[ubuntu/resolute-proposed] sssd 2.12.0-1ubuntu1 (Accepted)

Tue Feb 10 21:14:15 UTC 2026

sssd (2.12.0-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2130705). Remaining changes:
    - d/control: Drop libgdm-dev Build-Depend on i386.
    - d/control: Don't build sssd-tools on i386, now uninstallable due
      to added python3-{click,systemd} dependencies.
  * Dropped changes:
    - d/apparmor-profile: update apparmor profile for smartcard authentication
      (LP #2109673)
      [in 2.12.0-1]
    - d/p/CVE-2025-11561: incorrect fallback to the an2ln plugin: disable Kerberos
      localauth an2ln plugin for AD/IPA in src/util/domain_info_utils.c.
      [in 2.12.0-1]
    - debian/patches/fix_krb5_dep.patch: fix build with krb5 1.22.
      [in 2.11.1-2]
    - Continue searching other PKCS#11 tokens if certificates are not found
      (LP #2110521)
      + d/p/lp2110521-1-P11_CHILD-Extract-slot-processing-into-separate-func.patch
      + d/p/lp2110521-2-P11_CHILD-Make-p11_child-iterate-over-all-slots.patch
      [in 2.11.1-1]
    - faketime on armhf (LP #2059078)
      + Reintroduce faketime on armhf, it might be fixed now
      + d/control: faketime is used for tests, and is currently not
        working on armhf with a 64bit time_t
      [cancel each other out]
  * New changes:
    - d/t/sssd-{softhism2-certificates-test,smart-card-pam-auth-configs-tester}:
      fix test user creation
    - d/t/sssd-smart-card-pam-auth-configs-tester: remove files provider
      [changed in 2.11.0 upstream]

sssd (2.12.0-1) unstable; urgency=medium

  [ Michael Tokarev ]
  * d/control: remove kfreebsd reference (remove lintian error)
  * d/tests/sssd-smart-card-pam-auth-configs-tester.sh: show status/journal
    after (re)start of sssd fails

  [ Seyeong Kim ]
  * Updating apparmor profile for smartcard authentication (LP: #2109673)
   - d/apparmor-profile: allow access to sssd configuration directory,
     pcscd socket and libraries required for PKCS#11 module initialization.

  [ John Veitch ]
  * Update file sssd-common.sssd.default
  * Edit sssd-common.sssd.default  - add the --logger=files daemon option

  [ Timo Aaltonen ]
  * New upstream release.
  * patches: Drop upstreamed patch.
  * source: Update diff-ignore.

sssd (2.11.1-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Disabling sssd-smart-card-pam-auth-configs for now to allow sssd to
    migrate - until a proper fix, it's better to have sssd in testing
    without this test run than not have sssd at all (Closes: #1123815).

sssd (2.11.1-2) unstable; urgency=medium

  * BUILD-Accept-krb5-1.22-for-building-the-PAC-plugin.patch
    (Closes: #1122483 -- FTBFS, missing support for MIT Kerberos 1.22)

sssd (2.11.1-1) unstable; urgency=medium

  * New upstream release.
  * watch: Updated.
  * d/p/drop-valgrind.diff: Dropped, obsolete.
  * source: Update local-options.
  * rules, install: Drop files-provider, removed upstream.
  * sssd-common: Add sssd-idp.
  * copyright: Update FSF address.

Date: Mon, 09 Feb 2026 15:48:59 +0100
Changed-By: Jonas Jelten <jj at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/sssd/2.12.0-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 09 Feb 2026 15:48:59 +0100
Source: sssd
Built-For-Profiles: noudeb
Architecture: source
Version: 2.12.0-1ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jonas Jelten <jj at ubuntu.com>
Closes: 1122483 1123815
Launchpad-Bugs-Fixed: 2109673 2130705
Changes:
 sssd (2.12.0-1ubuntu1) resolute; urgency=medium
 .
   * Merge with Debian unstable (LP: #2130705). Remaining changes:
     - d/control: Drop libgdm-dev Build-Depend on i386.
     - d/control: Don't build sssd-tools on i386, now uninstallable due
       to added python3-{click,systemd} dependencies.
   * Dropped changes:
     - d/apparmor-profile: update apparmor profile for smartcard authentication
       (LP #2109673)
       [in 2.12.0-1]
     - d/p/CVE-2025-11561: incorrect fallback to the an2ln plugin: disable Kerberos
       localauth an2ln plugin for AD/IPA in src/util/domain_info_utils.c.
       [in 2.12.0-1]
     - debian/patches/fix_krb5_dep.patch: fix build with krb5 1.22.
       [in 2.11.1-2]
     - Continue searching other PKCS#11 tokens if certificates are not found
       (LP #2110521)
       + d/p/lp2110521-1-P11_CHILD-Extract-slot-processing-into-separate-func.patch
       + d/p/lp2110521-2-P11_CHILD-Make-p11_child-iterate-over-all-slots.patch
       [in 2.11.1-1]
     - faketime on armhf (LP #2059078)
       + Reintroduce faketime on armhf, it might be fixed now
       + d/control: faketime is used for tests, and is currently not
         working on armhf with a 64bit time_t
       [cancel each other out]
   * New changes:
     - d/t/sssd-{softhism2-certificates-test,smart-card-pam-auth-configs-tester}:
       fix test user creation
     - d/t/sssd-smart-card-pam-auth-configs-tester: remove files provider
       [changed in 2.11.0 upstream]
 .
 sssd (2.12.0-1) unstable; urgency=medium
 .
   [ Michael Tokarev ]
   * d/control: remove kfreebsd reference (remove lintian error)
   * d/tests/sssd-smart-card-pam-auth-configs-tester.sh: show status/journal
     after (re)start of sssd fails
 .
   [ Seyeong Kim ]
   * Updating apparmor profile for smartcard authentication (LP: #2109673)
    - d/apparmor-profile: allow access to sssd configuration directory,
      pcscd socket and libraries required for PKCS#11 module initialization.
 .
   [ John Veitch ]
   * Update file sssd-common.sssd.default
   * Edit sssd-common.sssd.default  - add the --logger=files daemon option
 .
   [ Timo Aaltonen ]
   * New upstream release.
   * patches: Drop upstreamed patch.
   * source: Update diff-ignore.
 .
 sssd (2.11.1-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Disabling sssd-smart-card-pam-auth-configs for now to allow sssd to
     migrate - until a proper fix, it's better to have sssd in testing
     without this test run than not have sssd at all (Closes: #1123815).
 .
 sssd (2.11.1-2) unstable; urgency=medium
 .
   * BUILD-Accept-krb5-1.22-for-building-the-PAC-plugin.patch
     (Closes: #1122483 -- FTBFS, missing support for MIT Kerberos 1.22)
 .
 sssd (2.11.1-1) unstable; urgency=medium
 .
   * New upstream release.
   * watch: Updated.
   * d/p/drop-valgrind.diff: Dropped, obsolete.
   * source: Update local-options.
   * rules, install: Drop files-provider, removed upstream.
   * sssd-common: Add sssd-idp.
   * copyright: Update FSF address.
Checksums-Sha1:
 2601a71e21222660a726b456c1f4ec5724c92128 4484 sssd_2.12.0-1ubuntu1.dsc
 a035af8f53696830f4eee86119873ec1f545e655 9739617 sssd_2.12.0.orig.tar.gz
 d33e4035b5f51c2fc9eea40105ffe4bbddf75f48 50788 sssd_2.12.0-1ubuntu1.debian.tar.xz
 e849188e4590d54ff96d13dec162857d04845e75 8797 sssd_2.12.0-1ubuntu1_source.buildinfo
Checksums-Sha256:
 0229e36cce78d764cdc6cc689ab673a0a1f3d66ea97c2ee77f9eb92824b467d0 4484 sssd_2.12.0-1ubuntu1.dsc
 5cef12b47fcb76f250bd9e00e5e5fea2df3b1ffc6d3d7e9ba1dbe753acac8880 9739617 sssd_2.12.0.orig.tar.gz
 daad9cc723a34cfe4094970847bff6094a26a755133815f4fb0dfc80417b7a84 50788 sssd_2.12.0-1ubuntu1.debian.tar.xz
 3bf54185e218767bce0d4e817468727147731ac5f979a1c7156f8f1d83285113 8797 sssd_2.12.0-1ubuntu1_source.buildinfo
Files:
 6c2fd930861bbd3f2d2b69c4e9633ef4 4484 utils optional sssd_2.12.0-1ubuntu1.dsc
 90583741c20079dae1c9bd4377413c2c 9739617 utils optional sssd_2.12.0.orig.tar.gz
 a1d2885e98e880845b0a52e66a7d8cf2 50788 utils optional sssd_2.12.0-1ubuntu1.debian.tar.xz
 1eecc9a8b78521c11f9b64ea15325ae3 8797 utils optional sssd_2.12.0-1ubuntu1_source.buildinfo
Original-Maintainer: Debian SSSD Team <pkg-sssd-devel at alioth-lists.debian.net>
Vcs-Git: https://git.launchpad.net/~jj/ubuntu/+source/sssd
Vcs-Git-Commit: 018821d8cac11efffd13684fa39bffa87c42961c
Vcs-Git-Ref: refs/heads/lp2130705-merge-resolute