Format: 1.8 Date: Wed, 31 Jul 2019 18:01:14 -0300 Source: openldap Binary: ldap-utils libldap-2.4-2 libldap2-dev slapd slapd-contrib slapi-dev Architecture: armhf armhf_translations Version: 2.4.48+dfsg-1ubuntu1 Distribution: eoan-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Andreas Hasenack Description: ldap-utils - OpenLDAP utilities libldap-2.4-2 - OpenLDAP libraries libldap2-dev - OpenLDAP development libraries slapd - OpenLDAP server (slapd) slapd-contrib - contributed plugins for OpenLDAP slapd slapi-dev - development libraries for OpenLDAP SLAPI plugin interface Changes: openldap (2.4.48+dfsg-1ubuntu1) eoan; urgency=medium . * Merge with Debian unstable. Remaining changes: - Enable AppArmor support: - d/apparmor-profile: add AppArmor profile - d/rules: use dh_apparmor - d/control: Build-Depends on dh-apparmor - d/slapd.README.Debian: add note about AppArmor - Enable GSSAPI support: - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise): - Add --with-gssapi support - Make guess_service_principal() more robust when determining principal - d/configure.options: Configure with --with-gssapi - d/control: Added heimdal-dev as a build depend - d/rules: - Explicitly add -I/usr/include/heimdal to CFLAGS. - Explicitly add -I/usr/lib//heimdal to LDFLAGS. - Enable ufw support: - d/control: suggest ufw. - d/rules: install ufw profile. - d/slapd.ufw.profile: add ufw profile. - Enable nss overlay: - d/rules: - add nssov to CONTRIB_MODULES - add sysconfdir to CONTRIB_MAKEVARS - d/slapd.install: - install nssov overlay - d/slapd.manpages: - install slapo-nssov(5) man page - d/{rules,slapd.py}: Add apport hook. - d/slapd.init.ldif: don't set olcRootDN since it's not defined in either the default DIT nor via an Authn mapping. - d/slapd.scripts-common: - add slapcat_opts to local variables. - Fix backup directory naming for multiple reconfiguration. - d/{slapd.default,slapd.README.Debian}: use the new configuration style. - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support in the openldap library, as required by Likewise-Open - Show distribution in version: - d/control: added lsb-release - d/patches/fix-ldap-distribution.patch: show distribution in version - d/libldap-2.4-2.symbols: Add symbols not present in Debian. - CLDAP (UDP) was added in 2.4.17-1ubuntu2 - GSSAPI support was enabled in 2.4.18-0ubuntu2 - d/p/contrib-makefiles: given the change in 2.4.47+dfsg-3 regarding Debian bug #919136, we also have to patch the nssov makefile accordingly and thus update this patch. * Dropped: - Fix sysv-generator unit file by customizing parameters (LP #1821343) + d/slapd-remain-after-exit.conf: Override RemainAfterExit to allow correct systemctl status for slapd daemon. + d/slapd.install: place override file in correct location. [Included in 2.4.48+dfsg-1] - SECURITY UPDATE: rootDN proxyauthz not restricted to its own databases + debian/patches/CVE-2019-13057-1.patch: add restriction to servers/slapd/saslauthz.c. + debian/patches/CVE-2019-13057-2.patch: add tests to tests/data/idassert.out, tests/data/slapd-idassert.conf, tests/data/test-idassert1.ldif, tests/scripts/test028-idassert. + debian/patches/CVE-2019-13057-3.patch: fix typo in tests/scripts/test028-idassert. + debian/patches/CVE-2019-13057-4.patch: fix typo in tests/scripts/test028-idassert. + CVE-2019-13057 [Fixed upstream] - SECURITY UPDATE: SASL SSF not initialized per connection + debian/patches/CVE-2019-13565.patch: zero out sasl_ssf in connection_init in servers/slapd/connection.c. + CVE-2019-13565 [Fixed upstream] Checksums-Sha1: 4a9f010739685696826d3dd5a5bb4972461632e4 544420 ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb f96f0cf342f12050605fd992061f957d5dba3e2f 110976 ldap-utils_2.4.48+dfsg-1ubuntu1_armhf.deb de7ce0323aee1f2550e7fa2e7bddd4dd0bbacd8c 529804 libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb fb8903f08360bca3666ad87aaf3f04f34a545021 133164 libldap-2.4-2_2.4.48+dfsg-1ubuntu1_armhf.deb 9cb093eab92aebd0b0ca2261a32b9aaae44b5956 243740 libldap2-dev_2.4.48+dfsg-1ubuntu1_armhf.deb aef53cd7ced2955c8aecc48384c8bb25e1af4cb9 10222 openldap_2.4.48+dfsg-1ubuntu1_armhf.buildinfo 4e6b23c700c270ffc82fe1b0f79d6cf89d90bc92 63065 openldap_2.4.48+dfsg-1ubuntu1_armhf_translations.tar.gz 82a44910c32044a5c369fb98fecf7b2b67f4516d 62460 slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb 27ba54fd798ba333fe24762363a6d7ea78032e7d 22928 slapd-contrib_2.4.48+dfsg-1ubuntu1_armhf.deb 53b355a9ae8922aaffbc72555c059fa4efad7eba 7131392 slapd-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb 32d0efca400663b25ddf01e3f4443bbcc59ab391 1307160 slapd_2.4.48+dfsg-1ubuntu1_armhf.deb 4f5578e8c2838ef2687767bd47b1760b124e767d 14624 slapi-dev_2.4.48+dfsg-1ubuntu1_armhf.deb Checksums-Sha256: 7dbb2ab83d4a45a64cb34a4f7289f2c3d262869c4702e414133c81af5de98b0c 544420 ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb dfd818a8d2d25e0dedcbb0d2a5246594b25e0a0bce3beb23099b0d8a153fc8a5 110976 ldap-utils_2.4.48+dfsg-1ubuntu1_armhf.deb f89cad83a47fe21bb3e00909c03b36899bef59db7691e4cd0170ea0b8ee990fc 529804 libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb ed05a1054a2bab04af350427879825182a22cc36ab3fd5ef0a03fb33ffe196e4 133164 libldap-2.4-2_2.4.48+dfsg-1ubuntu1_armhf.deb 2ddc5deae5e06a1dcf656c554287b2d76f56392080ede06414a37afe8c36097d 243740 libldap2-dev_2.4.48+dfsg-1ubuntu1_armhf.deb 3ab6c477e3f1fb5d3ce323d66a56ea768621bb5cbd15afba2ca42929b45a20f5 10222 openldap_2.4.48+dfsg-1ubuntu1_armhf.buildinfo f44999d9b68bff9024a40450a4fed814a524df4de8592fa315c0c30ee5a4c613 63065 openldap_2.4.48+dfsg-1ubuntu1_armhf_translations.tar.gz b965c066529b688b292730aebc95d27ff0ea64ef87bd4bc2f870901228e4afc1 62460 slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb 61ed92368a45dca865d62560c63f18c488a043835a4e36fc069e00b7cfcef95d 22928 slapd-contrib_2.4.48+dfsg-1ubuntu1_armhf.deb 6d7fda8c6104007cc411ba30f18a9d26ed663b10cf4ab9d9e0bcc6326832497f 7131392 slapd-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb bc173310ccabb47976dc54e9f3991e53b3fe5fabb77ecd95b3dc36203e65b7b1 1307160 slapd_2.4.48+dfsg-1ubuntu1_armhf.deb ca353ec62ee849893000e1cbd398c8c108a66851b91a5fdba634a0adaf3d30b5 14624 slapi-dev_2.4.48+dfsg-1ubuntu1_armhf.deb Files: b6667a3ab9b50f59250ae5ad63f1b2f7 544420 debug optional ldap-utils-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb 6dfb993a86865f962ff47c8bcda2d129 110976 net optional ldap-utils_2.4.48+dfsg-1ubuntu1_armhf.deb 56191e36443dfe6a633722fc1bd410ee 529804 debug optional libldap-2.4-2-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb cb0f16586153c22800b690ad334f8567 133164 libs optional libldap-2.4-2_2.4.48+dfsg-1ubuntu1_armhf.deb e34e78bb31668b5fec593a124f313b88 243740 libdevel optional libldap2-dev_2.4.48+dfsg-1ubuntu1_armhf.deb 1084176f2abe0f756ce79f3ab52c5117 10222 net optional openldap_2.4.48+dfsg-1ubuntu1_armhf.buildinfo 4a10881f55687000b4a1350c8aea03ef 63065 raw-translations - openldap_2.4.48+dfsg-1ubuntu1_armhf_translations.tar.gz 4ef6516edc942ebd46487cd9586bee6f 62460 debug optional slapd-contrib-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb 8f1f9da2278afae54af4b848ceb7416c 22928 net optional slapd-contrib_2.4.48+dfsg-1ubuntu1_armhf.deb 4b3b4ce4b015156745b542aba59cf884 7131392 debug optional slapd-dbgsym_2.4.48+dfsg-1ubuntu1_armhf.ddeb 74f7a7f3ff508e6f4f7cbf65e8a3a2a1 1307160 net optional slapd_2.4.48+dfsg-1ubuntu1_armhf.deb e9d9f4b7c2c3302d63165c33d4a57c62 14624 libdevel optional slapi-dev_2.4.48+dfsg-1ubuntu1_armhf.deb Original-Maintainer: Debian OpenLDAP Maintainers