Accepted openldap 2.4.40+dfsg-1+deb8u5 (source amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 11 Aug 2019 12:11:57 -0700
Source: openldap
Binary: slapd slapd-smbk5pwd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source amd64
Version: 2.4.40+dfsg-1+deb8u5
Distribution: jessie-security
Urgency: high
Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org>
Changed-By: Ryan Tandy <ryan@nardis.ca>
Description:
ldap-utils - OpenLDAP utilities
libldap-2.4-2 - OpenLDAP libraries
libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
libldap2-dev - OpenLDAP development libraries
slapd - OpenLDAP server (slapd)
slapd-dbg - Debugging information for the OpenLDAP server (slapd)
slapd-smbk5pwd - Keeps Samba and Kerberos passwords in sync within slapd.
Closes: 932997 932998 934277
Changes:
openldap (2.4.40+dfsg-1+deb8u5) jessie-security; urgency=high
.
* Fix slapd to restrict rootDN proxyauthz to its own databases
(CVE-2019-13057) (ITS#9038) (Closes: #932997)
* Fix slapd to enforce sasl_ssf ACL statement on every connection
(CVE-2019-13565) (ITS#9052) (Closes: #932998)
* Fix slapo-rwm to not free original filter when rewritten filter is invalid
(ITS#8964) (Closes: #934277, LP: #1838370)
Checksums-Sha1:
f239c92b6020ed8778aee2bc668afb01f62e9dec 2986 openldap_2.4.40+dfsg-1+deb8u5.dsc
668b2c65c4b109d2118bad0444321bd4affeef0d 184219 openldap_2.4.40+dfsg-1+deb8u5.diff.gz
c9f616c9d737e74e291508265ac57a7a0e94968e 1417246 slapd_2.4.40+dfsg-1+deb8u5_amd64.deb
bcfb23d1c944e526ab9abc53d50afd4c2bbcd909 83618 slapd-smbk5pwd_2.4.40+dfsg-1+deb8u5_amd64.deb
249d5057574695536e29c725adaaf96136254125 189106 ldap-utils_2.4.40+dfsg-1+deb8u5_amd64.deb
facb3dd45252e1e2ed6cef01095140c5465ac6a4 218508 libldap-2.4-2_2.4.40+dfsg-1+deb8u5_amd64.deb
df0524aa5c91d09733ef3de9ec9680fcf2cd4972 442000 libldap-2.4-2-dbg_2.4.40+dfsg-1+deb8u5_amd64.deb
5f98098471202e690cf5745bed294bbce303e761 323986 libldap2-dev_2.4.40+dfsg-1+deb8u5_amd64.deb
0138302c6634817dc6d70857f67a7c292d4d8a90 4900286 slapd-dbg_2.4.40+dfsg-1+deb8u5_amd64.deb
Checksums-Sha256:
9a20ba826557d4adacd51b31000ac006514ffa072aa8a75f9a6da5496606260f 2986 openldap_2.4.40+dfsg-1+deb8u5.dsc
a9836c1dbd548a6525964c3a128267834b004d1c467e27a2b63dd79dc4625072 184219 openldap_2.4.40+dfsg-1+deb8u5.diff.gz
762517977f1da4880658c6ac1b2837ee3e7a2ef7e113f8f8f660eae8ce478f2b 1417246 slapd_2.4.40+dfsg-1+deb8u5_amd64.deb
a024d4b1bfe4a97d217bd6b8e883af333bae50fb00636a0398d51a9f449fa2ec 83618 slapd-smbk5pwd_2.4.40+dfsg-1+deb8u5_amd64.deb
ce2103f20e32a8a9af4bea8589ba153b5044179c54d5c01c9ad70d2222650ce6 189106 ldap-utils_2.4.40+dfsg-1+deb8u5_amd64.deb
44a9ffe620e87960fbfc33b9631d630d04e7c6cfea061d00ce52d15cba1bd572 218508 libldap-2.4-2_2.4.40+dfsg-1+deb8u5_amd64.deb
98422cd17f55a0e64c6e5f1aa0e8b6ea5c7974a002e1f4c52808db0801d1535f 442000 libldap-2.4-2-dbg_2.4.40+dfsg-1+deb8u5_amd64.deb
2df10133925818824315b54ba2842ffdcec924a806bd86f38e1b0f3d26b9d781 323986 libldap2-dev_2.4.40+dfsg-1+deb8u5_amd64.deb
c8b5f61233f4809a3cf2ac4d73e2e71aeb5032a47984a405760fbab7b9fe3d08 4900286 slapd-dbg_2.4.40+dfsg-1+deb8u5_amd64.deb
Files:
02465ca3187c90e872ed16734992281f 2986 net optional openldap_2.4.40+dfsg-1+deb8u5.dsc
c594b2aa7ffddbbeb74540327d5ac4c2 184219 net optional openldap_2.4.40+dfsg-1+deb8u5.diff.gz
d370ae2c227949e79055f2e11ed6509f 1417246 net optional slapd_2.4.40+dfsg-1+deb8u5_amd64.deb
562a0e0a222c1db7e139f47f6641f0b7 83618 net extra slapd-smbk5pwd_2.4.40+dfsg-1+deb8u5_amd64.deb
8de48c015c28abc9fd18daa7ac271ff7 189106 net optional ldap-utils_2.4.40+dfsg-1+deb8u5_amd64.deb
264a8289eb13bf5b3601753f4e744533 218508 libs standard libldap-2.4-2_2.4.40+dfsg-1+deb8u5_amd64.deb
d1fb19375ff4cf08e82512c670c46ea8 442000 debug extra libldap-2.4-2-dbg_2.4.40+dfsg-1+deb8u5_amd64.deb
1da9ea993e22f45a9db4377f3723de1b 323986 libdevel extra libldap2-dev_2.4.40+dfsg-1+deb8u5_amd64.deb
ba9748a3442e69088657b7a4b90c9051 4900286 debug extra slapd-dbg_2.4.40+dfsg-1+deb8u5_amd64.deb
-----BEGIN PGP SIGNATURE-----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=XEKP
-----END PGP SIGNATURE-----
Reply to: