Accepting request 151849 from network:ldap

update to 1.9.4 (bnc#801036)

OBS-URL: https://build.opensuse.org/request/show/151849
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=41

sssd-1.9.3.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:123aa0bd6c2c7276f04f3c4dd7681f0d08cd0c186fd61288bb454c7e2840d4ad
-size 1252232

sssd-1.9.4.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:269fdac3b77a03f7f3eaffde50461086bd79515f7c94376930d36f6c72d89375
+size 1337380

sssd-ldflags.diff

@@ -16,11 +16,11 @@ to two program which need them.
  Makefile.am |   36 +++++++++++++++++++++---------------
  1 file changed, 21 insertions(+), 15 deletions(-)
 
-Index: sssd-1.9.3/Makefile.am
+Index: sssd-1.9.4/Makefile.am
 ===================================================================
---- sssd-1.9.3.orig/Makefile.am
+--- sssd-1.9.4.orig/Makefile.am
-+++ sssd-1.9.3/Makefile.am
++++ sssd-1.9.4/Makefile.am
-@@ -531,7 +531,8 @@ libipa_hbac_la_SOURCES = \
+@@ -537,7 +537,8 @@ libipa_hbac_la_SOURCES = \
      src/providers/ipa/hbac_evaluator.c \
      src/util/sss_utf8.c
  libipa_hbac_la_LDFLAGS = \
@@ -30,7 +30,7 @@ Index: sssd-1.9.3/Makefile.am
      $(UNICODE_LIBS)
  
  dist_pkgconfig_DATA += src/lib/idmap/sss_idmap.pc
-@@ -645,11 +646,11 @@ sssd_be_LDADD = \
+@@ -651,11 +652,11 @@ sssd_be_LDADD = \
      -ldl \
      $(SSSD_LIBS) \
      $(CARES_LIBS) \
@@ -44,7 +44,7 @@ Index: sssd-1.9.3/Makefile.am
  
  if BUILD_PYTHON_BINDINGS
  sss_obfuscate_pythondir = $(sbindir)
-@@ -750,7 +751,7 @@ sss_sudo_cli_SOURCES = \
+@@ -771,7 +772,7 @@ sss_sudo_cli_SOURCES = \
      src/sss_client/sudo/sss_sudo_response.c \
      src/sss_client/sudo_testcli/sudo_testcli.c
  sss_sudo_cli_CFLAGS = $(AM_CFLAGS)
@@ -53,7 +53,7 @@ Index: sssd-1.9.3/Makefile.am
  endif
  
  if BUILD_SSH
-@@ -760,8 +761,8 @@ sss_ssh_authorizedkeys_SOURCES = \
+@@ -781,8 +782,8 @@ sss_ssh_authorizedkeys_SOURCES = \
      src/sss_client/ssh/sss_ssh_authorizedkeys.c
  sss_ssh_authorizedkeys_CFLAGS = $(AM_CFLAGS)
  sss_ssh_authorizedkeys_LDADD = \
@@ -63,7 +63,7 @@ Index: sssd-1.9.3/Makefile.am
  
  sss_ssh_knownhostsproxy_SOURCES = \
      src/sss_client/common.c \
-@@ -769,8 +770,8 @@ sss_ssh_knownhostsproxy_SOURCES = \
+@@ -790,8 +791,8 @@ sss_ssh_knownhostsproxy_SOURCES = \
      src/sss_client/ssh/sss_ssh_knownhostsproxy.c
  sss_ssh_knownhostsproxy_CFLAGS = $(AM_CFLAGS)
  sss_ssh_knownhostsproxy_LDADD = \
@@ -73,7 +73,7 @@ Index: sssd-1.9.3/Makefile.am
  endif
  
  #################
-@@ -1127,14 +1128,14 @@ noinst_PROGRAMS += autofs_test_client
+@@ -1149,14 +1150,14 @@ noinst_PROGRAMS += autofs_test_client
  endif
  
  pam_test_client_SOURCES = src/sss_client/pam_test_client.c
@@ -90,7 +90,7 @@ Index: sssd-1.9.3/Makefile.am
  endif
  
  ####################
-@@ -1156,10 +1157,11 @@ libnss_sss_la_SOURCES = \
+@@ -1178,10 +1179,11 @@ libnss_sss_la_SOURCES = \
      src/sss_client/nss_mc_group.c \
      src/sss_client/nss_mc.h
  libnss_sss_la_LDFLAGS = \
@@ -103,7 +103,7 @@ Index: sssd-1.9.3/Makefile.am
  
  pamlib_LTLIBRARIES = pam_sss.la
  pam_sss_la_SOURCES = \
-@@ -1170,11 +1172,12 @@ pam_sss_la_SOURCES = \
+@@ -1192,11 +1194,12 @@ pam_sss_la_SOURCES = \
      src/sss_client/sss_pam_macros.h
  
  pam_sss_la_LDFLAGS = \
@@ -118,7 +118,7 @@ Index: sssd-1.9.3/Makefile.am
  
  if BUILD_SUDO
  
-@@ -1185,8 +1188,9 @@ libsss_sudo_la_SOURCES = \
+@@ -1207,8 +1210,9 @@ libsss_sudo_la_SOURCES = \
      src/sss_client/sudo/sss_sudo.c \
      src/sss_client/sudo/sss_sudo.h \
      src/sss_client/sudo/sss_sudo_private.h
@@ -129,7 +129,7 @@ Index: sssd-1.9.3/Makefile.am
      -Wl,--version-script,$(srcdir)/src/sss_client/sss_sudo.exports \
      -module \
      -avoid-version
-@@ -1206,10 +1210,11 @@ libsss_autofs_la_SOURCES = \
+@@ -1228,10 +1232,11 @@ libsss_autofs_la_SOURCES = \
      src/sss_client/autofs/sss_autofs_private.h
  
  libsss_autofs_la_LDFLAGS = \
@@ -142,7 +142,7 @@ Index: sssd-1.9.3/Makefile.am
  endif
  
  dist_noinst_DATA += \
-@@ -1528,10 +1533,11 @@ sssd_pac_plugin_la_CFLAGS = \
+@@ -1550,10 +1555,11 @@ sssd_pac_plugin_la_CFLAGS = \
      $(AM_CFLAGS) \
      $(KRB5_CFLAGS)
  sssd_pac_plugin_la_LDFLAGS = \

sssd.changes

@@ -1,3 +1,27 @@
+-------------------------------------------------------------------
+Thu Jan 31 16:34:47 UTC 2013 - rhafer@suse.com
+
+- update to 1.9.4 (bnc#801036):
+  * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race
+    conditions when creating or removing home directories for users
+    in local domain
+  * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds
+    reads in autofs and ssh responder
+  * The sssd_pam responder processes pending requests after
+    reconnect
+  * A serious memory leak in the NSS responder was fixed
+  * Requests that were processing group entries with DNs pointing
+    out of any configured search bases were not terminated
+    correctly, causing long timeouts
+  * Kerberos tickets are correctly renewed even after SSSD daemon
+    restart
+  * Multiple fixes related to SUDO integration, in particular
+    fixing functionality when the sssd back end process was
+    changing its online/offline status
+  * The pwd_exp_warning option was fixed to function as documented
+    in the manual page
+- refreshed sssd-ldflags.diff to apply cleanly
+
 -------------------------------------------------------------------
 Mon Dec 10 09:55:35 UTC 2012 - rhafer@suse.com
 

sssd.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package sssd
 #
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           sssd
-Version:        1.9.3
+Version:        1.9.4
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0+ and LGPL-3.0+