Merge sssd from Debian unstable for oracular
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
sssd (Ubuntu) |
Fix Released
|
Undecided
|
Sergio Durigan Junior |
Bug Description
Upstream: tbd
Debian: 2.9.4-2 2.9.4-1.1~exp1
Ubuntu: 2.9.4-1.1ubuntu6
Debian new has 2.9.4-1.1~exp1, which may be available for merge soon.
If it turns out this needs a sync rather than a merge, please change the tag 'needs-merge' to 'needs-sync', and (optionally) update the title as desired.
If this merge pulls in a new upstream version, also consider adding an entry to the Oracular Release Notes: https:/
### New Debian Changes ###
sssd (2.9.4-2) unstable; urgency=medium
[ Michael Biebl ]
* Install PAM and NSS modules into /usr. (Closes: #1061350)
[ Timo Aaltonen ]
* tests: Drop -extensions from openssl command if there is no -x509.
Thanks, Sebastian Andrzej Siewior! (Closes: #1061869)
-- Timo Aaltonen <email address hidden> Wed, 10 Apr 2024 15:56:46 +0300
sssd (2.9.4-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1063074
-- Benjamin Drung <email address hidden> Thu, 29 Feb 2024 17:27:43 +0000
sssd (2.9.4-1) unstable; urgency=medium
[ Sergio Durigan Junior ]
* Improve certificate/
- d/t/control: Don't depend on 'needs-sudo' restriction, since the
tests don't really use 'sudo' selectively but rather rely on a normal
user being setup as a side effect of 'needs-sudo'. Instead, we can
use 'needs-root'.
- d/t/sssd-
d/
'
[ Timo Aaltonen ]
* New upstream release.
* control: Migrate to systemd-dev. (Closes: #1060512)
* rules, install: Use systemdsystemun
-- Timo Aaltonen <email address hidden> Thu, 18 Jan 2024 12:04:33 +0200
sssd (2.9.2-1) unstable; urgency=medium
[ Timo Aaltonen ]
* New upstream release.
* control, rules: Add bc to build-depends, enable tests again.
[ Marco Trevisan (Treviño) ]
* debian: Add pam-auth-update SSSD Smart card configurations
* debian/tests: Add tests for smart card verification
-- Timo Aaltonen <email address hidden> Fri, 15 Sep 2023 11:18:38 +0300
sssd (2.9.1-2) unstable; urgency=medium
[ Sergio Durigan Junior ]
* Enable files provider.
SSSD 2.9.0 has deprecated 'id_provider = files', but that's still
needed for smartcard authentication of local users.
- d/rules: Build with '--with-
- d/sssd-
(Closes: #1041438) (LP: #2028084)
* d/rules: Remove deprecated options '--disable-
-- Timo Aaltonen <email address hidden> Tue, 25 Jul 2023 15:01:14 +0300
sssd (2.9.1-1) unstable; urgency=medium
* New upstream release.
* libnss-
* patches: Drop an upstreamed patch.
* Drop deprecated simple-ifp library and files provider.
* control, rules: Add sssd-passkey, and libfido2-dev to build-depends.
* ci: Allow piuparts to fail, because handling of nsswitch.conf ownership
is broken.
-- Timo Aaltonen <email address hidden> Tue, 04 Jul 2023 08:48:49 +0300
sssd (2.8.2-4) unstable; urgency=medium
[ Sam Morris ]
* Don't add subid to /etc/nsswitch.conf (Closes: #1032990)
-- Timo Aaltonen <email address hidden> Tue, 11 Apr 2023 15:19:36 +0300
sssd (2.8.2-3) unstable; urgency=medium
[ Gioele Barabucci ]
* d/libnss-sss.nss: Update to `database-add`
* d/libsss-sudo.nss: Install `sss` service for sudoers via dh-nss (Closes: #783889)
* d/libsss-
* d/sssd-common.nss: Use new directive name `database-add`
* Install dbus policy in /usr instead of /etc (Closes: #1031547)
[ Sam Morris ]
* sssd-common: add lintian overrides for libsubid_sss.so
-- Timo Aaltonen <email address hidden> Sun, 26 Feb 2023 16:35:48 +0200
sssd (2.8.2-2) unstable; urgency=medium
[ Sam Morris ]
* Ship libsubid_sss.so in sssd-common package
### Old Ubuntu Delta ###
sssd (2.9.4-1.1ubuntu6) noble; urgency=medium
* No-change rebuild for c-ares t64.
-- Matthias Klose <email address hidden> Tue, 16 Apr 2024 11:55:56 +0200
sssd (2.9.4-1.1ubuntu5) noble; urgency=medium
* Fix build-time tests (LP: #2058576):
- d/p/fix-
timestamp filter string. Thanks to Sergio Durigan Junior
<email address hidden> for the troubleshooting session.
- d/control: faketime is used for tests, and is currently not
working on armhf with a 64bit time_t (see LP #2059078)
-- Andreas Hasenack <email address hidden> Fri, 05 Apr 2024 10:23:52 -0300
sssd (2.9.4-1.1ubuntu4) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- Steve Langasek <email address hidden> Sun, 31 Mar 2024 08:25:06 +0000
sssd (2.9.4-1.1ubuntu3) noble; urgency=medium
* No-change rebuild against libcurl4t64
-- Steve Langasek <email address hidden> Sat, 16 Mar 2024 07:03:24 +0000
sssd (2.9.4-1.1ubuntu2) noble; urgency=medium
* No-change rebuild against libcom-err2
-- Steve Langasek <email address hidden> Tue, 12 Mar 2024 20:34:29 +0000
sssd (2.9.4-1.1ubuntu1) noble; urgency=medium
* Merge with Debian unstable. Remaining changes:
- d/control: Drop libgdm-dev Build-Depend on i386.
- d/control: Don't build sssd-tools on i386, now uninstallable due
to added python3-
- d/apparmor-profile: Add some entries to apparmor-profile file
to get rid of the extraneous ALLOWED messages visible in the
/
-- Sergio Durigan Junior <email address hidden> Fri, 08 Mar 2024 11:22:58 -0500
Related branches
- git-ubuntu bot: Approve
- Bryce Harrington (community): Approve
- Canonical Server Reporter: Pending requested
-
Diff: 656 lines (+477/-5)3 files modifieddebian/apparmor-profile (+4/-1)
debian/changelog (+466/-0)
debian/control (+7/-4)
CVE References
Changed in sssd (Ubuntu): | |
milestone: | none → ubuntu-24.06 |
Changed in sssd (Ubuntu): | |
assignee: | nobody → Sergio Durigan Junior (sergiodj) |
Changed in sssd (Ubuntu): | |
status: | New → In Progress |
This bug was fixed in the package sssd - 2.9.5-3ubuntu1
---------------
sssd (2.9.5-3ubuntu1) oracular; urgency=medium
* Merge with Debian unstable (LP: #2064469). Remaining changes: {click, systemd} dependencies. var/log/ syslog. (LP #1999190) format- string- time64. patch: fix format string used for a patches/ CVE-2023- 3758.patch: use hash to store intermediate ad/ad_gpo. c.
- d/control: Drop libgdm-dev Build-Depend on i386.
- d/control: Don't build sssd-tools on i386, now uninstallable due
to added python3-
- d/apparmor-profile: Add some entries to apparmor-profile file
to get rid of the extraneous ALLOWED messages visible in the
/
- d/control: faketime is used for tests, and is currently not
working on armhf with a 64bit time_t (see LP #2059078)
* Drop changes:
- Fix build-time tests (LP #2058576):
+ d/p/fix-
timestamp filter string. Thanks to Sergio Durigan Junior
<email address hidden> for the troubleshooting session.
[ Incorporated upstream. ]
- SECURITY UPDATE: race when GPO policy is being applied
+ debian/
results in src/providers/
+ CVE-2023-3758
[ Incorporated upstream. ]
-- Sergio Durigan Junior <email address hidden> Mon, 24 Jun 2024 16:22:21 -0400