projects / openldap.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: a1459c6 ff30bd9)
openldap (2.4.47+dfsg-3+deb10u1) buster; urgency=medium
authorRyan Tandy <ryan@nardis.ca>
Sat, 10 Aug 2019 18:58:18 +0000 (19:58 +0100)
committerRyan Tandy <ryan@nardis.ca>
Sat, 10 Aug 2019 18:58:18 +0000 (19:58 +0100)
commit575c20638c33c8686e9d6ef975b0ec5867dee021
treedf619efe7e89af37cbd5c6a893f969ebcff69ce0tree | snapshot
parenta1459c6cf9555642855ce6cf657ad07e24b886c9commit | diff
parentff30bd94a195d9f082f3a9a52631ce94ebbf31bdcommit | diff
openldap (2.4.47+dfsg-3+deb10u1) buster; urgency=medium

  * Fix slapd to restrict rootDN proxyauthz to its own databases
    (CVE-2019-13057) (ITS#9038) (Closes: #932997)
  * Fix slapd to enforce sasl_ssf ACL statement on every connection
    (CVE-2019-13565) (ITS#9052) (Closes: #932998)
  * Fix slapo-rwm to not free original filter when rewritten filter is invalid
    (ITS#8964) (Closes: #934277, LP: #1838370)

[dgit import unpatched openldap 2.4.47+dfsg-3+deb10u1]
125 files changed:
debian/DB_CONFIG | | blob
debian/README.DB_CONFIG | | blob
debian/TODO | | blob
debian/USE-CASES | | blob
debian/changelog | | blob
debian/clean | | blob
debian/compat | | blob
debian/configure.options | | blob
debian/control | | blob
debian/copyright | | blob
debian/dh_installscripts-common | | blob
debian/ldap-utils.README.Debian | | blob
debian/ldap-utils.dirs | | blob
debian/ldap-utils.install | | blob
debian/ldap-utils.manpages | | blob
debian/ldiftopasswd | | blob
debian/libldap-2.4-2.README.Debian | | blob
debian/libldap-2.4-2.install | | blob
debian/libldap-2.4-2.links.in | | blob
debian/libldap-2.4-2.lintian-overrides | | blob
debian/libldap-2.4-2.shlibs | | blob
debian/libldap-2.4-2.symbols | | blob
debian/libldap-common.install | | blob
debian/libldap-common.manpages | | blob
debian/libldap2-dev.dirs | | blob
debian/libldap2-dev.install | | blob
debian/libldap2-dev.links.in | | blob
debian/libldap2-dev.manpages | | blob
debian/patches/ITS-8964-Do-not-free-original-filter.patch | | blob
debian/patches/ITS-9038-Another-test028-typo.patch | | blob
debian/patches/ITS-9038-Fix-typo-in-test-script.patch | | blob
debian/patches/ITS-9038-Update-test028-to-test-this-is-enforced.patch | | blob
debian/patches/ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch | | blob
debian/patches/ITS-9052-zero-out-sasl_ssf-in-connection_init.patch | | blob
debian/patches/ITS6035-olcauthzregex-needs-restart.patch | | blob
debian/patches/add-tlscacert-option-to-ldap-conf | | blob
debian/patches/contrib-makefiles | | blob
debian/patches/do-not-second-guess-sonames | | blob
debian/patches/evolution-ntlm | | blob
debian/patches/fix-build-top-mk | | blob
debian/patches/getaddrinfo-is-threadsafe | | blob
debian/patches/index-files-created-as-root | | blob
debian/patches/lastbind-makefile-manpage | | blob
debian/patches/ldap-conf-tls-cacertdir | | blob
debian/patches/ldapi-socket-place | | blob
debian/patches/libldap-symbol-versions | | blob
debian/patches/man-slapd | | blob
debian/patches/no-AM_INIT_AUTOMAKE | | blob
debian/patches/no-bdb-ABI-second-guessing | | blob
debian/patches/no-gnutls_global_set_mutex | | blob
debian/patches/sasl-default-path | | blob
debian/patches/series | | blob
debian/patches/set-maintainer-name | | blob
debian/patches/slapi-errorlog-file | | blob
debian/patches/smbk5pwd-makefile-manpage | | blob
debian/patches/switch-to-lt_dlopenadvise-to-get-RTLD_GLOBAL-set.diff | | blob
debian/patches/wrong-database-location | | blob
debian/po/POTFILES.in | | blob
debian/po/ca.po | | blob
debian/po/cs.po | | blob
debian/po/da.po | | blob
debian/po/de.po | | blob
debian/po/es.po | | blob
debian/po/eu.po | | blob
debian/po/fi.po | | blob
debian/po/fr.po | | blob
debian/po/gl.po | | blob
debian/po/it.po | | blob
debian/po/ja.po | | blob
debian/po/nl.po | | blob
debian/po/pt.po | | blob
debian/po/pt_BR.po | | blob
debian/po/ru.po | | blob
debian/po/sk.po | | blob
debian/po/sv.po | | blob
debian/po/templates.pot | | blob
debian/po/tr.po | | blob
debian/po/vi.po | | blob
debian/rules | | blob
debian/schema/README | | blob
debian/schema/collective.schema | | blob
debian/schema/compare-schema | | blob
debian/schema/corba.schema | | blob
debian/schema/core.ldif | | blob
debian/schema/core.schema | | blob
debian/schema/cosine.schema | | blob
debian/schema/duaconf.schema | | blob
debian/schema/inetorgperson.schema | | blob
debian/schema/java.schema | | blob
debian/schema/pmi.schema | | blob
debian/schema/ppolicy.schema | | blob
debian/slapd-contrib.examples | | blob
debian/slapd-contrib.install | | blob
debian/slapd-contrib.lintian-overrides | | blob
debian/slapd-contrib.manpages | | blob
debian/slapd.NEWS | | blob
debian/slapd.README.Debian | | blob
debian/slapd.backup | | blob
debian/slapd.conf | | blob
debian/slapd.config | | blob
debian/slapd.default | | blob
debian/slapd.dirs | | blob
debian/slapd.docs | | blob
debian/slapd.examples | | blob
debian/slapd.init | | blob
debian/slapd.init.ldif | | blob
debian/slapd.install | | blob
debian/slapd.links | | blob
debian/slapd.lintian-overrides | | blob
debian/slapd.manpages | | blob
debian/slapd.postinst | | blob
debian/slapd.postrm | | blob
debian/slapd.preinst | | blob
debian/slapd.prerm | | blob
debian/slapd.scripts-common | | blob
debian/slapd.templates | | blob
debian/slapi-dev.install | | blob
debian/slapo-pw-pbkdf2.5 | | blob
debian/source.lintian-overrides | | blob
debian/source/format | | blob
debian/tests/check_upgradepath | | blob
debian/tests/create_account | | blob
debian/tests/find_unused_functions | | blob
debian/tests/hammer_slapd | | blob
debian/watch | | blob
Unnamed repository; edit this file 'description' to name the repository.