ldb (2:1.1.24-1ubuntu3.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Heap corruption via crafted DN strings
    - debian/patches/CVE-2020-27840.patch: avoid head corruption in
      ldb_dn_explode in common/ldb_dn.c.
    - CVE-2020-27840
  * SECURITY UPDATE: Out of bounds read in AD DC LDAP server
    - debian/patches/CVE-2021-20277.patch: stay in bounds in
      common/attrib_handlers.c.
    - CVE-2021-20277

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 24 Mar 2021 08:04:37 -0400

ldb (2:1.1.24-1ubuntu3.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Out of bound read in ldb_wildcard_compare
    - debian/patches/CVE-2019-3824-1.patch: fix length.
    - debian/patches/CVE-2019-3824-2.patch: add extra comments.
    - debian/patches/CVE-2019-3824-3.patch: improve code style.
    - debian/patches/CVE-2019-3824-4.patch: use talloc_zero.
    - debian/patches/CVE-2019-3824-5.patch: check tree operation.
    - debian/patches/CVE-2019-3824-6.patch: fix end of data check.
    - CVE-2019-3824

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 25 Feb 2019 08:18:19 -0500

ldb (2:1.1.24-1ubuntu3) xenial; urgency=medium

  * Build Python3 bindings.
  * Bump debhelper and standards version.
  * Do not generate symbols for the extension module
  * Do not encode the SOABI and the multiarch string into the pytalloc-util
    library, just append a '-py3'.
  * Make the build log a bit more verbose.
  * Remove empty maintainer script.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 18 Feb 2016 18:17:39 +0100

ldb (2:1.1.24-1ubuntu1) xenial; urgency=medium

  * Merge with Debian, remaining changes:
    - debian/patches/skip-ftbfs-tests-s390x.patch: Skip FTBFS tests cases
      on s390x, reported upstream.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 06 Jan 2016 07:27:01 -0500

ldb (2:1.1.24-1) unstable; urgency=high

  * Drop '-b unstable' flag to Vcs-Git.
  * New upstream release. Fixes:
  - CVE-2015-3223: Denial of Service.
  - CVE-2015-5330: Remote memory read.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 13 Dec 2015 16:11:45 +0000

ldb (2:1.1.23-1ubuntu1) xenial; urgency=high

  * Skip FTBFS tests cases on s390x, reported upstream.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Fri, 04 Dec 2015 14:08:06 +0000

ldb (2:1.1.23-1) unstable; urgency=medium

  * New upstream version.

 -- Jelmer Vernooij <jelmer@debian.org>  Sun, 08 Nov 2015 21:17:41 +0000

ldb (2:1.1.21-1) unstable; urgency=medium

  * New upstream release.
  * Drop patch 03_revert_ldflags_atend: applied upstream.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 19 Sep 2015 03:01:43 +0000

ldb (2:1.1.20-2) unstable; urgency=medium

  * Add patch 01_manpage_dates: add fixed manpage dates, making the
    build reproducible.

 -- Jelmer Vernooij <jelmer@debian.org>  Mon, 27 Apr 2015 23:35:02 +0000

ldb (2:1.1.20-1) unstable; urgency=medium

  * New upstream release.
  * Bump standards version to 3.9.6 (no changes).
  * Add patch 03_revert_ldflags_atend: revert upstream change preventing
    use of -Wl,--as-needed.
  * Make libldb1-dbg Multi-Arch: same.
  * python-ldb-dev: Fix capitalization of 'python'.

 -- Jelmer Vernooij <jelmer@debian.org>  Sat, 25 Apr 2015 14:13:06 +0000

# For older changelog entries, run 'apt-get changelog libldb1'
