[Pkg-openldap-devel] OpenLDAP 2.3.32 released (fwd)

[Quanah Gibson-Mount]

I've not seen any follow up on this at the Debian side.

To note, quite explicitly:

The connection code in OpenLDAP 2.3.30 has a serious bug.  It was fixed in 
2.3.32 as noted below.  It would be really nice if the Debian package for 
OpenLDAP did not have that bug.

--Quanah

------------ Forwarded Message ------------
Date: Friday, January 05, 2007 10:52 AM -0800
From: Quanah Gibson-Mount <quanah at stanford.edu>
To: pkg-openldap-devel at lists.alioth.debian.org
Subject: [Pkg-openldap-devel] OpenLDAP 2.3.32 released

OpenLDAP 2.3.32 Release (2007/01/04)
	Fixed slapd add redundant duplicate value check (ITS#4600)
	Fixed slapd ACL set memleak (ITS#4780)
	Fixed slapd syncrepl shutdown hang (ITS#4790)
	Fixed slapd connection_get race condition on Windows (ITS#4793)
	Fixed slapd values return filter control leak (ITS#4794)
	Fixed slapd-sql Debug typo (ITS#4784)
	Fixed slapo-rwm parameter handling (ITS#3971, 4458, 4638, 4689)
	Documentation
		Fixed reference to deprecated option in admin guide (ITS#4795)

I know the ACL set leak is already in place.  Picking up the fixes for
ITS#4600 & ITS#4794 would be good as well.

The fix for ITS#4790 is related to an issue in connections_shutdown that
wasn't properly patched in 2.3.31.  It exists in the 2.3.30 code base as
well, and can be problematic.  I'd make sure that the debian package has
the connection_close function match what is in 2.3.32.

Outside of that, this commit is a good one to pick up as well (it is in
2.3.32 but not documented):

<http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-bdb/back-bdb.h
.diff?r1=1.117.2.12&r2=1.117.2.13&hideattic=1&sortbydate=0&f=h>

Basically, this variable causes an extra 48 bytes of memory to be allocated
for every idlcache configured, which (in cases where I have a 2.5 million
idl cache, for example) gets expensive.

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITS/Shared Application Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

_______________________________________________
Pkg-openldap-devel mailing list
Pkg-openldap-devel at lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-openldap-devel

---------- End Forwarded Message ----------



--
Quanah Gibson-Mount
Principal Software Developer
ITS/Shared Application Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html