diff --git a/openldap-2.4.15.tar.bz2 b/openldap-2.4.15.tar.bz2 deleted file mode 100644 index e8bc25b..0000000 --- a/openldap-2.4.15.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:eaf8580b315c78d1b8862600546fb953c98e9f65cffaaeb7939e5b38f4eb3aa4 -size 4104966 diff --git a/openldap-2.4.16.tar.bz2 b/openldap-2.4.16.tar.bz2 new file mode 100644 index 0000000..b287eee --- /dev/null +++ b/openldap-2.4.16.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e137aa9d28f7c6cffcc9a189ba39a5b1f510fd70995a3857b3715a97a9724782 +size 4103413 diff --git a/openldap2-client.changes b/openldap2-client.changes index 006bd82..73ac1fa 100644 --- a/openldap2-client.changes +++ b/openldap2-client.changes @@ -1,3 +1,31 @@ +------------------------------------------------------------------- +Mon Apr 6 15:41:05 CEST 2009 - rhafer@suse.de + +- Update to 2.4.16. Most important fixes: + * Fixed libldap segfault in checking cert/DN (ITS#5976) + * Fixed libldap peer cert double free (ITS#5849) + * Fixed libldap referral chasing (ITS#5980) + * Fixed slapd backglue with empty DBs (ITS#5986) + * Fixed slapd ctxcsn race condition (ITS#6001) + * Fixed slapd debug message (ITS#6027) + * Fixed slapd redundant module loading (ITS#6030) + * Fixed slapd schema_init freed value (ITS#6036) + * Fixed slapd syncrepl newCookie sync messages (ITS#5972) + * Fixed slapd syncrepl hang during shutdown (ITS#6011) + * Fixed slapd syncrepl too many MMR messages (ITS#6020) + * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) + * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) + * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) + * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) + * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) + * Fixed slapd-ldap/meta with broken AD results (ITS#5977) + * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) + * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) + * Fixed slapo-dynlist conversion to cn=config (ITS#6002) + * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, + ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) +- Fix building on older openSUSE releases + ------------------------------------------------------------------- Fri Mar 20 14:00:20 CET 2009 - rhafer@suse.de diff --git a/openldap2-client.spec b/openldap2-client.spec index ce3a541..a8d2a7c 100644 --- a/openldap2-client.spec +++ b/openldap2-client.spec @@ -1,5 +1,5 @@ # -# spec file for package openldap2-client (Version 2.4.15) +# spec file for package openldap2-client (Version 2.4.16) # # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -26,7 +26,7 @@ BuildRequires: -db-devel -libopenssl-devel -pwdutils libdb-4_5-devel openssl-de %if %sles_version == 10 BuildRequires: -db-devel -libopenssl-devel -pwdutils libdb-4_5-devel openssl-devel %endif -Version: 2.4.15 +Version: 2.4.16 Release: 1 Url: http://www.openldap.org License: BSD 3-Clause @@ -60,7 +60,6 @@ Patch7: pie-compile.dif Patch9: openldap2-add-gnu-source.diff Patch11: slapd-bconfig-del-db.dif Patch14: slapo-collect-include.dif -Patch15: slapd-ldap_back_entry_get_rw-ITS6003.diff Patch100: openldap-2.3.37.dif Patch200: slapd_getaddrinfo_dupl.dif BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -172,13 +171,12 @@ Authors: %patch9 -p1 %patch11 %patch14 -p1 -%patch15 -cp %{SOURCE5} . -cd ../openldap-2.3.37 -%patch100 %if %suse_version == 1100 %patch200 -p1 %endif +cp %{SOURCE5} . +cd ../openldap-2.3.37 +%patch100 %build %{?suse_update_config:%{suse_update_config -f build}} @@ -538,6 +536,31 @@ fi %endif %changelog +* Mon Apr 06 2009 rhafer@suse.de +- Update to 2.4.16. Most important fixes: + * Fixed libldap segfault in checking cert/DN (ITS#5976) + * Fixed libldap peer cert double free (ITS#5849) + * Fixed libldap referral chasing (ITS#5980) + * Fixed slapd backglue with empty DBs (ITS#5986) + * Fixed slapd ctxcsn race condition (ITS#6001) + * Fixed slapd debug message (ITS#6027) + * Fixed slapd redundant module loading (ITS#6030) + * Fixed slapd schema_init freed value (ITS#6036) + * Fixed slapd syncrepl newCookie sync messages (ITS#5972) + * Fixed slapd syncrepl hang during shutdown (ITS#6011) + * Fixed slapd syncrepl too many MMR messages (ITS#6020) + * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) + * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) + * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) + * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) + * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) + * Fixed slapd-ldap/meta with broken AD results (ITS#5977) + * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) + * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) + * Fixed slapo-dynlist conversion to cn=config (ITS#6002) + * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, + ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) +- Fix building on older openSUSE releases * Fri Mar 20 2009 rhafer@suse.de - Update to 2.4.15. Most important changes: * Fixed slapd bconfig conversion again (ITS#5346) @@ -929,7 +952,7 @@ fi * Fixed libldap referral chasing loop (ITS#4955) * Fixed libldap response code handling on rebind (ITS#4924) * Fixed libldap SASL_MAX_BUFF_SIZE (ITS#4935) -* Wed Jun 13 2007 dmueller@suse.de +* Thu Jun 14 2007 dmueller@suse.de - remove binutils prereq * Mon May 21 2007 dmueller@suse.de - reduce duplicated buildrequires against db42 and db45 @@ -1337,7 +1360,7 @@ fi - remove unpacked files from BuildRoot * Fri May 09 2003 rhafer@suse.de - updated to version 2.1.19 -* Tue Apr 15 2003 ro@suse.de +* Wed Apr 16 2003 ro@suse.de - fixed requires for devel-package ... * Tue Apr 15 2003 ro@suse.de - fixed neededforbuild @@ -1347,7 +1370,7 @@ fi - added /etc/openldap to filelist * Mon Feb 03 2003 rhafer@suse.de - switch default backend to ldbm -* Sun Feb 02 2003 ro@suse.de +* Mon Feb 03 2003 ro@suse.de - fixed requires for devel package (cyrus-sasl2-devel) * Fri Jan 31 2003 rhafer@suse.de - liblber.dif: Fixes two bugs in liblber by which remote attackers diff --git a/openldap2.changes b/openldap2.changes index 006bd82..73ac1fa 100644 --- a/openldap2.changes +++ b/openldap2.changes @@ -1,3 +1,31 @@ +------------------------------------------------------------------- +Mon Apr 6 15:41:05 CEST 2009 - rhafer@suse.de + +- Update to 2.4.16. Most important fixes: + * Fixed libldap segfault in checking cert/DN (ITS#5976) + * Fixed libldap peer cert double free (ITS#5849) + * Fixed libldap referral chasing (ITS#5980) + * Fixed slapd backglue with empty DBs (ITS#5986) + * Fixed slapd ctxcsn race condition (ITS#6001) + * Fixed slapd debug message (ITS#6027) + * Fixed slapd redundant module loading (ITS#6030) + * Fixed slapd schema_init freed value (ITS#6036) + * Fixed slapd syncrepl newCookie sync messages (ITS#5972) + * Fixed slapd syncrepl hang during shutdown (ITS#6011) + * Fixed slapd syncrepl too many MMR messages (ITS#6020) + * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) + * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) + * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) + * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) + * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) + * Fixed slapd-ldap/meta with broken AD results (ITS#5977) + * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) + * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) + * Fixed slapo-dynlist conversion to cn=config (ITS#6002) + * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, + ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) +- Fix building on older openSUSE releases + ------------------------------------------------------------------- Fri Mar 20 14:00:20 CET 2009 - rhafer@suse.de diff --git a/openldap2.spec b/openldap2.spec index d7f849a..49e7a2d 100644 --- a/openldap2.spec +++ b/openldap2.spec @@ -1,5 +1,5 @@ # -# spec file for package openldap2 (Version 2.4.15) +# spec file for package openldap2 (Version 2.4.16) # # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -26,7 +26,7 @@ BuildRequires: -db-devel -libopenssl-devel -pwdutils libdb-4_5-devel openssl-de %if %sles_version == 10 BuildRequires: -db-devel -libopenssl-devel -pwdutils libdb-4_5-devel openssl-devel %endif -Version: 2.4.15 +Version: 2.4.16 Release: 1 Url: http://www.openldap.org License: BSD 3-Clause; openldap 2.8 @@ -60,7 +60,6 @@ Patch7: pie-compile.dif Patch9: openldap2-add-gnu-source.diff Patch11: slapd-bconfig-del-db.dif Patch14: slapo-collect-include.dif -Patch15: slapd-ldap_back_entry_get_rw-ITS6003.diff Patch100: openldap-2.3.37.dif Patch200: slapd_getaddrinfo_dupl.dif BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -175,13 +174,12 @@ Authors: %patch9 -p1 %patch11 %patch14 -p1 -%patch15 -cp %{SOURCE5} . -cd ../openldap-2.3.37 -%patch100 %if %suse_version == 1100 %patch200 -p1 %endif +cp %{SOURCE5} . +cd ../openldap-2.3.37 +%patch100 %build %{?suse_update_config:%{suse_update_config -f build}} @@ -541,6 +539,31 @@ fi %endif %changelog +* Mon Apr 06 2009 rhafer@suse.de +- Update to 2.4.16. Most important fixes: + * Fixed libldap segfault in checking cert/DN (ITS#5976) + * Fixed libldap peer cert double free (ITS#5849) + * Fixed libldap referral chasing (ITS#5980) + * Fixed slapd backglue with empty DBs (ITS#5986) + * Fixed slapd ctxcsn race condition (ITS#6001) + * Fixed slapd debug message (ITS#6027) + * Fixed slapd redundant module loading (ITS#6030) + * Fixed slapd schema_init freed value (ITS#6036) + * Fixed slapd syncrepl newCookie sync messages (ITS#5972) + * Fixed slapd syncrepl hang during shutdown (ITS#6011) + * Fixed slapd syncrepl too many MMR messages (ITS#6020) + * Fixed slapd syncrepl skipped entries with MMR (ITS#5988) + * Fixed slapd-bdb/hdb cachesize handling (ITS#5860) + * Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006) + * Fixed slapd-bdb/hdb with NULL transactions (ITS#6012) + * Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916) + * Fixed slapd-ldap/meta with broken AD results (ITS#5977) + * Fixed slapd-ldap/meta with invalid attrs again (ITS#5959) + * Fixed slapo-accesslog interaction with ppolicy (ITS#5979) + * Fixed slapo-dynlist conversion to cn=config (ITS#6002) + * Fixed various slapo-syncprov issues (ITS#5972, ITS#6020, + ITS#5985, ITS#5999, ITS#5973, ITS#6045, ITS#6024, ITS#5988) +- Fix building on older openSUSE releases * Fri Mar 20 2009 rhafer@suse.de - Update to 2.4.15. Most important changes: * Fixed slapd bconfig conversion again (ITS#5346) @@ -932,7 +955,7 @@ fi * Fixed libldap referral chasing loop (ITS#4955) * Fixed libldap response code handling on rebind (ITS#4924) * Fixed libldap SASL_MAX_BUFF_SIZE (ITS#4935) -* Wed Jun 13 2007 dmueller@suse.de +* Thu Jun 14 2007 dmueller@suse.de - remove binutils prereq * Mon May 21 2007 dmueller@suse.de - reduce duplicated buildrequires against db42 and db45 @@ -1340,7 +1363,7 @@ fi - remove unpacked files from BuildRoot * Fri May 09 2003 rhafer@suse.de - updated to version 2.1.19 -* Tue Apr 15 2003 ro@suse.de +* Wed Apr 16 2003 ro@suse.de - fixed requires for devel-package ... * Tue Apr 15 2003 ro@suse.de - fixed neededforbuild @@ -1350,7 +1373,7 @@ fi - added /etc/openldap to filelist * Mon Feb 03 2003 rhafer@suse.de - switch default backend to ldbm -* Sun Feb 02 2003 ro@suse.de +* Mon Feb 03 2003 ro@suse.de - fixed requires for devel package (cyrus-sasl2-devel) * Fri Jan 31 2003 rhafer@suse.de - liblber.dif: Fixes two bugs in liblber by which remote attackers diff --git a/slapd-ldap_back_entry_get_rw-ITS6003.diff b/slapd-ldap_back_entry_get_rw-ITS6003.diff deleted file mode 100644 index 83d9da0..0000000 --- a/slapd-ldap_back_entry_get_rw-ITS6003.diff +++ /dev/null @@ -1,19 +0,0 @@ -Index: servers/slapd/back-ldap/search.c -=================================================================== -RCS file: /repo/OpenLDAP/pkg/ldap/servers/slapd/back-ldap/search.c,v -retrieving revision 1.201.2.20 -retrieving revision 1.201.2.21 -diff -u -r1.201.2.20 -r1.201.2.21 ---- servers/slapd/back-ldap/search.c 5 Mar 2009 18:22:14 -0000 1.201.2.20 -+++ servers/slapd/back-ldap/search.c 6 Mar 2009 07:14:56 -0000 1.201.2.21 -@@ -929,8 +929,8 @@ - - /* TODO: timeout? */ - rc = ldap_pvt_search_s( lc->lc_ld, ndn->bv_val, LDAP_SCOPE_BASE, filter, -- attrp, 0, ctrls, NULL, -- NULL, LDAP_NO_LIMIT, op->ors_deref, &result ); -+ attrp, LDAP_DEREF_NEVER, ctrls, NULL, -+ NULL, LDAP_NO_LIMIT, 0, &result ); - if ( rc != LDAP_SUCCESS ) { - if ( rc == LDAP_SERVER_DOWN && do_retry ) { - do_retry = 0;