New upstream microrelease 2.5.13
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| openldap (Ubuntu) |
Fix Released
|
High
|
Sergio Durigan Junior | ||
| Jammy |
Fix Released
|
High
|
Sergio Durigan Junior | ||
Bug Description
[ Impact ]
* MRE for the latest stable OpenLDAP 2.5.x release, 2.5.13.
This update includes bugfixes only following the SRU policy exception defined at https:/
[ Major Changes ]
* See the list of bugs fixed in this release here:
https://<email address hidden>
[ Test Plan ]
* Upstream gitlab pipeline results: https:/
* Upstream "call for testing": https://<email address hidden>
* As described in the MRE wiki page for OpenLDAP, the test plan is to build the package in bileto and make sure that (1) all build-time tests pass and (2) all autopkgtest runs (from reverse dependencies) also pass.
* Build log (amd64) confirming that the build-time testsuite has been performed and completed successfully: https:/
* Bileto ticket: https:/
[ Where problems could occur ]
* Upstream tests are always executed during build-time. There are many reverse dependencies whose dep8 tests depend on OpenLDAP so the coverage is good. Nevertheless, there is always a risk for something to break since we are dealing with a microrelease upgrade. Whenever a test failure is detected, we will be on top of it and make sure it doesn't affect existing users.
[ Other Info ]
* This is a reoccurring MRE. See below for links to previous OpenLDAP MREs.
* CVEs fixed by this release:
- None.
Current versions in supported releases that got updates:
openldap | 2.5.12+
Special cases:
- None.
Previous MREs for OpenLDAP:
- https:/
As usual we test and prep from the PPA and then push through SRU/Security as applicable.
Related branches
- git-ubuntu bot: Approve
- Bryce Harrington (community): Approve
- Canonical Server Reporter: Pending requested
-
Diff: 2629 lines (+1610/-143)50 files modifiedCHANGES (+25/-0)
build/version.var (+4/-4)
clients/tools/ldapsearch.c (+4/-3)
configure (+8/-1)
configure.ac (+9/-2)
contrib/slapd-modules/autogroup/autogroup.c (+1/-1)
contrib/slapd-modules/autogroup/slapo-autogroup.5 (+5/-0)
contrib/slapd-modules/emptyds/Makefile (+78/-0)
contrib/slapd-modules/emptyds/README (+66/-0)
contrib/slapd-modules/emptyds/emptyds.c (+325/-0)
contrib/slapd-modules/emptyds/slapo-emptyds.5 (+68/-0)
contrib/slapd-modules/emptyds/tests/Rules.mk (+23/-0)
contrib/slapd-modules/emptyds/tests/data/emptyds.conf (+54/-0)
contrib/slapd-modules/emptyds/tests/data/test001.ldif (+71/-0)
contrib/slapd-modules/emptyds/tests/data/test001.out (+54/-0)
contrib/slapd-modules/emptyds/tests/run (+218/-0)
contrib/slapd-modules/emptyds/tests/scripts/all (+92/-0)
contrib/slapd-modules/emptyds/tests/scripts/test001-emptyds (+137/-0)
debian/changelog (+8/-0)
doc/guide/admin/guide.html (+1/-1)
doc/man/man3/ldap_get_option.3 (+2/-2)
doc/man/man5/slapd-ldap.5 (+3/-1)
doc/man/man5/slapd-meta.5 (+3/-1)
libraries/Makefile.in (+1/-1)
libraries/libldap/deref.c (+4/-10)
libraries/libldap/ldif.c (+2/-1)
libraries/libldap/turn.c (+6/-6)
libraries/libldap/txn.c (+6/-6)
libraries/librewrite/rewrite-int.h (+5/-5)
servers/lloadd/operation.c (+4/-3)
servers/slapd/back-mdb/id2entry.c (+10/-0)
servers/slapd/backend.c (+13/-18)
servers/slapd/backglue.c (+6/-0)
servers/slapd/bind.c (+1/-1)
servers/slapd/ctxcsn.c (+14/-14)
servers/slapd/daemon.c (+2/-3)
servers/slapd/frontend.c (+1/-1)
servers/slapd/overlays/accesslog.c (+2/-0)
servers/slapd/overlays/pcache.c (+0/-1)
servers/slapd/overlays/ppolicy.c (+13/-11)
servers/slapd/overlays/syncprov.c (+60/-10)
servers/slapd/overlays/translucent.c (+1/-1)
servers/slapd/overlays/unique.c (+18/-14)
servers/slapd/slap.h (+9/-3)
servers/slapd/syncrepl.c (+6/-9)
tests/data/slapd-deltasync-provider.conf (+4/-0)
tests/progs/Makefile.in (+1/-1)
tests/progs/slapd-watcher.c (+14/-7)
tests/scripts/test020-proxycache (+5/-0)
tests/scripts/test043-delta-syncrepl (+143/-1)
| Changed in openldap (Ubuntu Jammy): | |
| status: | New → In Progress |
| importance: | Undecided → High |
| assignee: | nobody → Sergio Durigan Junior (sergiodj) |
| Changed in openldap (Ubuntu): | |
| status: | In Progress → Invalid |
| assignee: | Sergio Durigan Junior (sergiodj) → nobody |
| description: | updated |
| tags: | added: server-todo |
| tags: | added: needs-mre-backport |
| Changed in openldap (Ubuntu): | |
| milestone: | ubuntu-22.08 → none |
| description: | updated |
| Steve Langasek (vorlon) wrote Please test proposed package | #1 |
| Changed in openldap (Ubuntu Jammy): | |
| status: | In Progress → Fix Committed |
| tags: | added: verification-needed verification-needed-jammy |
| Sergio Durigan Junior (sergiodj) wrote | #2 |
| tags: |
added: verification-done verification-done-jammy removed: server-todo verification-needed verification-needed-jammy |
| Launchpad Janitor (janitor) wrote | #3 |
| Changed in openldap (Ubuntu Jammy): | |
| status: | Fix Committed → Fix Released |
| Robie Basak (racb) wrote Update Released | #4 |
| Changed in openldap (Ubuntu): | |
| status: | Invalid → Triaged |
| Changed in openldap (Ubuntu): | |
| assignee: | nobody → Sergio Durigan Junior (sergiodj) |
| Launchpad Janitor (janitor) wrote | #5 |
| Changed in openldap (Ubuntu): | |
| status: | Triaged → Fix Released |
| tags: | removed: needs-mre-backport |
Hello Sergio, or anyone else affected,
Accepted openldap into jammy-proposed. The package will build now and be available at https:/
Please help us by testing this new package. See https:/
If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-
Further information regarding the verification process can be found at https:/
N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.