[ubuntu/artful-proposed] openldap 2.4.45+dfsg-1ubuntu1 (Accepted)

Fri Jul 28 14:08:19 UTC 2017

openldap (2.4.45+dfsg-1ubuntu1) artful; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
    - Enable GSSAPI support:
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added heimdal-dev as a build depend
      - d/rules:
        - Explicitly add -I/usr/include/heimdal to CFLAGS.
        - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
    - Enable ufw support:
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay:
      - d/{patches/nssov-build,rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook.
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open
    - Show distribution in version:
      - d/control: added lsb-release
      - d/patches/fix-ldap-distribution.patch: show distribution in version
    - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
      - CLDAP (UDP) was added in 2.4.17-1ubuntu2
      - GSSAPI support was enabled in 2.4.18-0ubuntu2

openldap (2.4.45+dfsg-1) unstable; urgency=medium

  * New upstream release.
    - fixed a use-after-free in GnuTLS options handling
      (ITS#8385) (Closes: #820244) (LP: #1557248)
    - fixed unsafe concurrent SASL calls causing memory corruption
      (ITS#8648) (Closes: #860947) (LP: #1688575)
    - fixed syncrepl infinite looping with multi-master delta-syncrepl
      (ITS#8432) (Closes: #868753)
  * Rebase patches to apply cleanly:
    - do-not-second-guess-sonames
    - no-AM_INIT_AUTOMAKE
  * Drop patches applied upstream:
    - ITS-8554-kFreeBSD-is-like-BSD.patch
    - ITS-8644-wait-for-slapd-to-start-in-test064.patch
    - ITS-8655-paged-results-double-free.patch
  * Upgrade to debhelper compat level 10.
    - Depend on debhelper 10.
    - Stop enabling parallel and autoreconf explicitly. They are now enabled
      by default.
    - Drop dh-autoreconf from build-depends since debhelper requires it.
  * Add -Wno-format-extra-args to CFLAGS to reduce the noise in the build
    logs, as this warning is emitted on each use of the Debug() macro.
  * Drop libldap-2.4-4-dbg and slapd-dbg binary packages in favour of
    automatic dbgsym packages.
  * Update Standards-Version to 4.0.0; no changes required.
  * Drop Priority and Section from binary package stanzas when they only
    duplicate information from the source stanza.
  * Update Priority of slapd-smbk5pwd and libldap2-dev to optional to match
    the archive.
  * Remove retired developer, Roland Bauerschmidt, from Uploaders.
    (Closes: #856422)
  * Remove Timo Aaltonen from Uploaders, with his agreement.
  * debian/patches/ITS8650-retry-gnutls_handshake-after-GNUTLS_E_AGAIN.patch:
    If gnutls_handshake() returns EAGAIN, call it again. Fixes TLS handshake
    failures when the ServerHello message exceeds 16K.
    (ITS#8650) (Closes: #861838)
  * Drop time from Build-Depends. The upstream testsuite no longer calls it.

Date: Fri, 28 Jul 2017 14:49:07 +0200
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>
https://launchpad.net/ubuntu/+source/openldap/2.4.45+dfsg-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 28 Jul 2017 14:49:07 +0200
Source: openldap
Binary: slapd slapd-smbk5pwd ldap-utils libldap-2.4-2 libldap-common libldap2-dev
Architecture: source
Version: 2.4.45+dfsg-1ubuntu1
Distribution: artful
Urgency: medium
Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>
Changed-By: Gianfranco Costamagna <locutusofborg at debian.org>
Description:
 ldap-utils - OpenLDAP utilities
 libldap-2.4-2 - OpenLDAP libraries
 libldap-common - OpenLDAP common files for libraries
 libldap2-dev - OpenLDAP development libraries
 slapd      - OpenLDAP server (slapd)
 slapd-smbk5pwd - Keeps Samba and Kerberos passwords in sync within slapd.
Closes: 820244 856422 860947 861838 868753
Launchpad-Bugs-Fixed: 1557248 1688575
Changes:
 openldap (2.4.45+dfsg-1ubuntu1) artful; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - Enable AppArmor support:
       - d/apparmor-profile: add AppArmor profile
       - d/rules: use dh_apparmor
       - d/control: Build-Depends on dh-apparmor
       - d/slapd.README.Debian: add note about AppArmor
     - Enable GSSAPI support:
       - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
         - Add --with-gssapi support
         - Make guess_service_principal() more robust when determining
           principal
       - d/configure.options: Configure with --with-gssapi
       - d/control: Added heimdal-dev as a build depend
       - d/rules:
         - Explicitly add -I/usr/include/heimdal to CFLAGS.
         - Explicitly add -I/usr/lib/<multiarch>/heimdal to LDFLAGS.
     - Enable ufw support:
       - d/control: suggest ufw.
       - d/rules: install ufw profile.
       - d/slapd.ufw.profile: add ufw profile.
     - Enable nss overlay:
       - d/{patches/nssov-build,rules}: Apply, build and package the
         nss overlay.
     - d/{rules,slapd.py}: Add apport hook.
     - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
       either the default DIT nor via an Authn mapping.
     - d/slapd.scripts-common:
       - add slapcat_opts to local variables.
       - Fix backup directory naming for multiple reconfiguration.
     - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
     - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
       in the openldap library, as required by Likewise-Open
     - Show distribution in version:
       - d/control: added lsb-release
       - d/patches/fix-ldap-distribution.patch: show distribution in version
     - d/libldap-2.4-2.symbols: Add symbols not present in Debian.
       - CLDAP (UDP) was added in 2.4.17-1ubuntu2
       - GSSAPI support was enabled in 2.4.18-0ubuntu2
 .
 openldap (2.4.45+dfsg-1) unstable; urgency=medium
 .
   * New upstream release.
     - fixed a use-after-free in GnuTLS options handling
       (ITS#8385) (Closes: #820244) (LP: #1557248)
     - fixed unsafe concurrent SASL calls causing memory corruption
       (ITS#8648) (Closes: #860947) (LP: #1688575)
     - fixed syncrepl infinite looping with multi-master delta-syncrepl
       (ITS#8432) (Closes: #868753)
   * Rebase patches to apply cleanly:
     - do-not-second-guess-sonames
     - no-AM_INIT_AUTOMAKE
   * Drop patches applied upstream:
     - ITS-8554-kFreeBSD-is-like-BSD.patch
     - ITS-8644-wait-for-slapd-to-start-in-test064.patch
     - ITS-8655-paged-results-double-free.patch
   * Upgrade to debhelper compat level 10.
     - Depend on debhelper 10.
     - Stop enabling parallel and autoreconf explicitly. They are now enabled
       by default.
     - Drop dh-autoreconf from build-depends since debhelper requires it.
   * Add -Wno-format-extra-args to CFLAGS to reduce the noise in the build
     logs, as this warning is emitted on each use of the Debug() macro.
   * Drop libldap-2.4-4-dbg and slapd-dbg binary packages in favour of
     automatic dbgsym packages.
   * Update Standards-Version to 4.0.0; no changes required.
   * Drop Priority and Section from binary package stanzas when they only
     duplicate information from the source stanza.
   * Update Priority of slapd-smbk5pwd and libldap2-dev to optional to match
     the archive.
   * Remove retired developer, Roland Bauerschmidt, from Uploaders.
     (Closes: #856422)
   * Remove Timo Aaltonen from Uploaders, with his agreement.
   * debian/patches/ITS8650-retry-gnutls_handshake-after-GNUTLS_E_AGAIN.patch:
     If gnutls_handshake() returns EAGAIN, call it again. Fixes TLS handshake
     failures when the ServerHello message exceeds 16K.
     (ITS#8650) (Closes: #861838)
   * Drop time from Build-Depends. The upstream testsuite no longer calls it.
Checksums-Sha1:
 50b9865cf11bd35ff16b52ff7a39ab6f5943669c 2765 openldap_2.4.45+dfsg-1ubuntu1.dsc
 03f71af49a00e4286c6cf27885850676a7c5d7fe 4846458 openldap_2.4.45+dfsg.orig.tar.gz
 eb2fbce8e9c3aa6c3881f8e4ae278992d86ee665 175800 openldap_2.4.45+dfsg-1ubuntu1.debian.tar.xz
Checksums-Sha256:
 d7990a3ad576ff2b6e3ec32e76adf351b54edeb073b9368b1ee84ac71ca8b5b1 2765 openldap_2.4.45+dfsg-1ubuntu1.dsc
 d51c70423aa0554d454fd3d43e7f2e940523b4ef07979305b48c233ae44b2b32 4846458 openldap_2.4.45+dfsg.orig.tar.gz
 2f6ddef561e986db9ecbf91ee89b9224c81089d2d5ad7c06cb3629539e95ec66 175800 openldap_2.4.45+dfsg-1ubuntu1.debian.tar.xz
Files:
 81d7c20e7d32e797b185fdec4c3560a6 2765 net optional openldap_2.4.45+dfsg-1ubuntu1.dsc
 6efedf363b87ba8a377aaee7d5edb4aa 4846458 net optional openldap_2.4.45+dfsg.orig.tar.gz
 faeddc34b958edaf7b3be996144d80ec 175800 net optional openldap_2.4.45+dfsg-1ubuntu1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJZezLxAAoJEPNPCXROn13ZlYcP/jXsif/YSAJSqZFO3nXEWnrn
h6cngp8JUfwOqv1e7b7VX6XTKT28ZARU0ROk/cdL5OWcSi9g+KSOm1WOr2kIOV1b
FFjNhLcbtQnhmxdYnGvy48oPXvXl3yGjRQBP8oSGBdrwWbzNv9nK2AMKbMnkamxj
z6iUP1KUupXtSO9FV+yju7HFLmL355PbrkSL2tEfLxUEZYyBNh38OXwA9yDG9EcZ
uNh6YeWBfU7E+rWXc/rWvcX59R98de+VYJHs2+AhIsPSDSdlLIKWHDtKeSgMCEU9
l1zLqX1BBY2pABlb3XGPjOvcT67xSB+kjPq++a+AEvCm766/VNL7IbNll7X09kY3
sku6FQkHfUS3jgZZTFZJ89kSr0PlYY5kaQc1eTQ5jskMzIlqPohEmNJGB3pt9Zs6
Kg1k8vAYCm/in/sTdFtD0DvmLK9KVnz6HIR0ODZI4sh83JSQzeaWwYX+gSjHIWwh
YuMfnNAUt6mjdRTZinMn2vsgruVnwINh/PUJxXrcrUq3BEH5la2CfILK6arswBxw
1thBsj2p+ATQGkMMmmh/TKBzOGRdmrBFVgESS6p3naDUv+BA1rKA9SL0A6UvESJr
XkzGF2DqFyvXORMGNoMDyGKeK00m9XFUQ89Xj3NAucQ8PhLo96Q1P5C8mVFhf8VM
VB3C6feHqYAlhCb27YUO
=5Yka
-----END PGP SIGNATURE-----