From 4b29847f3a84112195e731b06d2da3770036664df26e849d4bd861712c9a1229 Mon Sep 17 00:00:00 2001 From: Stephan Kulow Date: Fri, 8 Feb 2013 06:18:02 +0000 Subject: [PATCH] Accepting request 151849 from network:ldap update to 1.9.4 (bnc#801036) OBS-URL: https://build.opensuse.org/request/show/151849 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=41 --- sssd-1.9.3.tar.xz | 3 --- sssd-1.9.4.tar.xz | 3 +++ sssd-ldflags.diff | 28 ++++++++++++++-------------- sssd.changes | 24 ++++++++++++++++++++++++ sssd.spec | 4 ++-- 5 files changed, 43 insertions(+), 19 deletions(-) delete mode 100644 sssd-1.9.3.tar.xz create mode 100644 sssd-1.9.4.tar.xz diff --git a/sssd-1.9.3.tar.xz b/sssd-1.9.3.tar.xz deleted file mode 100644 index facfca1..0000000 --- a/sssd-1.9.3.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:123aa0bd6c2c7276f04f3c4dd7681f0d08cd0c186fd61288bb454c7e2840d4ad -size 1252232 diff --git a/sssd-1.9.4.tar.xz b/sssd-1.9.4.tar.xz new file mode 100644 index 0000000..68b367c --- /dev/null +++ b/sssd-1.9.4.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:269fdac3b77a03f7f3eaffde50461086bd79515f7c94376930d36f6c72d89375 +size 1337380 diff --git a/sssd-ldflags.diff b/sssd-ldflags.diff index da7a141..4ac562c 100644 --- a/sssd-ldflags.diff +++ b/sssd-ldflags.diff @@ -16,11 +16,11 @@ to two program which need them. Makefile.am | 36 +++++++++++++++++++++--------------- 1 file changed, 21 insertions(+), 15 deletions(-) -Index: sssd-1.9.3/Makefile.am +Index: sssd-1.9.4/Makefile.am =================================================================== ---- sssd-1.9.3.orig/Makefile.am -+++ sssd-1.9.3/Makefile.am -@@ -531,7 +531,8 @@ libipa_hbac_la_SOURCES = \ +--- sssd-1.9.4.orig/Makefile.am ++++ sssd-1.9.4/Makefile.am +@@ -537,7 +537,8 @@ libipa_hbac_la_SOURCES = \ src/providers/ipa/hbac_evaluator.c \ src/util/sss_utf8.c libipa_hbac_la_LDFLAGS = \ @@ -30,7 +30,7 @@ Index: sssd-1.9.3/Makefile.am $(UNICODE_LIBS) dist_pkgconfig_DATA += src/lib/idmap/sss_idmap.pc -@@ -645,11 +646,11 @@ sssd_be_LDADD = \ +@@ -651,11 +652,11 @@ sssd_be_LDADD = \ -ldl \ $(SSSD_LIBS) \ $(CARES_LIBS) \ @@ -44,7 +44,7 @@ Index: sssd-1.9.3/Makefile.am if BUILD_PYTHON_BINDINGS sss_obfuscate_pythondir = $(sbindir) -@@ -750,7 +751,7 @@ sss_sudo_cli_SOURCES = \ +@@ -771,7 +772,7 @@ sss_sudo_cli_SOURCES = \ src/sss_client/sudo/sss_sudo_response.c \ src/sss_client/sudo_testcli/sudo_testcli.c sss_sudo_cli_CFLAGS = $(AM_CFLAGS) @@ -53,7 +53,7 @@ Index: sssd-1.9.3/Makefile.am endif if BUILD_SSH -@@ -760,8 +761,8 @@ sss_ssh_authorizedkeys_SOURCES = \ +@@ -781,8 +782,8 @@ sss_ssh_authorizedkeys_SOURCES = \ src/sss_client/ssh/sss_ssh_authorizedkeys.c sss_ssh_authorizedkeys_CFLAGS = $(AM_CFLAGS) sss_ssh_authorizedkeys_LDADD = \ @@ -63,7 +63,7 @@ Index: sssd-1.9.3/Makefile.am sss_ssh_knownhostsproxy_SOURCES = \ src/sss_client/common.c \ -@@ -769,8 +770,8 @@ sss_ssh_knownhostsproxy_SOURCES = \ +@@ -790,8 +791,8 @@ sss_ssh_knownhostsproxy_SOURCES = \ src/sss_client/ssh/sss_ssh_knownhostsproxy.c sss_ssh_knownhostsproxy_CFLAGS = $(AM_CFLAGS) sss_ssh_knownhostsproxy_LDADD = \ @@ -73,7 +73,7 @@ Index: sssd-1.9.3/Makefile.am endif ################# -@@ -1127,14 +1128,14 @@ noinst_PROGRAMS += autofs_test_client +@@ -1149,14 +1150,14 @@ noinst_PROGRAMS += autofs_test_client endif pam_test_client_SOURCES = src/sss_client/pam_test_client.c @@ -90,7 +90,7 @@ Index: sssd-1.9.3/Makefile.am endif #################### -@@ -1156,10 +1157,11 @@ libnss_sss_la_SOURCES = \ +@@ -1178,10 +1179,11 @@ libnss_sss_la_SOURCES = \ src/sss_client/nss_mc_group.c \ src/sss_client/nss_mc.h libnss_sss_la_LDFLAGS = \ @@ -103,7 +103,7 @@ Index: sssd-1.9.3/Makefile.am pamlib_LTLIBRARIES = pam_sss.la pam_sss_la_SOURCES = \ -@@ -1170,11 +1172,12 @@ pam_sss_la_SOURCES = \ +@@ -1192,11 +1194,12 @@ pam_sss_la_SOURCES = \ src/sss_client/sss_pam_macros.h pam_sss_la_LDFLAGS = \ @@ -118,7 +118,7 @@ Index: sssd-1.9.3/Makefile.am if BUILD_SUDO -@@ -1185,8 +1188,9 @@ libsss_sudo_la_SOURCES = \ +@@ -1207,8 +1210,9 @@ libsss_sudo_la_SOURCES = \ src/sss_client/sudo/sss_sudo.c \ src/sss_client/sudo/sss_sudo.h \ src/sss_client/sudo/sss_sudo_private.h @@ -129,7 +129,7 @@ Index: sssd-1.9.3/Makefile.am -Wl,--version-script,$(srcdir)/src/sss_client/sss_sudo.exports \ -module \ -avoid-version -@@ -1206,10 +1210,11 @@ libsss_autofs_la_SOURCES = \ +@@ -1228,10 +1232,11 @@ libsss_autofs_la_SOURCES = \ src/sss_client/autofs/sss_autofs_private.h libsss_autofs_la_LDFLAGS = \ @@ -142,7 +142,7 @@ Index: sssd-1.9.3/Makefile.am endif dist_noinst_DATA += \ -@@ -1528,10 +1533,11 @@ sssd_pac_plugin_la_CFLAGS = \ +@@ -1550,10 +1555,11 @@ sssd_pac_plugin_la_CFLAGS = \ $(AM_CFLAGS) \ $(KRB5_CFLAGS) sssd_pac_plugin_la_LDFLAGS = \ diff --git a/sssd.changes b/sssd.changes index 184d8f6..38e8f0c 100644 --- a/sssd.changes +++ b/sssd.changes @@ -1,3 +1,27 @@ +------------------------------------------------------------------- +Thu Jan 31 16:34:47 UTC 2013 - rhafer@suse.com + +- update to 1.9.4 (bnc#801036): + * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race + conditions when creating or removing home directories for users + in local domain + * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds + reads in autofs and ssh responder + * The sssd_pam responder processes pending requests after + reconnect + * A serious memory leak in the NSS responder was fixed + * Requests that were processing group entries with DNs pointing + out of any configured search bases were not terminated + correctly, causing long timeouts + * Kerberos tickets are correctly renewed even after SSSD daemon + restart + * Multiple fixes related to SUDO integration, in particular + fixing functionality when the sssd back end process was + changing its online/offline status + * The pwd_exp_warning option was fixed to function as documented + in the manual page +- refreshed sssd-ldflags.diff to apply cleanly + ------------------------------------------------------------------- Mon Dec 10 09:55:35 UTC 2012 - rhafer@suse.com diff --git a/sssd.spec b/sssd.spec index 41b19e8..32f4533 100644 --- a/sssd.spec +++ b/sssd.spec @@ -1,7 +1,7 @@ # # spec file for package sssd # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: sssd -Version: 1.9.3 +Version: 1.9.4 Release: 0 Summary: System Security Services Daemon License: GPL-3.0+ and LGPL-3.0+