Changelog for
libldb2-2.9.1-194.1.i586.rpm :
* Fri Jun 28 2024 Noel Power
- Update to 2.9.1
* Many qsort() comparison functions are non-transitive, which can lead to out-of-bounds access in some circumstances; (bso#15569).
* Thu May 16 2024 Samuel Cabrero - Update to 2.9.0
* documentation fixes
* build with Python 3.12 (bso#15513)
* a lot of additional error checking in the python bindings
* minor code fixes
* Update patch ldb-python3.5-fix-soabi_name.patch
* Tue Sep 26 2023 Noel Power - Update to 2.8.0
* CVE-2023-0614 Not-secret but access controlled LDAP attributes can be discovered (bug 15270)
* pyldb: Raise an exception if ldb_dn_get_parent() fails
* Implement ldap_whoami in pyldb and add the RFC4532 LDB_EXTENDED_WHOAMI_OID definition
* Documentation and spelling fixes
* Add ldb_val -> bool,uint64,int64 parsing functions
* Split out ldb_val_as_dn() helper function
* add LDB_CHANGETYPE_MODRDN support to ldb_ldif_to_pyobject()
* add LDB_CHANGETYPE_DELETE support to ldb_ldif_to_pyobject()
* let ldb_ldif_parse_modrdn() handle names without \'rdn_name=\' prefix
* Don\'t create error string if there is no error
* Avoid allocation and memcpy() for every wildcard match candidate
* Make ldb_msg_remove_attr O(n)
* pyldb: Throw error on invalid controls
* pyldb: remove py2 ifdefs
* Call tevent_set_max_debug_level(TEVENT_DEBUG_TRACE)
* Wed Mar 29 2023 Noel Power - CVE-2023-0614: Access controlled AD LDAP attributes can be discovered (bso#15270); (bsc#1209485).
* Fri Mar 17 2023 Samuel Cabrero - Update to 2.7.1
* Build fix for Solaris, after removal of tevent ports backend (bso#15298)- Changes from 2.7.0
* Support python 3.12
* Have python functions operating on DNs raise LdbError
* Don\'t call comparison() directly in LDB_TYPESAFE_QSORT
* Use ldb_ascii_toupper() for case folding to support tr_TR.UTF-8 and other dotless i locales (bso#15248)
* Mon Mar 13 2023 Noel Power - Update to version 2.7.1 - Build fix for Solaris, after removal of tevent ports backend (bso#15298).- Update to version 2.7.0 - Support python 3.12
* Have python functions operating on DNs raise LdbError
* don\'t call comparison() directly in LDB_TYPESAFE_QSORT
* Use ldb_ascii_toupper() for case folding to support tr_TR.UTF-8 and other dotless i locales; (bso#15248).
* Thu Sep 22 2022 Noel Power - Update to version 2.6.1 + CVE-2022-32746 Use-after-free occurring in database audit logging module; (bso#15009); (bsc#1201490);- Update to version 2.6.0 + ldb: bump version to 2.6.0 for Samba 4.17.x releases
* Mon Aug 01 2022 Samuel Cabrero - Update to version 2.5.2; + CVE-2022-32746: Use-after-free occurring in database audit logging module; (bso#15009); (bsc#1201490);
* Thu Jun 16 2022 Samuel Cabrero - Update to version 2.5.1 + Fix build problems; (bso#15071);
* Tue Mar 22 2022 Samuel Cabrero - Update to version 2.5.0 + No code changes, just bump version for samba 4.16.0 release
* Thu Feb 24 2022 Ferdinand Thiessen - Update to version 2.4.2 + Fix for CVE-2021-3670, ensure that the LDB request has not timed out during filter processing as the LDAP server MaxQueryDuration is otherwise not honoured.
* Tue Jan 11 2022 Samuel Cabrero - Modify packaging to allow parallel installation with libldb1 (bsc#1192684): + Private libraries are installed in %{_libdir}/ldb2/ + Modules are installed in %{_libdir}/ldb2/modules
* Wed Nov 10 2021 Samuel Cabrero - Update to version 2.4.1 + Corrected python behaviour for \'in\' for LDAP attributes contained as part of ldb.Message; (bso#14845); + Fix memory handling in ldb.msg_diff; (bso#14836); + Corrected python docstrings
* Fri Sep 17 2021 Samuel Cabrero - Update to version 2.4.0 + Improve calculate_popt_array_length() + Use C99 initializers for builtin_popt_options[] + pyldb: Fix Message.items() for a message containing elements + pyldb: Add test for Message.items() + tests: Use ldbsearch \'--scope instead of \'-s\' + pyldb: fix a typo + Change page size of guidindexpackv1.ldb + Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream + attrib_handler casefold: simplify space dropping + fix ldb_comparison_fold off-by-one overrun + CVE-2020-27840: pytests: move Dn.validate test to ldb + CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode + CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds + CVE-2021-20277 ldb tests: ldb_match tests with extra spaces + improve comments for ldb_module_connect_backend() + test/ldb_tdb: correct introductory comments + ldb.h: remove undefined async_ctx function signatures + correct comments in attrib_handers val_to_int64 + dn tests use cmocka print functions + ldb_match: remove redundant check + add tests for ldb_wildcard_compare + ldb_match: trailing chunk must match end of string + pyldb: catch potential overflow error in py_timestring + ldb: remove some \'if PY3\'s in tests + Add missing break in switch statement
* Wed Mar 31 2021 Samuel Cabrero - Update to ldb 2.3.0
* Wed Mar 24 2021 Noel Power - Release ldb 2.2.1 + CVE-2020-27840: samba: Unauthenticated remote heap corruption via bad DNs; (bso#14595); (bsc#1183572). + CVE-2021-20277: samba: out of bounds read in ldb_handler_fold; (bso#14655); (bsc#1183574).
