openldap (2.5.16+dfsg-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * No change rebuild to fix CVE-2023-2953 in the -security pocket.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 25 Jan 2024 13:42:39 -0500

openldap (2.5.16+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2029170).
    - Fixed slapd cn=config incorrect handling of paused (ITS#10045)
    - Fixed slapd-meta to account for MOD ops being optional (ITS#10067)
    - Fixed slapd-asyncmeta to account for MOD ops being optional (ITS#10067)
  
 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Mon, 31 Jul 2023 18:13:10 -0400

openldap (2.5.15+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2027079).
    - Several fixes, including to asynchronous connections to the OpenLDAP
      server.

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Tue, 11 Jul 2023 15:26:41 -0400

openldap (2.5.14+dfsg-0ubuntu0.22.04.2) jammy; urgency=medium

  * Build the passwd/sha2 contrib module with -fno-strict-aliasing to
    avoid computing an incorrect SHA256 hash with some versions of the
    compiler (LP: #2000817):
    - d/t/{control,sha2-contrib}: test to verify the SHA256 hash
      produced by passwd/sha2
    - d/rules: set -fno-strict-aliasing only when building the
      passwd/sha2 contrib module

 -- Andreas Hasenack <andreas@canonical.com>  Sun, 12 Mar 2023 14:11:53 -0300

openldap (2.5.14+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2007625).
    - Several fixes, including memory leaks that affect slapd and
      certain slapo modules.

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Fri, 17 Feb 2023 16:12:43 -0500

openldap (2.5.13+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #1983618).
    - Several fixes, including memory leaks that affected libldap.
    - Added slapo-emptyds contrib module (ITS#8882).

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Fri, 05 Aug 2022 10:51:52 -0400

openldap (2.5.12+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #1977627).
    - Fixed slapd syncrepl handling of new sessions (ITS#9584)
    - Fixed slapd-sql to properly escape filter value (ITS#9815)
      (CVE-2022-29155)
      [ Already included in 2.5.11+dfsg-1~exp1ubuntu3.1 ]
    - More details about this release can be found at:
      https://git.openldap.org/openldap/openldap/-/blob/2bda1fa98fbcedc6cd5995ea905427b8bef89f9d/CHANGES
  * d/p/CVE-2022-29155.patch: Dropped patch; included in this new upstream
    version.

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Mon, 13 Jun 2022 13:19:52 -0400

openldap (2.5.11+dfsg-1~exp1ubuntu3.1) jammy-security; urgency=medium

  * SECURITY UPDATE: SQL injection in experimental back-sql backend
    - debian/patches/CVE-2022-29155.patch: escape filter values in
      servers/slapd/back-sql/search.c.
    - CVE-2022-29155

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 12 May 2022 09:07:41 -0400

openldap (2.5.11+dfsg-1~exp1ubuntu3) jammy; urgency=medium

  * No-change rebuild to update maintainer scripts, see LP: 1959054

 -- Dave Jones <dave.jones@canonical.com>  Wed, 16 Feb 2022 17:15:26 +0000

openldap (2.5.11+dfsg-1~exp1ubuntu2) jammy; urgency=medium

  * No-change rebuild for the perl update.

 -- Matthias Klose <doko@ubuntu.com>  Mon, 07 Feb 2022 07:51:42 +0100

# For older changelog entries, run 'apt-get changelog libldap-common'
