** Description changed: [ Impact ] This bug tracks the following MRE updates for the OpenLDAP package: * MRE to backport latest stable OpenLDAP 2.6 release present in devel, 2.6.13. * resolute: to 2.6.13 (from 2.6.10+dfsg-1ubuntu5) * noble: to 2.6.13 (from 2.6.10+dfsg-0ubuntu0.24.04.1) These updates only include bug fixes, following the SRU policy exception defined at https://documentation.ubuntu.com/sru/en/latest/reference/exception- OpenLDAP-Updates/ [ Major Changes ] No major changes, only bugfixes: https://www.openldap.org/software/release/changes_lts.html https://lists.openldap.org/hyperkitty/list/[email protected]/thread/THUPHYR42NNOTRJXYUUXO5BVQTTA64DS/ [ Test Plan ] See https://documentation.ubuntu.com/sru/en/latest/reference/exception- OpenLDAP-Updates/#qa 1. Upstream gitlab pipeline results: https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_6_13 2. Upstream "call for testing": 2.6.13 https://lists.openldap.org/hyperkitty/list/openldap- [email protected]/message/7PYPTFFD6TYTEG2XZLKPV4DJK5SJ2X2G/ 3. As specified in the MRE page for OpenLDAP, the test plan is to build the package in "-proposed" and make sure that (a) all build-time tests pass and (b) all autopkgtest runs (from reverse dependencies) also pass. * Build log confirming that the build-time testsuite has been performed and completed successfully: - stonking: https://launchpad.net/ubuntu/+source/openldap/2.6.13+dfsg-1ubuntu3/+build/33526432 - resolute: TODO - noble: TODO * Test results: - TODO autopkgtest results and discussion [ Where problems could occur ] Upstream tests are always executed during build-time. There are many reverse dependencies whose dep8 tests depend on OpenLDAP so the coverage is good. Nevertheless, there is always a risk for something to break since we are dealing with a microrelease upgrade. Whenever a test failure is detected, we will be on top of it and make sure it doesn't affect existing users. - TODO: consider any other regression potential specific to the version - being updated and list if any or list N/A. OpenLDAP is used as a - library by many other projects, so care must be taken when considering - how this MRE might affect these dependencies. + User regression potential is in two bugfixes from upstream: + 1. ITS#10442 to fixes a copy-paste bug where the maxttl config directive was silently setting di_min_ttl instead of di_max_ttl. Any resolute deployment using slapo-dds with maxttl configured was actually getting that value applied to min_ttl instead — now it will apply correctly. Since a new strict startup validation was added, the overlay now refuses to initialize (return 1) if default_ttl > max_ttl or min_ttl > max_ttl/default_ttl. If a deployment's config only "worked" because of the old swapped-variable bug, slapd could now fail to start the dds overlay on upgrade. But this only affects mis-configured setups. + + 2. ITS#10429 LDIF parsing in ldif.c + ldif_parse_line() now rejects lines with an empty attribute type (returns parse error instead of silently mis-computing length — there was an off-by-one bug in the old bv_len calculation). Whitespace handling after : changed: for base64 (::) and URL (:<) values, all whitespace is still skipped; for plain values, only literal space (0x20) is skipped now, not tabs or other whitespace. LDIF with tab-separated attr:\tvalue will now keep the tab as part of the value instead of silently stripping it. + Impact: any tool linking against libldap's C LDIF parser (ldapmodify/ldapadd, slapadd, custom LDIF-generating scripts) could see previously-tolerated malformed/tab-formatted LDIF behave differently. * Current versions in supported releases that got updates: - stonking | 2.6.13+dfsg-1ubuntu3 - resolute | 2.6.10+dfsg-1ubuntu5 - noble | 2.6.10+dfsg-0ubuntu0.24.04.1 [ Other Info ] This is a recurring effort. For reference, here are previous OpenLDAP SRU backports: * LP: #1977627 * LP: #1983618 * LP: #2007625 * LP: #2027079 * LP: #2029170 * LP: #2040465 * LP: #2067745 * LP: #2112527 * LP: #2127665 * LP: #2153487 (this bug)
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2153487 Title: Backport openldap for stonking cycle To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/2153487/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
