP: #1821343)
    - d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
      correct systemctl status for slapd daemon.
    - d/slapd.install: place override file in correct location.

Author: Heitor Alves de Siqueira
Author Date: 2019-04-10 12:50:13 UTC

Import patches-unapplied version 2.4.46+dfsg-5ubuntu1.2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: e3ab6327a1d546993f3b3334203ba353ba707ac8

New changelog entries:
  * Fix sysv-generator unit file by customizing parameters (LP: #1821343)
    - d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
      correct systemctl status for slapd daemon.
    - d/slapd.install: place override file in correct location.

Author: Heitor Alves de Siqueira
Author Date: 2019-04-10 12:50:13 UTC

Import patches-applied version 2.4.46+dfsg-5ubuntu1.2 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 1428518da7baae865b530fc14e10d718d786b621
Unapplied parent: 8fb52f8b935afe6258e18b9d6873b3a71d025dd0

New changelog entries:
  * Fix sysv-generator unit file by customizing parameters (LP: #1821343)
    - d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
      correct systemctl status for slapd daemon.
    - d/slapd.install: place override file in correct location.

Author: Heitor Alves de Siqueira
Author Date: 2019-04-10 12:50:13 UTC

Import patches-applied version 2.4.46+dfsg-5ubuntu1.2 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 1428518da7baae865b530fc14e10d718d786b621
Unapplied parent: 8fb52f8b935afe6258e18b9d6873b3a71d025dd0

New changelog entries:
  * Fix sysv-generator unit file by customizing parameters (LP: #1821343)
    - d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
      correct systemctl status for slapd daemon.
    - d/slapd.install: place override file in correct location.

Author: Heitor Alves de Siqueira
Author Date: 2019-04-10 12:50:13 UTC

Import patches-applied version 2.4.46+dfsg-5ubuntu1.2 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 1428518da7baae865b530fc14e10d718d786b621
Unapplied parent: 8fb52f8b935afe6258e18b9d6873b3a71d025dd0

New changelog entries:
  * Fix sysv-generator unit file by customizing parameters (LP: #1821343)
    - d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
      correct systemctl status for slapd daemon.
    - d/slapd.install: place override file in correct location.

Author: Heitor Alves de Siqueira
Author Date: 2019-04-08 15:39:12 UTC

Import patches-applied version 2.4.47+dfsg-3ubuntu2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 060b845567fc2cc96faa3a294a0ac0eeb1661857
Unapplied parent: 5e39504dabdcf055744f12f383905956ae361184

New changelog entries:
  * Fix sysv-generator unit file by customizing parameters (LP: #1821343)
    - d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
      correct systemctl status for slapd daemon.
    - d/slapd.install: place override file in correct location.

Author: Heitor Alves de Siqueira
Author Date: 2019-04-08 15:39:12 UTC

Import patches-unapplied version 2.4.47+dfsg-3ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: fa2958bc51e0f9f7e06f717bb4e4a1155510f91d

New changelog entries:
  * Fix sysv-generator unit file by customizing parameters (LP: #1821343)
    - d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow
      correct systemctl status for slapd daemon.
    - d/slapd.install: place override file in correct location.

Author: Andreas Hasenack
Author Date: 2018-10-22 12:49:38 UTC

Import patches-applied version 2.4.31-1+nmu2ubuntu8.5 to applied/ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: f0d44f619991af8523df61773b6b12cf917c0d13
Unapplied parent: 884ad7cd6a5fcc76801d7d8ee9668adeaedd26f9

New changelog entries:
  * d/apparmor-profile: update apparmor profile to allow reading of
    files needed when slapd is behaving as a kerberos/gssapi client
    and acquiring its own ticket. (LP: #1783183)

Author: Andreas Hasenack
Author Date: 2018-10-22 12:49:38 UTC

Import patches-applied version 2.4.31-1+nmu2ubuntu8.5 to applied/ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: f0d44f619991af8523df61773b6b12cf917c0d13
Unapplied parent: 884ad7cd6a5fcc76801d7d8ee9668adeaedd26f9

New changelog entries:
  * d/apparmor-profile: update apparmor profile to allow reading of
    files needed when slapd is behaving as a kerberos/gssapi client
    and acquiring its own ticket. (LP: #1783183)

Author: Andreas Hasenack
Author Date: 2018-10-22 12:49:38 UTC

Import patches-applied version 2.4.31-1+nmu2ubuntu8.5 to applied/ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: f0d44f619991af8523df61773b6b12cf917c0d13
Unapplied parent: 884ad7cd6a5fcc76801d7d8ee9668adeaedd26f9

New changelog entries:
  * d/apparmor-profile: update apparmor profile to allow reading of
    files needed when slapd is behaving as a kerberos/gssapi client
    and acquiring its own ticket. (LP: #1783183)

Author: Andreas Hasenack
Author Date: 2018-10-22 12:49:38 UTC

Import patches-unapplied version 2.4.31-1+nmu2ubuntu8.5 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Upload parent: 18dac35d1930ea61bdff726f68d20914ddc12b36

Author: Andreas Hasenack
Author Date: 2018-10-22 12:49:38 UTC

Import patches-unapplied version 2.4.31-1+nmu2ubuntu8.5 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Upload parent: 18dac35d1930ea61bdff726f68d20914ddc12b36

Author: Andreas Hasenack
Author Date: 2018-10-22 12:49:38 UTC

Import patches-unapplied version 2.4.31-1+nmu2ubuntu8.5 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Upload parent: 18dac35d1930ea61bdff726f68d20914ddc12b36

Author: Ryan Tandy
Author Date: 2018-06-06 03:16:25 UTC

Import patches-applied version 2.4.40+dfsg-1+deb8u4 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: ffd949e07c6a6309751e74c6095a458aefb38332
Unapplied parent: 85980add246912be44f9ae8539a8a57bdbce20ec

New changelog entries:
  * Fix upgrade failure when olcSuffix contains a backslash. (Closes: #864719)
  * Import upstream patches to fix memory corruption caused by calling
    sasl_client_init() multiple times and possibly concurrently.
    (ITS#8648) (Closes: #860947)

Author: Ryan Tandy
Author Date: 2018-06-06 03:16:25 UTC

Import patches-unapplied version 2.4.40+dfsg-1+deb8u4 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 6dd47831a3ddd648b0512a23f0dbadd588e1834b

New changelog entries:
  * Fix upgrade failure when olcSuffix contains a backslash. (Closes: #864719)
  * Import upstream patches to fix memory corruption caused by calling
    sasl_client_init() multiple times and possibly concurrently.
    (ITS#8648) (Closes: #860947)

Author: Gianfranco Costamagna
Author Date: 2018-05-09 11:44:37 UTC

Import patches-unapplied version 2.4.46+dfsg-5ubuntu1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: b4c93de54e1cf2f3b428d929791296567b4db943

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Gianfranco Costamagna
Author Date: 2018-05-09 11:44:37 UTC

Import patches-applied version 2.4.46+dfsg-5ubuntu1 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 77932dea8721bf0298745d98deed1d814deae167
Unapplied parent: e0cde1b694d3f871a813ebbb3f275710e3fb83ff

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Ubuntu Git Importer
Author Date: 2018-03-07 07:44:38 UTC

pristine-tar data for openldap_2.4.45+dfsg.orig.tar.gz

Author: Ubuntu Git Importer
Author Date: 2018-03-07 06:55:51 UTC

pristine-tar data for openldap_2.4.45+dfsg.orig.tar.gz

Author: Gianfranco Costamagna
Author Date: 2017-07-28 12:49:07 UTC

Import patches-unapplied version 2.4.45+dfsg-1ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 0621c2e4a524dbe47a41dabf0a21ae812f1b71a7

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Gianfranco Costamagna
Author Date: 2017-07-28 12:49:07 UTC

Import patches-unapplied version 2.4.45+dfsg-1ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 0621c2e4a524dbe47a41dabf0a21ae812f1b71a7

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Gianfranco Costamagna
Author Date: 2017-07-28 12:49:07 UTC

Import patches-applied version 2.4.45+dfsg-1ubuntu1 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 21238ca4f96b3e8f27708b61d1d1f7e21dbe3edf
Unapplied parent: f012c9b53cdb1a0de14f02abe5bbb13aef6b3290

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Gianfranco Costamagna
Author Date: 2017-07-28 12:49:07 UTC

Import patches-unapplied version 2.4.45+dfsg-1ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 0621c2e4a524dbe47a41dabf0a21ae812f1b71a7

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Gianfranco Costamagna
Author Date: 2017-07-28 12:49:07 UTC

Import patches-applied version 2.4.45+dfsg-1ubuntu1 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 21238ca4f96b3e8f27708b61d1d1f7e21dbe3edf
Unapplied parent: f012c9b53cdb1a0de14f02abe5bbb13aef6b3290

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Gianfranco Costamagna
Author Date: 2017-07-28 12:49:07 UTC

Import patches-unapplied version 2.4.45+dfsg-1ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 0621c2e4a524dbe47a41dabf0a21ae812f1b71a7

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Gianfranco Costamagna
Author Date: 2017-07-28 12:49:07 UTC

Import patches-applied version 2.4.45+dfsg-1ubuntu1 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 21238ca4f96b3e8f27708b61d1d1f7e21dbe3edf
Unapplied parent: f012c9b53cdb1a0de14f02abe5bbb13aef6b3290

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Gianfranco Costamagna
Author Date: 2017-07-28 12:49:07 UTC

Import patches-applied version 2.4.45+dfsg-1ubuntu1 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 21238ca4f96b3e8f27708b61d1d1f7e21dbe3edf
Unapplied parent: f012c9b53cdb1a0de14f02abe5bbb13aef6b3290

New changelog entries:
  * Merge from Debian unstable. Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

Author: Marc Deslauriers
Author Date: 2017-05-30 19:24:10 UTC

Import patches-unapplied version 2.4.31-1+nmu2ubuntu8.4 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 4b7cca911b42355fd427ec8e9e0e72fb96b1436b

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:18:41 UTC

Import patches-unapplied version 2.4.44+dfsg-3ubuntu2.1 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 4bb9d92762ca307faccda2a41dea6841b8387b2f

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:18:41 UTC

Import patches-applied version 2.4.44+dfsg-3ubuntu2.1 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: f5f94c291b584e0bc0d2d5427ff8278408ff0720
Unapplied parent: 0b2f018f443b08f1d5972951edc1c0d0b836cf07

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:20:28 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu4.1 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 7e67ae396dfc54bef08e2cbd25baddc800049c58
Unapplied parent: 92b9d2a0f981c095144148da010eda7c5dc06e6e

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:18:41 UTC

Import patches-unapplied version 2.4.44+dfsg-3ubuntu2.1 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 4bb9d92762ca307faccda2a41dea6841b8387b2f

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:20:28 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu4.1 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 7e67ae396dfc54bef08e2cbd25baddc800049c58
Unapplied parent: 92b9d2a0f981c095144148da010eda7c5dc06e6e

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:18:41 UTC

Import patches-applied version 2.4.44+dfsg-3ubuntu2.1 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: f5f94c291b584e0bc0d2d5427ff8278408ff0720
Unapplied parent: 0b2f018f443b08f1d5972951edc1c0d0b836cf07

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:20:28 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu4.1 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 56ab62179e2eda9e65b303d1d84ea1cc5b892fb3

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:18:41 UTC

Import patches-unapplied version 2.4.44+dfsg-3ubuntu2.1 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 4bb9d92762ca307faccda2a41dea6841b8387b2f

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:18:41 UTC

Import patches-applied version 2.4.44+dfsg-3ubuntu2.1 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: f5f94c291b584e0bc0d2d5427ff8278408ff0720
Unapplied parent: 0b2f018f443b08f1d5972951edc1c0d0b836cf07

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:20:28 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu4.1 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 56ab62179e2eda9e65b303d1d84ea1cc5b892fb3

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:20:28 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu4.1 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 56ab62179e2eda9e65b303d1d84ea1cc5b892fb3

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:24:10 UTC

Import patches-applied version 2.4.31-1+nmu2ubuntu8.4 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: e03b93de8d4bd194d0420407371bac38b010929b
Unapplied parent: b45432eba0cbaadb82ff7c39e5a6a99aa7e53989

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Marc Deslauriers
Author Date: 2017-05-30 19:20:28 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu4.1 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 7e67ae396dfc54bef08e2cbd25baddc800049c58
Unapplied parent: 92b9d2a0f981c095144148da010eda7c5dc06e6e

New changelog entries:
  * SECURITY UPDATE: denial of service via search with page size of 0
    - debian/patches/CVE-2017-9287.patch: fix double-free in
      servers/slapd/back-mdb/search.c.
    - CVE-2017-9287

Author: Nish Aravamudan
Author Date: 2017-02-10 20:17:02 UTC

Import patches-unapplied version 2.4.44+dfsg-3ubuntu2 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 73ee99315e38bddd22bd376e090386b3f6eb1f5f
Upload parent: 7d1c238f85ae2e268142eec731dc32c0fa6eb75e

New changelog entries:
  * d/rules: Fix typo in previous upload.

Author: Nish Aravamudan
Author Date: 2017-02-10 20:17:02 UTC

Import patches-applied version 2.4.44+dfsg-3ubuntu2 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 487fc585dde6f78782af2150f2f7685d0694c803
Unapplied parent: 6f9fe1f2bee93beec08a739fb7e96bc4bd359da5

New changelog entries:
  * d/rules: Fix typo in previous upload.

Author: Nish Aravamudan
Author Date: 2017-02-10 20:17:02 UTC

Import patches-unapplied version 2.4.44+dfsg-3ubuntu2 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 73ee99315e38bddd22bd376e090386b3f6eb1f5f
Upload parent: 7d1c238f85ae2e268142eec731dc32c0fa6eb75e

New changelog entries:
  * d/rules: Fix typo in previous upload.

Author: Nish Aravamudan
Author Date: 2017-02-10 20:17:02 UTC

Import patches-applied version 2.4.44+dfsg-3ubuntu2 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 487fc585dde6f78782af2150f2f7685d0694c803
Unapplied parent: 6f9fe1f2bee93beec08a739fb7e96bc4bd359da5

New changelog entries:
  * d/rules: Fix typo in previous upload.

Author: Ryan Tandy
Author Date: 2016-04-15 03:55:33 UTC

Import patches-applied version 2.4.31-2+deb7u2 to applied/debian/wheezy

Imported using git-ubuntu import.

Changelog parent: de658c43ec0d268d9de5f3643df126290702a534
Unapplied parent: e719f9998769d4b6c5348fb57a6274f33c026350

New changelog entries:
  * Disable the back-mdb test suite on powerpc to work around back-mdb tests
    failing on buildds running the jessie ppc64 kernel, which uses 64KB pages.
    (ITS#7713)
  * Non-maintainer upload by the Security Team.
  * Add ITS8240-remove-obsolete-assert.patch patch.
    Import upstream patch to remove an unnecessary assert(0) that could be
    triggered remotely by an unauthenticated user by sending a malformed BER
    element. (CVE-2015-6908, Closes: #798622)

Author: Ryan Tandy
Author Date: 2016-04-15 03:55:33 UTC

Import patches-unapplied version 2.4.31-2+deb7u2 to debian/wheezy

Imported using git-ubuntu import.

Changelog parent: efa5b35fcbe4ccd9e8b283f6196e1332338d97ef

New changelog entries:
  * Disable the back-mdb test suite on powerpc to work around back-mdb tests
    failing on buildds running the jessie ppc64 kernel, which uses 64KB pages.
    (ITS#7713)
  * Non-maintainer upload by the Security Team.
  * Add ITS8240-remove-obsolete-assert.patch patch.
    Import upstream patch to remove an unnecessary assert(0) that could be
    triggered remotely by an unauthenticated user by sending a malformed BER
    element. (CVE-2015-6908, Closes: #798622)

Author: Maciej Puzio
Author Date: 2016-03-23 18:42:50 UTC

Import patches-applied version 2.4.41+dfsg-1ubuntu2.1 to applied/ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 1abf483edebea45770bcfac4bdf9fed899522514
Unapplied parent: 9be64fe41cfe462301b8533cb639f8c196e59029

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-23 18:42:50 UTC

Import patches-applied version 2.4.41+dfsg-1ubuntu2.1 to applied/ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 1abf483edebea45770bcfac4bdf9fed899522514
Unapplied parent: 9be64fe41cfe462301b8533cb639f8c196e59029

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-23 18:42:50 UTC

Import patches-applied version 2.4.41+dfsg-1ubuntu2.1 to applied/ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 1abf483edebea45770bcfac4bdf9fed899522514
Unapplied parent: 9be64fe41cfe462301b8533cb639f8c196e59029

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-23 18:42:50 UTC

Import patches-unapplied version 2.4.41+dfsg-1ubuntu2.1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 5013f50b4d2865870342281996eebfda9902c8c5

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-23 18:42:50 UTC

Import patches-unapplied version 2.4.41+dfsg-1ubuntu2.1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 5013f50b4d2865870342281996eebfda9902c8c5

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-23 18:42:50 UTC

Import patches-unapplied version 2.4.41+dfsg-1ubuntu2.1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 5013f50b4d2865870342281996eebfda9902c8c5

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-25 20:24:25 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu4 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 3ba861939cd93d1e7869b264e5e3f5845b91816e
Unapplied parent: a6f4d9e73bde6084bfa02c59d200d3ee002a96e1

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-25 20:24:25 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu4 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 3ba861939cd93d1e7869b264e5e3f5845b91816e
Unapplied parent: a6f4d9e73bde6084bfa02c59d200d3ee002a96e1

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-25 20:24:25 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu4 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 55194bb3ef19395a6b1ee16a75f84674f335a9de

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Maciej Puzio
Author Date: 2016-03-25 20:24:25 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu4 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 55194bb3ef19395a6b1ee16a75f84674f335a9de

New changelog entries:
  * Fix use after free with GnuTLS. (LP: #1557248)

Author: Matthias Klose
Author Date: 2016-02-18 08:17:27 UTC

Import patches-applied version 2.4.42+dfsg-2ubuntu3 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 4e300cfcfc762137faf51d578ebd1e086e6e301a
Unapplied parent: a43a9bd3c1b8657a4fcdc011f9290861107b03cd

New changelog entries:
  * Fix building with gssapi suppport:
    - Explicitly add -I/usr/include/heimdal to CFLAGS.
    - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.

Author: Matthias Klose
Author Date: 2016-02-18 08:17:27 UTC

Import patches-unapplied version 2.4.42+dfsg-2ubuntu3 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 20346ec8bd76c2a6881c3ee816f15454339dd6dc

New changelog entries:
  * Fix building with gssapi suppport:
    - Explicitly add -I/usr/include/heimdal to CFLAGS.
    - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.