openSUSE Build Service

Michael Ströder (stroeder) accepted request 718342 from

Michael Ströder (stroeder) over 5 years ago (revision 247)

- Update to upstream release 2.4.48 with security fixes:
  * CVE-2019-13057 (ITS#9038):
    rootdn of any db can assert any identity
  * CVE-2019-13565 (ITS#9052):
    Unauthorized access caused by incorrect handling of SASL SSF values
- Fix CVE-2017-17740 by disabling nops overlay not maintained by upstream
  (see also bsc#1073313, comment #36)
- Removed obsolete patches:
  * 0002-openldap-its8727-plug-ber-leaks.patch
  * 0017-Fix-segfault-in-nops.patch

Note that I disabled slapo-nops instead of rebasing 0017-Fix-segfault-in-nops.patch which is somewhat debatable. You can take it or leave it.

buildservice-autocommit accepted request 702735 from

Michael Ströder (stroeder) over 5 years ago (revision 246)

baserev update by copy to link target

Michael Ströder (stroeder) accepted request 702733 from

William Brown (firstyear) over 5 years ago (revision 245)

- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.

buildservice-autocommit accepted request 683575 from

Michael Ströder (stroeder) over 5 years ago (revision 244)

baserev update by copy to link target

Michael Ströder (stroeder) committed over 5 years ago (revision 243)

Michael Ströder (stroeder) committed over 5 years ago (revision 242)

Michael Ströder (stroeder) committed over 5 years ago (revision 241)

Michael Ströder (stroeder) committed over 5 years ago (revision 240)

buildservice-autocommit accepted request 672068 from

Jan Engelhardt (jengelh) almost 6 years ago (revision 239)

baserev update by copy to link target

Jan Engelhardt (jengelh) accepted request 662829 from

Michael Ströder (stroeder) almost 6 years ago (revision 238)

added back-ported fix for OpenLDAP ITS#8727

buildservice-autocommit accepted request 660269 from

Michael Ströder (stroeder) almost 6 years ago (revision 237)

baserev update by copy to link target

Michael Ströder (stroeder) accepted request 660237 from

Michael Ströder (stroeder) almost 6 years ago (revision 236)

Update to upstream release 2.4.47 (successfully tested on Tumbleweed x86_84)

buildservice-autocommit accepted request 651186 from

Michael Ströder (stroeder) about 6 years ago (revision 235)

baserev update by copy to link target

Michael Ströder (stroeder) accepted request 651181 from

Jan Engelhardt (jengelh) about 6 years ago (revision 234)

- Replace old $RPM_* shell vars
and fix that silly build error about --no-as-needed

Peter Varkoly (varkoly) committed about 6 years ago (revision 233)

- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)

Peter Varkoly (varkoly) committed about 6 years ago (revision 232)

- bsc#1095816 libldap package does not contain and provide libldap anymore

buildservice-autocommit accepted request 648737 from

Peter Varkoly (varkoly) about 6 years ago (revision 231)

baserev update by copy to link target

Peter Varkoly (varkoly) committed about 6 years ago (revision 230)

- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)

buildservice-autocommit accepted request 647584 from

Peter Varkoly (varkoly) about 6 years ago (revision 229)

baserev update by copy to link target

Peter Varkoly (varkoly) committed about 6 years ago (revision 228)

Fix spec.

Places

Revisions of openldap2

Places