[ubuntu/quantal] openldap 2.4.31-1ubuntu1 (Accepted)

Fri Jul 20 13:25:24 UTC 2012

openldap (2.4.31-1ubuntu1) quantal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Enable AppArmor support:
      - d/apparmor-profile: add AppArmor profile
      - d/rules: use dh_apparmor
      - d/control: Build-Depends on dh-apparmor
      - d/slapd.README.Debian: add note about AppArmor
      - d/slapd.dirs: add etc/apparmor.d/force-complain
    - Enable GSSAPI support (LP: #495418):
      - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
        - Add --with-gssapi support
        - Make guess_service_principal() more robust when determining
          principal
      - d/configure.options: Configure with --with-gssapi
      - d/control: Added libkrb5-dev as a build depend
    - Enable ufw support (LP: #423246):
      - d/control: suggest ufw.
      - d/rules: install ufw profile.
      - d/slapd.ufw.profile: add ufw profile.
    - Enable nss overlay (LP: #675391):
      - d/{patches/nssov-build,/rules}: Apply, build and package the
        nss overlay.
    - d/{rules,slapd.py}: Add apport hook. (LP: #610544)
    - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
      either the default DIT nor via an Authn mapping.
    - d/slapd.scripts-common:
      - add slapcat_opts to local variables.
      - Remove unused variable new_conf.
      - Fix backup directory naming for multiple reconfiguration.
    - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
    - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
      in the openldap library, as required by Likewise-Open (LP: #390579)
    - d/{control,rules}: enable PIE hardening
  * Dropped changes:
    - d/patches/its-7107-fix-Operation-init-on-reuse.diff: Included in upstream release.
    - d/patches/CVE-2011-4079: Included in upstream release.
    - d/patches/service-operational-before-detach: Included in upstream release.
    - d/schema/extra/misc.ldif: Included upstream.
    - d/{rules,schema/extra}: Fix configure and clean rules to support
      extra schemas shipped as part of the debian/schema/ directory; no longer required.
    - Included in Debian:
      + Document cn=config in README file.
      + Install a default DIT; actually a minimal configuration.
      + d/patches/heimdal-fix.
  * General tidy of d/patches to remove obsolete patches being held in Ubuntu delta.

openldap (2.4.31-1) unstable; urgency=low

  * New upstream release.
    - Fixes a denial of service attack, CVE-2012-1164, when using the rwm
      overlay.  Closes: #663644.
    - Fixes a bug with ldap_result always returning -1 when called from
      sssd.  Closes: #666230.
    - Fix a build failure on armel due to unaligned memory access.
      Closes: #677158.
  * Incorporate NMU (thanks, Julien Cristau, Mattias Ellert):
    - Disable the mdb backend on non-Linux, it looks like it doesn't work
      with linuxthreads (closes: #654824).
    - Backport fix for shell backend configuration.  Closes: #662940.

  [ Peter Marschall ]
  * debian/slapd.scripts-common: avoid grep warnings
  * debian/patches/heimdal-fix: fix arguments of
    hdb_generate_key_set_password().  Closes: #664930

  [ Steve Langasek ]
  * debian/patches/contrib-modules-use-dpkg-buildflags: pass CFLAGS to
    contrib builds.  Thanks to Simon Ruderich <simon at ruderich.org>.
    Closes: #663724.

Date: Fri, 20 Jul 2012 13:48:32 +0100
Changed-By: James Page <james.page at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/openldap/2.4.31-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 20 Jul 2012 13:48:32 +0100
Source: openldap
Binary: slapd slapd-smbk5pwd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source
Version: 2.4.31-1ubuntu1
Distribution: quantal
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: James Page <james.page at ubuntu.com>
Description: 
 ldap-utils - OpenLDAP utilities
 libldap-2.4-2 - OpenLDAP libraries
 libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
 libldap2-dev - OpenLDAP development libraries
 slapd      - OpenLDAP server (slapd)
 slapd-dbg  - Debugging information for the OpenLDAP server (slapd)
 slapd-smbk5pwd - Keeps Samba and Kerberos passwords in sync within slapd.
Closes: 654824 662940 663644 663724 664930 666230 677158
Launchpad-Bugs-Fixed: 390579 423246 495418 610544 675391
Changes: 
 openldap (2.4.31-1ubuntu1) quantal; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
     - Enable AppArmor support:
       - d/apparmor-profile: add AppArmor profile
       - d/rules: use dh_apparmor
       - d/control: Build-Depends on dh-apparmor
       - d/slapd.README.Debian: add note about AppArmor
       - d/slapd.dirs: add etc/apparmor.d/force-complain
     - Enable GSSAPI support (LP: #495418):
       - d/patches/gssapi.diff, thanks to Jerry Carter (Likewise):
         - Add --with-gssapi support
         - Make guess_service_principal() more robust when determining
           principal
       - d/configure.options: Configure with --with-gssapi
       - d/control: Added libkrb5-dev as a build depend
     - Enable ufw support (LP: #423246):
       - d/control: suggest ufw.
       - d/rules: install ufw profile.
       - d/slapd.ufw.profile: add ufw profile.
     - Enable nss overlay (LP: #675391):
       - d/{patches/nssov-build,/rules}: Apply, build and package the
         nss overlay.
     - d/{rules,slapd.py}: Add apport hook. (LP: #610544)
     - d/slapd.init.ldif: don't set olcRootDN since it's not defined in
       either the default DIT nor via an Authn mapping.
     - d/slapd.scripts-common:
       - add slapcat_opts to local variables.
       - Remove unused variable new_conf.
       - Fix backup directory naming for multiple reconfiguration.
     - d/{slapd.default,slapd.README.Debian}: use the new configuration style.
     - d/rules: Enable -DLDAP_CONNECTIONLESS to build CLDAP (UDP) support
       in the openldap library, as required by Likewise-Open (LP: #390579)
     - d/{control,rules}: enable PIE hardening
   * Dropped changes:
     - d/patches/its-7107-fix-Operation-init-on-reuse.diff: Included in upstream release.
     - d/patches/CVE-2011-4079: Included in upstream release.
     - d/patches/service-operational-before-detach: Included in upstream release.
     - d/schema/extra/misc.ldif: Included upstream.
     - d/{rules,schema/extra}: Fix configure and clean rules to support
       extra schemas shipped as part of the debian/schema/ directory; no longer required.
     - Included in Debian:
       + Document cn=config in README file.
       + Install a default DIT; actually a minimal configuration.
       + d/patches/heimdal-fix.
   * General tidy of d/patches to remove obsolete patches being held in Ubuntu delta.
 .
 openldap (2.4.31-1) unstable; urgency=low
 .
   * New upstream release.
     - Fixes a denial of service attack, CVE-2012-1164, when using the rwm
       overlay.  Closes: #663644.
     - Fixes a bug with ldap_result always returning -1 when called from
       sssd.  Closes: #666230.
     - Fix a build failure on armel due to unaligned memory access.
       Closes: #677158.
   * Incorporate NMU (thanks, Julien Cristau, Mattias Ellert):
     - Disable the mdb backend on non-Linux, it looks like it doesn't work
       with linuxthreads (closes: #654824).
     - Backport fix for shell backend configuration.  Closes: #662940.
 .
   [ Peter Marschall ]
   * debian/slapd.scripts-common: avoid grep warnings
   * debian/patches/heimdal-fix: fix arguments of
     hdb_generate_key_set_password().  Closes: #664930
 .
   [ Steve Langasek ]
   * debian/patches/contrib-modules-use-dpkg-buildflags: pass CFLAGS to
     contrib builds.  Thanks to Simon Ruderich <simon at ruderich.org>.
     Closes: #663724.
Checksums-Sha1: 
 93405e2e10a5e23bc4f19d914960d9807858c39d 2866 openldap_2.4.31-1ubuntu1.dsc
 864e7b6ba54cc00ef5b834fd5b5739a7900dd6e3 4720612 openldap_2.4.31.orig.tar.gz
 01d12df6d423f09e6710770178eaa131a5efe8ab 173715 openldap_2.4.31-1ubuntu1.diff.gz
Checksums-Sha256: 
 3358d188461da45e8edbddef58aef4912c5c155294cb02f8e21f7ddda5af6dea 2866 openldap_2.4.31-1ubuntu1.dsc
 dff60c1044021217ab97a7bdda5a7016015f042db0fbfd566d52abb266d19239 4720612 openldap_2.4.31.orig.tar.gz
 e9b28ff94e19175355285802b5c9cbb604bd19205c0e523c0a94fd1aeb15feab 173715 openldap_2.4.31-1ubuntu1.diff.gz
Files: 
 416dbef5650eaf6c6dcd6611023f216f 2866 net optional openldap_2.4.31-1ubuntu1.dsc
 a8631b2202d8099143edb57e36b33dea 4720612 net optional openldap_2.4.31.orig.tar.gz
 502b887e5b4f6106e095bea05d9b5410 173715 net optional openldap_2.4.31-1ubuntu1.diff.gz
Original-Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=hPII
-----END PGP SIGNATURE-----