Changelog for libldap-data-2.6.8-2.2.noarch.rpm :

* Wed Aug 07 2024 Filip Kastl - Add back two hunks from gcc14.patch as gcc14-v2.patch. Not all bugs that gcc14.patch fixed were dealt with in the upstream -- one bug is caused by 0016-Clear-shared-key-only-in-close-function.patch and one bug still remains in the upstream.
* Wed Jul 31 2024 Jan Engelhardt - Update to relese 2.6.8
* slapd: ability to log directly to a file bypassing syslog
* back-ndb has been retired
* back-sql and back-perl have been deprecated
* lloadd enhancments:
* Additional load balancing strategies
* Additional options to improve coherence with certain controls and extended operations
* Ability to log directly to a file bypassing syslog- Delete gcc14.patch, openldap2-fb9e6a81bbee.patch (merged)- Drop rcslapd symlink
* Mon Jul 29 2024 Martin Jambor - Backported one hunk from upstream commit fb9e6a81bbee as openldap2-fb9e6a81bbee.patch to fix incompatible pointer type being passed to a function which is diagnosed as an error by GCC 14.
* Sat May 25 2024 Jan Engelhardt - Add gcc14.patch
* Sat May 11 2024 Andreas Stieger - update to 2.6.7:
* Added slapo-dynlist option to disable filter support
* Fixed liblber missing newline on long msg
* Fixed libldap exit handling with OpenSSL3
* Fixed libldap with TLS and multiple ldap URIs
* Fixed libldap OpenSSL cipher suite handling
* Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files
* Fixed lloadd to work when resolv.conf is missing
* Fixed lloadd handling of closing connection
* Fixed lloadd tiers to be correctly linked on startup
* Fixed slapd to honour disclose in matchedDN handling
* Fixed slapd handling of regex testing in ACLs
* Fixed slapd sync replication with glued database
* Fixed slapd-asyncmeta when remote suffix is empty
* Fixed slapo-dynlist so it can\'t be global
* Fixed slapo-homedir(5) attribute name for olcHomedirArchivePath
* Fri Nov 03 2023 Jan Engelhardt - Update to release 2.6.6
* Fixed libldap handling of TCP KEEPALIVE options
* Fixed slapd callback handling with overlays that do extended operations
* Tue Sep 05 2023 Thorsten Kukuk - Disable SLP by default for Factory and ALP (bsc#1214884)
* Sat Apr 15 2023 Dirk Müller - update to 2.6.4:
* Fixed client tools to remove \'h\' and \'p\' options
* Fixed ldapsearch memory leak with paged results (ITS#9860)
* Fixed libldap ldif_open_urlto check for failure (ITS#9904 CVE-2023-2953 boo#1211795)
* Fixed libldap ldap_url_parsehosts check for failure
* Fixed liblunicode UTF8bvnormalize buffer size (ITS#9955)
* Fixed lloadd memory leaks (ITS#9907)
* Fixed lloadd shutdown code to protect memory correctly
* Fixed lloadd race in epoch.c (ITS#9947)
* Fixed lloadd potential deadlock with cn=monitor (ITS#9951)
* Fixed lloadd to keep listener base around when not active
* Fixed lloadd object reclamation sequencing (ITS#9983)
* Fixed slapd memory leak with olcAuthIDRewrite (ITS#6035)
* Fixed slapd free of redundant cmdline option (ITS#9912)
* Fixed slapd transactions extended operations cleanup after
* Fixed slapd deadlock with replicated cn=config
* Fixed slapd connection close logic (ITS#9991)
* Fixed slapd bconfig locking of cn=config entries (ITS#9045)
* Fixed slapd-mdb max number of index databases to 256
* Fixed slapd-mdb to always release entries from ADD operations
* Fixed slapd-mdb to fully init empty DN in tool_entry_get
* Fixed slapd-monitor memory leaks with lloadd (ITS#9906)
* Fixed slapd-monitor to free remembered cookies (ITS#9339)
* Fixed slapo-accesslog reqStart ordering matching rule
* Fixed slapo-deref memory leak (ITS#9924)
* Fixed slapo-dynlist to ignore irrelevant objectClasses
* Fixed slapo-dynlist to avoid unnecessary searches (ITS#9929)
* Fixed slapo-dynlist to mark internal searches as such
* Fixed slapo-pcache crash in consistency_check (ITS#9966)
* Fixed slapo-remoteauth memory leaks (ITS#9438)
* Fixed slapo-rwm memory leaks (ITS#9817)
* Build Environment
* Fixed ancient DOS related ifdef checks (ITS#9925)
* Fixed build process to not use gmake specific features
* Fixed source tree to remove symlinks (ITS#9926)
* Fixed slapo-otp testdir creation (ITS#9437)
* Fixed slapd-tester memory leak (ITS#9908)
* Fixed usage of non-standard C syntax (ITS#9898, ITS#9899, ITS#9901)
* Fixed usage of bashism (ITS#9900)
* Fixed test suite portability (ITS#9931)
* Documentation
* Fixed ldap_bind(3) to document ber_bvfree in ldap_sasl_bind (ITS#9976)
* Fixed slapo-asyncmeta(5) to clarify scheduling for target connections (ITS#9941)
* Fixed slapo-dynlist(5) to clarify configuration settings (ITS#9957)
* Fixed slapo-unique(5) to clarify when quoting should be used (ITS#9915)
* Minor cleanup
* Sat Dec 10 2022 Dirk Müller - add reproducible.patch to avoid using compile-time specific date/time constructs
* Mon Sep 26 2022 William Brown - bsc#1202931 - CVE-2022-31253 - Openldap start script allowed the ldap user to privilege escalate to root due to unbound chown commands.
* Thu Jul 14 2022 Michael Ströder - removed obsolete 0017-Resolve-error-handling-in-new-ctx-when-global.patch- update to 2.6.3
* Fixed librewrite declaration of calloc (ITS#9841)
* Fixed libldap to check for NULL ld (ITS#9157)
* Fixed libldap memory leaks (ITS#9876)
* Fixed lloadd to correctly tag Notice of Disconnection (ITS#9856)
* Fixed slapd delta-sync DN leak on ADD ops (ITS#9866)
* Fixed slapd replication with back-glue (ITS#9868)
* Fixed slapd lastbind replication with chaining (ITS#9863)
* Fixed slapd-ldap to correctly set authzid (ITS#9863)
* Fixed slapd-mdb to check for stale readers on MDB_READERS_FULL (ITS#7165)
* Fixed slapd-mdb indexer task with replicated config (ITS#9858)
* Fixed slapo-accesslog onetime memory leak (ITS#9864)
* Fixed slapo-ppolicy interaction with slapo-rwm (ITS#9871)
* Fixed slapo-rwm to handle escaping special characters (ITS#9817)
* Fixed slapo-syncprov memory leaks (ITS#9867)
* Fixed slapo-syncprov fallback in delta-sync mode (ITS#9823)
* Fixed slapo-unique to not release NULL entry (ITS#8245)
* doc: Fixed ldap_get_option(3) to clarify ldap_get/set_option restrictions (ITS#9824)
* Mon May 23 2022 Michael Ströder - Update to release 2.6.2
* Added support for OpenSSL 3.0 (ITS#9436)
* Fixed ldapdelete to prune LDAP subentries (ITS#9737)
* Fixed libldap to drop connection when non-LDAP data is received (ITS#9803)
* Fixed libldap to allow newlines at end of included file (ITS#9811)
* Fixed slapd slaptest conversion of olcLastBind (ITS#9808)
* Fixed slapd to correctly init global_host earlier (ITS#9787)
* Fixed slapd bconfig locking for cn=config replication (ITS#9584)
* Fixed slapd usage of thread local counters (ITS#9789)
* Fixed slapd to clear runqueue task correctly (ITS#9785)
* Fixed slapd idletimeout handling (ITS#9820)
* Fixed slapd syncrepl handling of new sessions (ITS#9584)
* Fixed slapd to clear connections on bind (ITS#9799)
* Fixed slapd to correctly advance connections index (ITS#9831)
* Fixed slapd syncrepl ODSEE replication of unknown attr (ITS#9801)
* Fixed slapd-asyncmeta memory leak in keepalive setting, slapd-ldap memory leak in keepalive setting, SEGV on config rewrite, ordering on config rewrite, memory leak in keepalive setting (ITS#9802)
* Fixed slapo-pcache SEGV & slapd-monitor SEGV on shutdown (ITS#9809)
* Fixed slapd-monitor crash when hitting sizelimit (ITS#9832)
* Fixed slapd-sql to properly escape filter value (ITS#9815)
* Fixed slapo-dynlist dynamic group regression (ITS#9825)
* Fixed slapo-ppolicy operation handling to be consistent (ITS#9794)
* Fixed slapo-translucent to correctly duplicate substring filters (ITS#9818)
* Contrib:
* Update ppm module to the 2.1 release (ITS#9814)
* Documentation:
* admin26: Document new lloadd features (ITS#9780)
* Fixed slapd.conf(5)/slapd-config(5) syncrepl sizelimit/timelimit documentation (ITS#9804)
* Fixed slapd-sock(5) to clarify \"sockresps result\" behavior (ITS#8255)
* Thu May 12 2022 William Brown - bsc#1199277 - Resolve segfault when calling new ctx with global ctx
* 0017-Resolve-error-handling-in-new-ctx-when-global.patch
* Mon Apr 11 2022 Michael Ströder - Use libargon2 instead of libsodium because it supports p>1- Added new contrib overlays: authzid, datamorph, variant, vc
* Sat Apr 02 2022 Jan Engelhardt - Update to release 2.6.1
* Ability to log directly to a file bypassing syslog
* back-ndb is retired
* back-sql and back-perl are deprecated
* lloadd(8): Additional load balancing strategies.
* lloadd(8): Additional options to improve coherence with certain controls and extended operations.
* Sat Mar 26 2022 Stephan Kulow - Add _multibuild support to integrate the build of libldapcpp-devel to drop the outdated copy