From f4cccb776bb8c311b145952d1613bf2859f82c926181a7065b03137b12395462 Mon Sep 17 00:00:00 2001 From: Samuel Cabrero Date: Fri, 29 Sep 2023 07:47:30 +0000 Subject: [PATCH] Accepting request 1114106 from home:npower:branches:network:samba:STABLE - Update to 2.8.0 * CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270) * pyldb: Raise an exception if ldb_dn_get_parent() fails * Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition * Documentation and spelling fixes * Add ldb_val -> bool,uint64,int64 parsing functions * Split out ldb_val_as_dn() helper function * add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject() * add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject() * let ldb_ldif_parse_modrdn() handle names without 'rdn_name=' prefix * Don't create error string if there is no error * Avoid allocation and memcpy() for every wildcard match candidate * Make ldb_msg_remove_attr O(n) * pyldb: Throw error on invalid controls * pyldb: remove py2 ifdefs * Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE) OBS-URL: https://build.opensuse.org/request/show/1114106 OBS-URL: https://build.opensuse.org/package/show/network:samba:STABLE/ldb?expand=0&rev=177 --- ldb-2.7.2.tar.asc | 11 ----------- ldb-2.7.2.tar.gz | 3 --- ldb-2.8.0.tar.asc | 11 +++++++++++ ldb-2.8.0.tar.gz | 3 +++ ldb.changes | 20 ++++++++++++++++++++ ldb.spec | 8 ++++---- 6 files changed, 38 insertions(+), 18 deletions(-) delete mode 100644 ldb-2.7.2.tar.asc delete mode 100644 ldb-2.7.2.tar.gz create mode 100644 ldb-2.8.0.tar.asc create mode 100644 ldb-2.8.0.tar.gz diff --git a/ldb-2.7.2.tar.asc b/ldb-2.7.2.tar.asc deleted file mode 100644 index a17c3b4..0000000 --- a/ldb-2.7.2.tar.asc +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQEzBAABCgAdFiEEkUejOXGVGO6QEby1R5ORYRMIQCUFAmQkQQAACgkQR5ORYRMI -QCVLegf/edHMC2+MZrMuMAbmRPb/cFxzYhHzDLuDyXcW0v6M0TDhu2eRamXk1XT0 -SFR5ah/qdhC1TeYOMpXhKPTpuvEURKkCK1vLj002djaNy4hEmHUsF7aNFW9Kd2QN -2hatsIn9EhPafOppgpJ34oVEF+ta9aA07rDwcRAPiCUq4/IW6qnEieC+zCjVLlTd -2+1gfUaC2iUj7g9qkXLg21XRPRwkv8xvpUlJ+SBMphyo6uoBzVzDB+nzOGqpO4n9 -QAj6iUC0I9faLlXljgeSi+DaM1E5n/slgkl6ko2Chcba6ZtSxKLE69X3RenAu8d3 -Cf+ATsT5+Ra5CPY2PJv5Z1A2SCHd/w== -=ukNT ------END PGP SIGNATURE----- diff --git a/ldb-2.7.2.tar.gz b/ldb-2.7.2.tar.gz deleted file mode 100644 index 2371ce2..0000000 --- a/ldb-2.7.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:26ee72d647854e662d99643eb2b2d341655abf31f4990838d6650fb5cf9209c8 -size 1737849 diff --git a/ldb-2.8.0.tar.asc b/ldb-2.8.0.tar.asc new file mode 100644 index 0000000..a0712e2 --- /dev/null +++ b/ldb-2.8.0.tar.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQEzBAABCgAdFiEEkUejOXGVGO6QEby1R5ORYRMIQCUFAmTDr+oACgkQR5ORYRMI +QCXfwgf/cAqWCgnnKIT3hvUdL2i2F9edDXTOkBDZ1vxQ8hLO+T8JtWO9F40hEZjH +F5R5B2pxBP6T2Nd9NHVbHUqlIpjqqesweTXtabuW60oz5PZ13owpGDWWQKortH5/ +j49v/ZKHD0NBjVN09AylRgoKQ4kRDtd0rMOAS951aRUcRTFRjK86hnaHPgvQeexy +SizGRtHlifnwM/lbgJlLkTDUDNA+7RwXRAv0pvLwYReGFoS8vyUbMOYt1lnoiNas +6cz+6yTKknGO7KSE6bjviDahv7Xg04Qy02eI/HYEZ8NG3aJqNsOqPchP4y/JgVv+ +90FZR2cdZNpTdlZ5TPfihL2/zldXKQ== +=H6+4 +-----END PGP SIGNATURE----- diff --git a/ldb-2.8.0.tar.gz b/ldb-2.8.0.tar.gz new file mode 100644 index 0000000..65b4bd1 --- /dev/null +++ b/ldb-2.8.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:358dca10fcd27207ac857a0d7f435a46dbc6cd1f7c10dbb840c1931bf1965f08 +size 1747616 diff --git a/ldb.changes b/ldb.changes index 0486d2e..99a09ea 100644 --- a/ldb.changes +++ b/ldb.changes @@ -1,3 +1,23 @@ +------------------------------------------------------------------- +Tue Sep 26 09:52:58 UTC 2023 - Noel Power + +- Update to 2.8.0 + * CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270) + * pyldb: Raise an exception if ldb_dn_get_parent() fails + * Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition + * Documentation and spelling fixes + * Add ldb_val -> bool,uint64,int64 parsing functions + * Split out ldb_val_as_dn() helper function + * add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject() + * add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject() + * let ldb_ldif_parse_modrdn() handle names without 'rdn_name=' prefix + * Don't create error string if there is no error + * Avoid allocation and memcpy() for every wildcard match candidate + * Make ldb_msg_remove_attr O(n) + * pyldb: Throw error on invalid controls + * pyldb: remove py2 ifdefs + * Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE) + ------------------------------------------------------------------- Wed Mar 29 15:28:03 UTC 2023 - Noel Power diff --git a/ldb.spec b/ldb.spec index 2ba3fd2..0559d61 100644 --- a/ldb.spec +++ b/ldb.spec @@ -27,9 +27,9 @@ %endif %define lmdb_version 0.9.16 -%define talloc_version 2.4.0 -%define tdb_version 1.4.8 -%define tevent_version 0.14.1 +%define talloc_version 2.4.1 +%define tdb_version 1.4.9 +%define tevent_version 0.15.0 Name: ldb BuildRequires: docbook-xsl-stylesheets @@ -57,7 +57,7 @@ BuildRequires: lmdb-devel >= %{lmdb_version} %endif URL: https://ldb.samba.org/ -Version: 2.7.2 +Version: 2.8.0 Release: 0 Summary: An LDAP-like embedded database License: LGPL-3.0-or-later