2 Commits

Author SHA256 Message Date
07ddd8add4 Accepting request 1311258 from devel:languages:python
- Update to 3.4.5:
  * Security fixes:
    + CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in
      ldap.filter.escape_filter_chars with escape_mode=1; ensure proper
      escaping. (bsc#1251912)
    + CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in
      ldap.dn.escape_dn_chars to \00 per RFC 4514. (bsc#1251913)
  * Fixes:
    + ReconnectLDAPObject now properly reconnects on UNAVAILABLE,
      CONNECT_ERROR and TIMEOUT exceptions (previously only SERVER_DOWN),
      fixing reconnection issues especially during server restarts
    + Fixed syncrepl.py to use named constants instead of raw decimal values
      for result types
    + Fixed error handling in SearchNoOpMixIn to prevent a undefined variable
      error
- Fix filename due to new setuptools.

OBS-URL: https://build.opensuse.org/request/show/1311258
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-ldap?expand=0&rev=63
2025-10-15 10:44:40 +00:00
09881c5701 - Update to 3.4.5:
* Security fixes:
    + CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in
      ldap.filter.escape_filter_chars with escape_mode=1; ensure proper
      escaping. (bsc#1251912)
    + CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in
      ldap.dn.escape_dn_chars to \00 per RFC 4514. (bsc#1251913)
  * Fixes:
    + ReconnectLDAPObject now properly reconnects on UNAVAILABLE,
      CONNECT_ERROR and TIMEOUT exceptions (previously only SERVER_DOWN),
      fixing reconnection issues especially during server restarts
    + Fixed syncrepl.py to use named constants instead of raw decimal values
      for result types
    + Fixed error handling in SearchNoOpMixIn to prevent a undefined variable
      error
- Fix filename due to new setuptools.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-ldap?expand=0&rev=141
2025-10-14 00:55:52 +00:00
5 changed files with 36 additions and 39 deletions

View File

@@ -1,25 +0,0 @@
From de85e6b833fc43f273f688680d7a95e9a8330704 Mon Sep 17 00:00:00 2001
From: William Brown <william@blackhats.net.au>
Date: Tue, 5 Aug 2025 15:24:49 +1000
Subject: [PATCH] Use reentrant libldap
---
Build/setup.cfg.suse-linux | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/Build/setup.cfg.suse-linux b/Build/setup.cfg.suse-linux
index 0a48ef2..d715737 100644
--- a/Build/setup.cfg.suse-linux
+++ b/Build/setup.cfg.suse-linux
@@ -15,7 +15,7 @@ extra_objects =
# Support for StartTLS/LDAPS, SASL bind and reentrant libldap_r.
# This needs recent OpenLDAP 2.0.26+ or 2.1.3+ built with
# ./configure --with-cyrus-sasl --with-tls
-libs = ldap_r lber sasl2 ssl crypto
+libs = ldap lber sasl2 ssl crypto
[install]
# Installation options
--
2.39.5 (Apple Git-154)

Binary file not shown.

View File

@@ -1,8 +1,30 @@
-------------------------------------------------------------------
Tue Aug 5 05:27:36 UTC 2025 - William Brown <william.brown@suse.com>
Tue Oct 14 00:55:36 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
- Allow building against OpenLDAP 2.5
* 0001-Use-reentrant-libldap.patch
- Update to 3.4.5:
* Security fixes:
+ CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce str input in
ldap.filter.escape_filter_chars with escape_mode=1; ensure proper
escaping. (bsc#1251912)
+ CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in
ldap.dn.escape_dn_chars to \00 per RFC 4514. (bsc#1251913)
* Fixes:
+ ReconnectLDAPObject now properly reconnects on UNAVAILABLE,
CONNECT_ERROR and TIMEOUT exceptions (previously only SERVER_DOWN),
fixing reconnection issues especially during server restarts
+ Fixed syncrepl.py to use named constants instead of raw decimal values
for result types
+ Fixed error handling in SearchNoOpMixIn to prevent a undefined variable
error
- Fix filename due to new setuptools.
-------------------------------------------------------------------
Mon Jun 30 09:36:40 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Switch build system from setuptools to pyproject.toml
* Add python-pip and python-wheel to BuildRequires
* Replace %python_build with %pyproject_wheel
* Replace %python_install with %pyproject_install
-------------------------------------------------------------------
Thu Aug 29 07:22:28 UTC 2024 - Markéta Machová <mmachova@suse.com>

View File

@@ -1,7 +1,7 @@
#
# spec file for package python-ldap
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,18 +18,18 @@
%{?sle15_python_module_pythons}
Name: python-ldap
Version: 3.4.4
Version: 3.4.5
Release: 0
Summary: Python LDAP interface
License: Python-2.0
Group: Development/Libraries/Python
URL: https://www.python-ldap.org/
Source0: https://files.pythonhosted.org/packages/source/p/python-ldap/python-ldap-%{version}.tar.gz
Patch0: 0001-Use-reentrant-libldap.patch
Source0: https://files.pythonhosted.org/packages/source/p/python-ldap/python_ldap-%{version}.tar.gz
BuildRequires: %{python_module devel}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module pyasn1 >= 0.3.7}
BuildRequires: %{python_module pyasn1-modules >= 0.1.5}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module wheel}
BuildRequires: cyrus-sasl-devel >= 2.1
BuildRequires: fdupes
BuildRequires: krb5-devel
@@ -51,14 +51,14 @@ for that purpose. Additionally the package contains modules for other
LDAP-related stuff (e.g. processing LDIF, LDAPURLs, LDAPv3 schema, etc.).
%prep
%autosetup -p1
%autosetup -p1 -n python_ldap-%{version}
cp Build/setup.cfg.suse-linux setup.cfg
%build
CFLAGS="%{optflags}" %python_build
CFLAGS="%{optflags}" %pyproject_wheel
%install
%python_install
%pyproject_install
%python_expand %fdupes %{buildroot}%{$python_sitearch}
%check

BIN
python_ldap-3.4.5.tar.gz LFS Normal file

Binary file not shown.