Commit Graph

200 Commits

Author SHA256 Message Date
Michael Ströder
447aef3759 Accepting request 768939 from home:stroeder:branches:network:ldap
updated to 2.4.49

OBS-URL: https://build.opensuse.org/request/show/768939
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=256
2020-01-31 10:56:52 +00:00
Michael Ströder
fd6933af62 Accepting request 762856 from home:stroeder:branches:network:ldap
- added back-port patch
  0013_openldap-its9124_fix_crash_with_cancel_exop.patch
  to fix OpenLDAP ITS#9124

OBS-URL: https://build.opensuse.org/request/show/762856
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=254
2020-01-10 14:50:39 +00:00
Michael Ströder
f161b5a476 Accepting request 758863 from home:stroeder:branches:network:ldap
- use BuildRequires:  pkgconfig(krb5) instead of krb5-devel-mini

OBS-URL: https://build.opensuse.org/request/show/758863
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=252
2020-01-01 17:19:14 +00:00
Dominique Leuenberger
528152a73b Accepting request 720498 from home:marxin:static
Use FAT LTO objects in order to provide proper static library.

OBS-URL: https://build.opensuse.org/request/show/720498
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=250
2019-08-13 08:20:19 +00:00
Michael Ströder
d40995658b Accepting request 718551 from home:stroeder:branches:network:ldap
removal of SuSEfirewall2 service

OBS-URL: https://build.opensuse.org/request/show/718551
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=248
2019-07-25 12:57:50 +00:00
Michael Ströder
d549f863e2 Accepting request 718342 from home:stroeder:branches:network:ldap
- Update to upstream release 2.4.48 with security fixes:
  * CVE-2019-13057 (ITS#9038):
    rootdn of any db can assert any identity
  * CVE-2019-13565 (ITS#9052):
    Unauthorized access caused by incorrect handling of SASL SSF values
- Fix CVE-2017-17740 by disabling nops overlay not maintained by upstream
  (see also bsc#1073313, comment #36)
- Removed obsolete patches:
  * 0002-openldap-its8727-plug-ber-leaks.patch
  * 0017-Fix-segfault-in-nops.patch

Note that I disabled slapo-nops instead of rebasing 0017-Fix-segfault-in-nops.patch which is somewhat debatable. You can take it or leave it.

OBS-URL: https://build.opensuse.org/request/show/718342
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=247
2019-07-25 12:39:20 +00:00
Michael Ströder
d5a3162b1f Accepting request 702733 from home:firstyear:branches:network:ldap
- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.

OBS-URL: https://build.opensuse.org/request/show/702733
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=245
2019-05-14 04:53:20 +00:00
Michael Ströder
25c5cc719b OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=243 2019-03-10 11:48:41 +00:00
Michael Ströder
7268f02881 OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=241 2019-03-10 11:46:15 +00:00
5a150e84ac Accepting request 662829 from home:stroeder:branches:network:ldap
added back-ported fix for OpenLDAP ITS#8727

OBS-URL: https://build.opensuse.org/request/show/662829
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=238
2019-02-06 09:16:52 +00:00
Michael Ströder
55d82b1c0a Accepting request 660237 from home:stroeder:branches:network:ldap
Update to upstream release 2.4.47 (successfully tested on Tumbleweed x86_84)

OBS-URL: https://build.opensuse.org/request/show/660237
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=236
2018-12-20 11:37:17 +00:00
Michael Ströder
31984da890 Accepting request 651181 from home:jengelh:branches:network:ldap
- Replace old $RPM_* shell vars
and fix that silly build error about --no-as-needed

OBS-URL: https://build.opensuse.org/request/show/651181
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=234
2018-11-22 16:52:58 +00:00
Peter Varkoly
e604505058 - Fix CVE-2017-17740: when both the nops module and the memberof
overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)

OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=233
2018-11-21 15:17:38 +00:00
Peter Varkoly
7fcf270ced - bsc#1095816 libldap package does not contain and provide libldap anymore
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=232
2018-11-20 20:48:05 +00:00
Peter Varkoly
96719ff7e6 - bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=230
2018-11-13 13:51:09 +00:00
OBS User buildservice-autocommit
5b4f6b919a Updating link to change in openSUSE:Factory/openldap2 revision 140.0
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=da8f819c3b5e58e9bbc565a42ecb20a0
2018-11-12 14:27:31 +00:00
Peter Varkoly
995ac11ee3 - Bug 1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=225
2018-11-08 16:36:16 +00:00
Martin Pluskal
c55cbb2217 Accepting request 644919 from home:stroeder:branches:network:ldap
- Fixed broken memory handling in
  0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
  affecting error response of slapo-unique

OBS-URL: https://build.opensuse.org/request/show/644919
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=223
2018-10-26 19:46:22 +00:00
Martin Pluskal
51c184e7cb Accepting request 629739 from home:ckowalczyk:branches:network:ldap:bsc1089640
- Fix slapd segfaults in mdb_env_reader_dest
+  with patch 0016-Clear-shared-key-only-in-close-function.patch
+  (bsc#1089640)

OBS-URL: https://build.opensuse.org/request/show/629739
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=221
2018-08-17 11:01:21 +00:00
Michael Ströder
4f97013a77 OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=219 2018-06-29 16:33:56 +00:00
Michael Ströder
8f540be247 OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=216 2018-06-29 16:24:09 +00:00
Michael Ströder
31a0656177 Accepting request 618072 from home:stroeder:branches:network:ldap
Added 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch

OBS-URL: https://build.opensuse.org/request/show/618072
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=213
2018-06-24 17:58:51 +00:00
Michael Ströder
2338633266 Accepting request 611856 from home:kukuk:branches:network:ldap
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.

OBS-URL: https://build.opensuse.org/request/show/611856
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=211
2018-05-24 11:27:29 +00:00
Michael Ströder
8fa23b1e6f Accepting request 600701 from home:zkalmar:branches:network:ldap
- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.

OBS-URL: https://build.opensuse.org/request/show/600701
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=209
2018-04-25 14:46:31 +00:00
Michael Ströder
1d9e87d5de Accepting request 593976 from home:zkalmar:branches:network:ldap
- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.

OBS-URL: https://build.opensuse.org/request/show/593976
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=207
2018-04-06 12:15:51 +00:00
Michael Ströder
adcf54958c OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=205 2018-04-01 19:26:09 +00:00
Michael Ströder
7328f7b5b6 Accepting request 590763 from home:stroeder:branches:network:ldap
Upgrade to upstream 2.4.46 release

OBS-URL: https://build.opensuse.org/request/show/590763
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=204
2018-03-23 20:12:01 +00:00
Michael Ströder
1a35490c9e Accepting request 580112 from home:favogt:licensetag
Use %license (boo#1082318). Please forward to SLE, if possible

OBS-URL: https://build.opensuse.org/request/show/580112
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=202
2018-02-26 09:33:01 +00:00
Michael Ströder
dd8dd44f45 Accepting request 556315 from home:stroeder:branches:network:ldap
- added 0016-ITS-8782-fix-cancel-memleak.patch

OBS-URL: https://build.opensuse.org/request/show/556315
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=200
2017-12-11 22:59:58 +00:00
Michael Ströder
a078bd0820 Accepting request 549731 from home:stroeder:branches:network:ldap
- added 0016-ITS-8782-fix-cancel-memleak.patch

OBS-URL: https://build.opensuse.org/request/show/549731
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=199
2017-12-05 11:43:01 +00:00
Michael Ströder
e78007150a Accepting request 544643 from home:RBrownSUSE:branches:network:ldap
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544643
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=197
2017-11-23 14:51:00 +00:00
Michael Ströder
0f916505ad Accepting request 530539 from home:jengelh:branches:network:ldap
- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]

OBS-URL: https://build.opensuse.org/request/show/530539
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=195
2017-10-02 18:38:04 +00:00
Michael Ströder
21af7eb21b Accepting request 530467 from home:darix:playground
- use existing groups instead of inventing new ones

OBS-URL: https://build.opensuse.org/request/show/530467
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=194
2017-10-02 14:37:04 +00:00
Michael Ströder
f3499d3e3f Accepting request 527555 from home:stroeder:branches:network:ldap
- added 0012-ITS8051-sockdnpat.patch

OBS-URL: https://build.opensuse.org/request/show/527555
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=192
2017-09-20 13:52:32 +00:00
Michael Ströder
5e1d6e7359 Accepting request 521624 from home:stroeder:branches:network:ldap
- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch

OBS-URL: https://build.opensuse.org/request/show/521624
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=190
2017-09-06 08:08:24 +00:00
Michael Ströder
a9775cbf0c OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=186 2017-08-18 17:01:29 +00:00
Michael Ströder
cbf9f027df Accepting request 511673 from home:stroeder:branches:network:ldap
added overlay trace to package openldap2-contrib

OBS-URL: https://build.opensuse.org/request/show/511673
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=183
2017-07-20 14:49:37 +00:00
Michael Ströder
6bb69eda08 Accepting request 509862 from home:stroeder:branches:network:ldap
Postpone Jan's libldap_r symlink patch for now. Added a local patch for OpenLDAP's back-sock.

OBS-URL: https://build.opensuse.org/request/show/509862
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=182
2017-07-17 19:02:36 +00:00
16253831a4 osc copypac from project:network:ldap package:openldap2 revision:179
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=181
2017-07-04 12:00:10 +00:00
14ca9919c7 .
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=180
2017-07-04 11:59:21 +00:00
Howard Guo
90b761d030 Accepting request 506983 from home:jengelh:branches:network:ldap
- Remove all non-r libldap links so OBS has a clearer picture of
  rebuilds. [boo sr#501631]

OBS-URL: https://build.opensuse.org/request/show/506983
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=179
2017-07-04 08:52:54 +00:00
Howard Guo
39fedbb334 - Remove legacy daemon control that was used to migrate from SLE 11
to 12. (bsc#1038405)

OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=178
2017-06-07 09:33:31 +00:00
Howard Guo
3f601cf55f - There is no change made about the package itself, this is only
copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing  
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list
------------------------------------------------------------------e

OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=177
2017-06-06 13:48:11 +00:00
Michael Ströder
31fe523df6 Accepting request 500558 from home:stroeder:branches:network:ldap
update to 2.4.45

OBS-URL: https://build.opensuse.org/request/show/500558
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=176
2017-06-02 09:23:02 +00:00
Martin Pluskal
787c8bf6cf Accepting request 491547 from home:stroeder:branches:network:ldap
added overlay addpartial to package openldap2-contrib

OBS-URL: https://build.opensuse.org/request/show/491547
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=175
2017-04-29 09:21:48 +00:00
Michael Ströder
09f2c84a56 Accepting request 486529 from home:jengelh:branches:network:ldap
- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.

OBS-URL: https://build.opensuse.org/request/show/486529
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=174
2017-04-07 18:03:31 +00:00
Michael Ströder
146741f941 Accepting request 483798 from home:jengelh:branches:network:ldap
- Work around ldconfig removing files [boo#1031464]
- Do not ignore failure to create user/groups

OBS-URL: https://build.opensuse.org/request/show/483798
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=173
2017-03-30 11:33:14 +00:00
Michael Ströder
3534858d61 Accepting request 483192 from home:jengelh:branches:network:ldap
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get libldap
  inserted into their process image. [rh#1370065, boo#996551]

OBS-URL: https://build.opensuse.org/request/show/483192
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=172
2017-03-28 21:05:07 +00:00
Martin Pluskal
152e369752 Accepting request 458962 from home:kukuk:branches:network:ldap
- Remove superfluous insserv PreReq.

OBS-URL: https://build.opensuse.org/request/show/458962
OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=170
2017-02-19 10:04:39 +00:00
Howard Guo
20d52f9a9c - Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).

OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=168
2016-11-10 14:56:16 +00:00