[Pkg-freeipa-devel] [Git][freeipa-team/slapi-nis][upstream] 8 commits: Initialize map lock in NIS plugin as well

[Timo Aaltonen (@tjaalton)]

Timo Aaltonen pushed to branch upstream at FreeIPA packaging / slapi-nis


Commits:
f3d34b04 by Alexander Bokovoy at 2020-05-06T14:58:34+03:00
Initialize map lock in NIS plugin as well

Also if ignored_containers_sdn is NULL, we don't really need to check
whether a write could be ignored. It has to be processed, so bail out
early with FALSE.

Resolves: rhbz#1832190

Signed-off-by: Alexander Bokovoy <abokovoy at redhat.com>

- - - - -
dbe1e300 by Alexander Bokovoy at 2020-09-01T12:41:29+03:00
idviews: clear intermediate target DN in all cases

When processing a search request, slapi-nis attempts to detect an ID
View lookup. A target DN is modified by extracting an ID view name. This
temporary string is freed in the successful case but left unotouched if
ID View wasn't requested. As a result, small leaks on each search
request accumulate and a memory can get lost.

Resolves: rhbz#1866113

Signed-off-by: Alexander Bokovoy <abokovoy at redhat.com>

- - - - -
b64dbe50 by Alexander Bokovoy at 2020-09-01T16:06:51+03:00
Update Azure Pipelines to run real FreeIPA tests

Signed-off-by: Alexander Bokovoy <abokovoy at redhat.com>

- - - - -
61ea8f6a by Alexander Bokovoy at 2020-09-12T12:03:57+03:00
Ignore searches that do not match any of configured tree

Resolves: rhbz#1874015
Signed-off-by: Alexander Bokovoy <abokovoy at redhat.com>

- - - - -
c81799fc by Alexander Bokovoy at 2020-09-14T16:16:54+03:00
Fix memory limits in docker-compose to use strings, not numbers

docker-compose with commit https://github.com/docker/compose/commit/2b4d409ac3da2096c43284e262f2b0c1b66c488b
started to require memory limits to be specified as strings.

Related: https://pagure.io/freeipa/issue/8494
Signed-off-by: Alexander Bokovoy <abokovoy at redhat.com>

- - - - -
cd26f30c by Alexander Bokovoy at 2020-12-04T15:38:51+02:00
Release slapi-nis 0.56.6

Signed-off-by: Alexander Bokovoy <abokovoy at redhat.com>

- - - - -
c7417ea2 by Alexander Bokovoy at 2021-05-18T09:48:06+03:00
CVE-2021-3480: invalid bind DN crash

For certain LDAP bind operations 389-ds would pass unvalidated bind DN
to bind plugins. A first attempt to normalize the DN would find that out
and should reject the request.

Signed-off-by: Alexander Bokovoy <abokovoy at redhat.com>

- - - - -
cf284947 by Alexander Bokovoy at 2021-05-18T09:50:23+03:00
slapi-nis-0.56.7: CVE-2021-3480: invalid bind DN crash

Signed-off-by: Alexander Bokovoy <abokovoy at redhat.com>

- - - - -


30 changed files:

- configure.ac
- slapi-nis.spec
- src/back-sch.c
- src/back-shr.c
- src/plug-nis.c
- + tests/azure/Dockerfiles/Dockerfile.build.fedora
- + tests/azure/Dockerfiles/Dockerfile.build.rawhide
- + tests/azure/Dockerfiles/docker-compose.yml
- + tests/azure/Dockerfiles/seccomp.json
- + tests/azure/azure-pipelines-rawhide.yml
- tests/azure/azure-pipelines.yml
- + tests/azure/azure_definitions/base.yml
- + tests/azure/azure_definitions/gating.yml
- + tests/azure/scripts/azure-run-base-tests.sh
- + tests/azure/scripts/azure-run-integration-tests.sh
- + tests/azure/scripts/azure-run-tests.sh
- + tests/azure/scripts/dump_cores.sh
- + tests/azure/scripts/generate-matrix.py
- + tests/azure/scripts/install-debuginfo-fedora.sh
- + tests/azure/scripts/install-debuginfo.sh
- + tests/azure/scripts/setup_containers.py
- + tests/azure/scripts/variables-fedora.sh
- + tests/azure/scripts/variables.sh
- + tests/azure/templates/build-fedora.yml
- + tests/azure/templates/generate-job-variables.yml
- + tests/azure/templates/generate-matrix.yml
- + tests/azure/templates/ipa-test-config-template.yaml
- + tests/azure/templates/prepare-build-fedora.yml
- + tests/azure/templates/publish-build.yml
- + tests/azure/templates/run-test.yml


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/freeipa-team/slapi-nis/-/compare/3d0be8651bf08c09ef42b719060d31b63529c977...cf284947051a7844c4ab3735f107354c55c52664

-- 
View it on GitLab: https://salsa.debian.org/freeipa-team/slapi-nis/-/compare/3d0be8651bf08c09ef42b719060d31b63529c977...cf284947051a7844c4ab3735f107354c55c52664
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-freeipa-devel/attachments/20211020/c7cb5614/attachment.htm>