openldap (2.5.20+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2127665)
    - Fixed lloadd handling of starttls critical (ITS#10323)
    - Fixed slapd regression with certain searches (ITS#10307)
    - Fixed slapo-pcache caching behaviors (ITS#10270)
  * pbkdf2 iteration configuration support (LP: #2125685)
    - d/p/lp2125685-pbkdf2-configurable-rounds: make iterations configurable
    - d/p/lp2125685-pbkdf2-fix-iteration-arg: fix iteration argument index
    - d/t/pbkdf2-contrib: test if pbkdf2 hashing rounds are adjustable
  * Enable build of ppm password quality check module (LP: #2121816)
    - d/rules: build ppm password quality module
    - d/p/contrib-makefiles: build patches from 2.6.9+dfsg-1~exp1 (#1039740)
    - d/p/ppm-cross: cross-build patch from 2.6.8+dfsg-1~exp1 (#1079533)
    - d/t/ppm-contrib: test ppm password quality module
      + no attribute checks, since they're first possible with 2.6.2
    - d/control: add dependency on libcrack2-dev for ppm
    - d/slapd-contrib.{examples,install,manpages}: add ppm

 -- Jonas Jelten <jonas.jelten@canonical.com>  Wed, 24 Sep 2025 15:40:37 +0200

openldap (2.5.19+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2085192)
    - Fixed libldap GnuTLS incompatible pointer type (ITS#10253)
    - Fixed libldap OpenSSL set_ciphersuite error handling (ITS#10223)
    - Fixed libldap to check for OpenSSL EVP_Digest* failure (ITS#10224)
    - Fixed slapd syncrepl assert during refresh at shutdown (ITS#10232)
    - Fixed slapd-ldap use of multi-precision add for op counters (ITS#10237)
    - Fixed slapd-mdb idl intersection (ITS#10233)
    - Fixed slapd-wt idl intersection (ITS#10233)
    - Fixed slapo-translucent regression with subordinate databases (ITS#10248)
    - Fixed slapo-translucent regression when requesting attributes (ITS#10272)
    - Fixed slappw-argon2 defaults to be more secure (ITS#9827)
  * Dropped:
    - d/p/remove-extraneous-quote-configure-ac.patch
      [Applied in upstream release 2.5.19]

 -- Bryce Harrington <bryce@canonical.com>  Mon, 21 Apr 2025 16:42:05 -0700

openldap (2.5.18+dfsg-0ubuntu0.22.04.3) jammy; urgency=medium

  * Fixup TIMEOUT and NETWORK_TIMEOUT options so they work correctly
    when SSL is involved. Before they would never timeout, causing
    hangs on connection failure. Now they timeout as expected.
    (LP: #2090806)
    - d/p/lp2090806-ITS-8047-Fix-TLS-connection-timeout-handling.patch

 -- Matthew Ruffell <matthew.ruffell@canonical.com>  Mon, 09 Dec 2024 15:54:19 +1300

openldap (2.5.18+dfsg-0ubuntu0.22.04.2) jammy; urgency=medium

  * d/p/remove-extraneous-quote-configure-ac.patch: Remove extraneous
    quote from configure.ac, fixing loading of back_perl. (LP: #2072976)

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Fri, 12 Jul 2024 17:51:23 -0400

openldap (2.5.18+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2067745).
    - Fixed libldap exit handling with OpenSSL3 again (ITS#9952)
    - Fixed libldap OpenSSL channel binding digest (ITS#10216)
    - Fixed slapd handling of large uid/gids peercred auth (ITS#10211)
    - Fixed slapd-meta with dynlist (ITS#10164)
    - Fixed slapd-meta binds when proxying internal op (ITS#10165)
    - Fixed slapo-accesslog startup initialization (ITS#10170)
    - Fixed slapo-dynlist with abandoned operations (ITS#10044)

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Fri, 31 May 2024 11:01:55 -0400

openldap (2.5.17+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2040465).
    - Added slapo-dynlist option to disable filter support (ITS#10025)
    - Fixed liblber missing newline on long msg (ITS#10105)
    - Fixed libldap exit handling with OpenSSL3 (ITS#9952)
    - Fixed libldap with TLS and multiple ldap URIs (ITS#10101)
    - Fixed libldap OpenSSL cipher suite handling (ITS#10094)
    - Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files (ITS#10124)
    - Fixed libldap timestamps on Windows (ITS#10100)
    - Fixed lloadd to work when resolv.conf is missing (ITS#10070)
    - Fixed lloadd handling of closing connection (ITS#10083)
    - Fixed slapd to honour disclose in matchedDN handling (ITS#10139)
    - Fixed slapd handling of regex testing in ACLs (ITS#10089)
    - Fixed slapd-asyncmeta when remote suffix is empty (ITS#10076)
    - Fixed slapo-dynlist so it can't be global (ITS#10091)

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Fri, 09 Feb 2024 15:12:07 -0500

openldap (2.5.16+dfsg-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * No change rebuild to fix CVE-2023-2953 in the -security pocket.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 25 Jan 2024 13:42:39 -0500

openldap (2.5.16+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2029170).
    - Fixed slapd cn=config incorrect handling of paused (ITS#10045)
    - Fixed slapd-meta to account for MOD ops being optional (ITS#10067)
    - Fixed slapd-asyncmeta to account for MOD ops being optional (ITS#10067)
  
 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Mon, 31 Jul 2023 18:13:10 -0400

openldap (2.5.15+dfsg-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream version (LP: #2027079).
    - Several fixes, including to asynchronous connections to the OpenLDAP
      server.

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Tue, 11 Jul 2023 15:26:41 -0400

openldap (2.5.14+dfsg-0ubuntu0.22.04.2) jammy; urgency=medium

  * Build the passwd/sha2 contrib module with -fno-strict-aliasing to
    avoid computing an incorrect SHA256 hash with some versions of the
    compiler (LP: #2000817):
    - d/t/{control,sha2-contrib}: test to verify the SHA256 hash
      produced by passwd/sha2
    - d/rules: set -fno-strict-aliasing only when building the
      passwd/sha2 contrib module

 -- Andreas Hasenack <andreas@canonical.com>  Sun, 12 Mar 2023 14:11:53 -0300

# For older changelog entries, run 'apt-get changelog libldap-common'
