Package "slapd-contrib"

openldap (2.6.13+dfsg-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream version (LP: #2153487)
    - 2.6.13
      - Fixed liblber ber_bvreplace_x potential NULL dereference (ITS#10438)
      - Fixed libldap heap buffer overflow in parse_whsp (ITS#10430)
      - Fixed slap(add|modify) to not recreate config frontend (ITS#10414)
      - Fixed slapd authzPrettyNormal function memory leak (ITS#10446)
      - Fixed slapd memory leak in get_mra function (ITS#10445)
      - Fixed slapd memory leak in parseAssert and parseReturnFilter functions
        (ITS#10450)
      - Fixed slapd memory leak in parseReadAttrs function (ITS#10449)
      - Fixed slapd slapd_sasl_mechs race condition (ITS#10443)
      - Fixed slapd syncrepl to be more efficient with refresh task (ITS#10413)
      - Fixed slapd unbind/close race condition (ITS#10258)
      - Fixed slapd-ldap memory leak in ldap_chain_parse_ctrl function
        (ITS#10447)
      - Fixed slapd-mdb always initialize pausepoll (ITS#10191)
      - Fixed slapo-constraint to not propagate request controls to internal ops
        (ITS#10440)
      - Fixed slapo-dds minttl incorrectly set in certain scenarios (ITS#10442)
      - Fixed slapo-memberof to not propagate request controls to internal ops
        (ITS#10440)
      - Fixed slapo-nestgroup to not propagate request controls to internal
        ops (ITS#10440)
      - Fixed slapo-retcode to not propagate request controls to internal ops
        (ITS#10440)
      - Fixed slapo-syncprov to not propagate request controls to internal ops
        (ITS#10440)
      - Fixed slapo-syncprov memory leak in syncprov_parseCtrl (ITS#10448)
      - Fixed slapo-translucent to not propagate request controls to internal
        ops (ITS#10440)
      - Contrib
        - Fixed slapo-autogroup to not propagate request controls to internal
          ops (ITS#10440)

    - 2.6.12 Release (2026/01/29)
      - Fixed libldap to reject empty types in LDIF (ITS#10429)
      - Fixed libldap to not scroll past nul bytes (ITS#10430)
      - Fixed libldap to enforce stop when encountering nul-leading line
        (ITS#10431)

    - 2.6.11 Release (2026/01/28)
      - Fixed slapd to use fresh timestamp for lastbind (ITS#10379)
      - Fixed slapd delta-syncrepl to always use logDB rootdn (ITS#10360)
      - Fixed slapd reverse lookup of proxied IPv6 addresses (ITS#10387)
      - Fixed slapd logging buffer overflow (ITS#10410)
      - Fixed slapd-ldap response when invalid secprops is configured
        (ITS#10392)
      - Fixed slapd-mdb error when deleting last child of a branch (ITS#10304)
      - Fixed slapd-mdb check for pool pause in search (ITS#10191)
      - Fixed slapo-memberof clash with refint on subtree rename (ITS#10398)
      - Fixed slapo-syncprov use correct rootDN for accesslog replay
        (ITS#10385)

  * d/p/ITS-10508-syncrepl-set-no_opattrs-on-modrdn.patch: fix test017
    failing on 32-bit architectures (cherry-picked from Debian 2.6.13+dfsg-1)

 -- Jonas Jelten Fri, 09 Oct 2026 15:31:30 +0200

  openldap (2.6.10+dfsg-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream version (LP: #2127665):
    - 2.6.10:
      - Added slapd microsecond timestamp format for local logging (ITS#10140)
      - Fixed libldap ldap_result behavior with LDAP_MSG_RECEIVED (ITS#10229)
      - Fixed lloadd handling of starttls critical (ITS#10323)
      - Fixed slapd syncrepl when used with slapo-rwm (ITS#10290)
      - Fixed slapd regression with certain searches (ITS#10307)
      - Fixed slapo-autoca olcAutoCAserverClass object (ITS#10288)
      - Fixed slapo-pcache caching behaviors (ITS#10270)

    - 2.6.9:
      - Fixed libldap TLS connection timeout handling (ITS#8047)
      - Fixed libldap GnuTLS incompatible pointer type (ITS#10253)
      - Fixed libldap OpenSSL set_ciphersuite error handling (ITS#10223)
      - Fixed libldap to check for OpenSSL EVP_Digest* failure (ITS#10224)
      - Fixed slapd cn=config disallowed modification of cn=schema (ITS#10256)
      - Fixed slapd syncrepl assert during refresh at shutdown (ITS#10232)
      - Fixed slapd syncrepl retry state during refreshDone (ITS#10234)
      - Fixed slapd-ldap use of multi-precision add for op counters (ITS#10237)
      - Fixed slapd-mdb idl intersection (ITS#10233)
      - Fixed slapd-wt idl intersection (ITS#10233)
      - Fixed slapo-memberof to omit dynamic values (ITS#10230)
      - Fixed slapo-nestgroup leak in nestgroup_memberFilter (ITS#10249)
      - Fixed slapo-translucent regression with subordinate databases (ITS#10248)
      - Fixed slapo-translucent regression when requesting attributes (ITS#10272)
      - Fixed slappw-argon2 defaults to be more secure (ITS#9827)

    - 2.6.8:
      - Fixed libldap exit handling with OpenSSL3 again (ITS#9952)
      - Fixed libldap OpenSSL channel binding digest (ITS#10216)
      - Fixed slapd handling of large uid/gids peercred auth (ITS#10211)
      - Fixed slapd-asyncmeta/meta target structure allocations (ITS#10197)
      - Fixed slapd-meta with dynlist (ITS#10164)
      - Fixed slapd-meta binds when proxying internal op (ITS#10165)
      - Added slapo-nestgroup overlay (ITS#10161)
      - Added slapo-memberof 'addcheck' option (ITS#10167)
      - Fixed slapo-accesslog startup initialization (ITS#10170)
      - Fixed slapo-constraint double free on invalid attr (ITS#10204)
      - Fixed slapo-dynlist with abandoned operations (ITS#10044)
      - Build
        - Fixed build with gcc14.x (ITS#10166)
        - Fixed back-perl with clang15 (ITS#10177)
        - Fixed to reduce systemd dependencies (ITS#10214)
      - Contrib
        - Added slapo-alias contrib module (ITS#10104, ITS#10182)
        - Fixed slapo-autogroup to work with slapo-dynlist (ITS#10185)
        - Fixed smbk5pwd implicit function declaration (ITS#10206)
      - Documentation
        - Fixed slapo-memberof exattr requirements (ITS#7400)
        - Fixed slapo-memberof is no longer deprecated (ITS#7400)

    - d/p/lp2090806...TLS-...timeout-handling: removed
      [upstream in 2.6.9]
    - d/p/smbk5pwd-implicit-declaration: removed
      [upstream in 2.6.8]
    - d/p/64-bit-time-t-compat: adjust for 2.6.10
    - d/slapd.{install,manpages}: install new slapo-nestgroup overlay
      [from 2.6.8+dfsg-1~exp2]
    - d/slapd.manpages: add slapo-autogroup overlay
      [from 2.6.8+dfsg-1~exp2]
  * pbkdf2 iteration configuration support (LP: #2125685)
    - d/p/lp2125685-pbkdf2-configurable-rounds: make iterations configurable
    - d/p/lp2125685-pbkdf2-fix-iteration-arg: fix iteration argument index
    - d/t/pbkdf2-contrib: test if pbkdf2 hashing rounds are adjustable
  * Enable build of ppm password quality check module (LP: #2121816)
    - d/rules: build ppm password quality module
    - d/p/contrib-makefiles: add build adjustment from 2.6.9+dfsg-1~exp1 (#1039740)
    - d/p/ppm-cross: cross-build patch from 2.6.8+dfsg-1~exp1 (#1079533)
    - d/t/ppm-contrib: test ppm password quality module
    - d/control: add build dependency on libcrack2-dev for ppm
    - d/slapd-contrib.{examples,install,manpages}: add ppm

 -- Jonas Jelten <email address hidden> Tue, 23 Sep 2025 18:26:39 +0200

  openldap (2.6.7+dfsg-1~exp1ubuntu8.2) noble; urgency=medium

  * Fixup TIMEOUT and NETWORK_TIMEOUT options so they work correctly
    when SSL is involved. Before they would never timeout, causing
    hangs on connection failure. Now they timeout as expected.
    (LP: #2090806)
    - d/p/lp2090806-ITS-8047-Fix-TLS-connection-timeout-handling.patch

 -- Matthew Ruffell <email address hidden> Mon, 09 Dec 2024 15:50:18 +1300