openldap: Update to version 2.7.1
Commit Message
- Update from version 2.6.10 to 2.7.1
- Update of rootfile
- Changelog
2.7.1
Fixed libldap BER leak on notice of disconnection (ITS#10584)
Fixed libldap request leak on malformed BER response (ITS#10577)
Fixed libldap error stack handling with OpenSSL < 4.0 (ITS#10578)
Fixed lload non-blocking BIO handling in SSL renegotiations (ITS#10579)
Fixed slapo-ppolicy handling of old passwords (ITS#10565)
Documentation
slapo-pcache added note about referral chasing (ITS#10560)
Minor Cleanup
ITS#10561
ITS#10564
ITS#10566
ITS#10568
ITS#10574
ITS#10576
ITS#10582
2.7.0
The following new components and capabilities are highlighted for this release:
Featured Enhancements
* libldap enhancements:
DNS SRV record support now also supports ldaps
Support for TPM chips, smartcards, or hardware security modules
Support for the mbedTLS library
* back-mdb enhancements:
Now using LMDB 1.0 which adds page-level database encryption and/or checksums
New OpenLDAP Server Capabilities
General
* New Access Control Features
There is now an explicit "increment" permission for ACLs
ACLs can now be applied to operations and controls
* New lloadd Configuration support
The listen feature can now be modified at runtime
* Index keys use 64 bit hashes by default now instead of 32 bit
Details
Updates to Existing Backends
* back-asyncmeta has improved target connection management
Updates to Existing Overlays
The following updates have been made to existing overlays:
* ppolicy: Added support for dynamic policy selection, per-policy default password
hashes, rehashing of passwords on simple bind
* otp: Added support for the LDAP Compare operation
Deprecated Features
* GnuTLS is no longer recommended and scheduled for removal in OpenLDAP 2.8
Obsolete Features that have been removed
* back-perl and back-sql have been removed
2.6.15
Fixed libldap BER leak on notice of disconnection (ITS#10584)
Fixed libldap request leak on malformed BER response (ITS#10577)
Fixed libldap error stack handling with OpenSSL < 4.0 (ITS#10578)
Fixed lload non-blocking BIO handling in SSL renegotiations (ITS#10579)
Fixed slapo-ppolicy handling of old passwords (ITS#10565)
Documentation
slapo-pcache added note about referral chasing (ITS#10560)
Minor Cleanup
ITS#10561
ITS#10564
ITS#10566
ITS#10574
ITS#10582
2.6.14
Added libldap support for OpenSSL 4.0 series (ITS#10498)
Fixed lloadd to report errors from bindconf_parse (ITS#10525)
Fixed lloadd incoming message id validation (ITS#10505)
Fixed slapd to report errors from bindconf_parse (ITS#10525)
Fixed slapd-mdb IDL code to optimize the intersection of a list and a range (ITS#10526)
Fixed slapo-constraint count constraint with more than one attribute (ITS#10491)
Fixed slapadd to ignore dynamic attributes in input LDIF (ITS#10501)
Minor Cleanup
ITS#8064
ITS#9909
ITS#10026
ITS#10467
ITS#10469
ITS#10470
ITS#10471
ITS#10473
ITS#10476
ITS#10479
ITS#10480
ITS#10481
ITS#10482
ITS#10483
ITS#10484
ITS#10485
ITS#10489
ITS#10492
ITS#10493
ITS#10478
ITS#10495
ITS#10496
ITS#10500
ITS#10503
ITS#10510
ITS#10514
ITS#10516
ITS#10524
ITS#10530
ITS#10532
ITS#10533
ITS#10535
ITS#10541
ITS#10543
ITS#10548
ITS#10550
ITS#10554
ITS#10556
ITS#10559
2.6.13
Fixed liblber ber_bvreplace_x potential NULL dereference (ITS#10438)
Fixed libldap heap buffer overflow in parse_whsp (ITS#10430)
Fixed slap(add|modify) to not recreate config frontend (ITS#10414)
Fixed slapd authzPrettyNormal function memory leak (ITS#10446)
Fixed slapd memory leak in get_mra function (ITS#10445)
Fixed slapd memory leak in parseAssert and parseReturnFilter functions (ITS#10450)
Fixed slapd memory leak in parseReadAttrs function (ITS#10449)
Fixed slapd slapd_sasl_mechs race condition (ITS#10443)
Fixed slapd syncrepl to be more efficient with refresh task (ITS#10413)
Fixed slapd unbind/close race condition (ITS#10258)
Fixed slapd-ldap memory leak in ldap_chain_parse_ctrl function (ITS#10447)
Fixed slapd-mdb always initialize pausepoll (ITS#10191)
Fixed slapo-constraint to not propagate request controls to internal ops (ITS#10440)
Fixed slapo-dds minttl incorrectly set in certain scenarios (ITS#10442)
Fixed slapo-memberof to not propagate request controls to internal ops (ITS#10440)
Fixed slapo-nestgroup to not propagate request controls to internal ops (ITS#10440)
Fixed slapo-retcode to not propagate request controls to internal ops (ITS#10440)
Fixed slapo-syncprov to not propagate request controls to internal ops (ITS#10440)
Fixed slapo-syncprov memory leak in syncprov_parseCtrl (ITS#10448)
Fixed slapo-translucent to not propagate request controls to internal ops (ITS#10440)
Contrib
Fixed slapo-autogroup to not propagate request controls to internal ops (ITS#10440)
Minor Cleanup
ITS#10427
ITS#10425
ITS#10451
2.6.12
Fixed libldap to reject empty types in LDIF (ITS#10429)
Fixed libldap to not scroll past nul bytes (ITS#10430)
Fixed libldap to enforce stop when encountering nul-leading line (ITS#10431)
2.6.11
Fixed slapd to use fresh timestamp for lastbind (ITS#10379)
Fixed slapd delta-syncrepl to always use logDB rootdn (ITS#10360)
Fixed slapd reverse lookup of proxied IPv6 addresses (ITS#10387)
Fixed slapd logging buffer overflow (ITS#10410)
Fixed slapd-ldap response when invalid secprops is configured (ITS#10392)
Fixed slapd-mdb error when deleting last child of a branch (ITS#10304)
Fixed slapd-mdb check for pool pause in search (ITS#10191)
Fixed slapo-memberof clash with refint on subtree rename (ITS#10398)
Fixed slapo-syncprov use correct rootDN for accesslog replay (ITS#10385)
Minor Cleanup
ITS#7901
ITS#10329
ITS#10335
ITS#10339
ITS#10343
ITS#10344
ITS#10345
ITS#10347
ITS#10348
ITS#10349
ITS#10353
ITS#10358
ITS#10359
ITS#10366
ITS#10367
ITS#10369
ITS#10370
ITS#10371
ITS#10372
ITS#10374
ITS#10375
ITS#10376
ITS#10377
ITS#10379
ITS#10380
ITS#10381
ITS#10384
ITS#10388
ITS#10390
ITS#10391
ITS#10400
ITS#10401
ITS#10408
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/openldap | 7 ++-----
lfs/openldap | 6 +++---
2 files changed, 5 insertions(+), 8 deletions(-)
@@ -21,15 +21,14 @@
#usr/include/ldap_utf8.h
#usr/include/ldif.h
#usr/include/openldap.h
-#usr/include/slapi-plugin.h
#usr/lib/liblber.la
#usr/lib/liblber.so
usr/lib/liblber.so.2
-usr/lib/liblber.so.2.0.200
+usr/lib/liblber.so.2.0.201
#usr/lib/libldap.la
#usr/lib/libldap.so
usr/lib/libldap.so.2
-usr/lib/libldap.so.2.0.200
+usr/lib/libldap.so.2.0.201
#usr/lib/pkgconfig/lber.pc
#usr/lib/pkgconfig/ldap.pc
#usr/share/man/man1/ldapadd.1
@@ -240,10 +239,8 @@ usr/lib/libldap.so.2.0.200
#usr/share/man/man5/slapd-monitor.5
#usr/share/man/man5/slapd-null.5
#usr/share/man/man5/slapd-passwd.5
-#usr/share/man/man5/slapd-perl.5
#usr/share/man/man5/slapd-relay.5
#usr/share/man/man5/slapd-sock.5
-#usr/share/man/man5/slapd-sql.5
#usr/share/man/man5/slapd-wt.5
#usr/share/man/man5/slapd.access.5
#usr/share/man/man5/slapd.backends.5
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 2.6.10
+VER = 2.7.1
THISAPP = openldap-$(VER)
DL_FILE = $(THISAPP).tgz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = e3fce31795ed9eda3443b824c245951d655af0660f316d8b6e15264999a1ee3eaf7e4b7e901ad007361027ade9bcb7b102212d42939dc98d4229dc6983c381dc
+$(DL_FILE)_BLAKE2 = cad365ea14819b4e78c0104c687a3b6c6aa67de2b48a2bdf6a31c0e39a9e5e49f8d0e61e80ee43ba5c84b0a986a4bc683b404b6ac6f391667aec3f16333244ff
install : $(TARGET)