python-ldap (3.4.5-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2144841). Remaining changes:
    - {d/t/{startserver,upstream}: fix apparmor access to test directory
    - d/t/apparmor.sh: ignore apparmor control failures on Ubuntu+armhf (LP #2008393)
    - d/t/apparmor.sh: fix testing apparmor profile write access (LP #2130351)
  * Dropped changes, included upstream:
    - SECURITY UPDATE: Improper special character escape when supplying
      non-string data types.
      - debian/patches/CVE-2025-61911.patch: Raise exception when type is not str
        in Lib/ldap/filter.py.
      - CVE-2025-61911
    - SECURITY UPDATE: Denial of service through improperly escaped null byte.
      - debian/patches/CVE-2025-61912.patch: Change NULL byte escape from \\\000
        to \\00 in Lib/ldap/dn.py.
      - CVE-2025-61912

 -- Nick Rosbrook <enr0n@ubuntu.com>  Fri, 20 Mar 2026 15:17:25 -0400

python-ldap (3.4.5-1) unstable; urgency=medium

  * New upstream version 3.4.5
  * Fixes sanitization bypass in ldap.filter.escape_filter_chars
    (CVE-2025-61911) (Closes: #1117858).
  * Fixes vulnerability to Improper Encoding or Escaping of Output and
    Improper Null Termination (CVE-2025-61912) (Closes: #1117859).
  * Build using pybuild-plugin-pyproject.
  * Drop python3-all-dbg from Build-Depends, unused.
  * Update information on availability of GNU GPL.
  * Use uscan version 5.
  * Use execute_before_ instead of override_ for running sphinxdoc.
  * Build using dh-sequence-sphinxdoc.
  * Drop python3-ldap-dbg.
  * Use \$(CURDIR) in d/rules.
  * Run wrap-and-sort -bast to reduce diff size of future changes.

 -- Michael Fladischer <fladi@debian.org>  Mon, 19 Jan 2026 09:11:29 +0000

python-ldap (3.4.4-2ubuntu4) resolute; urgency=medium

  * No-change rebuild to drop Python 3.13 bits.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 20 Mar 2026 12:00:19 +0100

python-ldap (3.4.4-2ubuntu3) resolute; urgency=medium

  * SECURITY UPDATE: Improper special character escape when supplying
    non-string data types.
    - debian/patches/CVE-2025-61911.patch: Raise exception when type is not str
      in Lib/ldap/filter.py.
    - CVE-2025-61911
  * SECURITY UPDATE: Denial of service through improperly escaped null byte.
    - debian/patches/CVE-2025-61912.patch: Change NULL byte escape from \\\000
      to \\00 in Lib/ldap/dn.py.
    - CVE-2025-61912

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Mon, 15 Dec 2025 14:46:18 -0330

python-ldap (3.4.4-2ubuntu2) resolute; urgency=medium

  * d/t/apparmor.sh: fix testing apparmor profile write access (LP: #2130351)

 -- Jonas Jelten <jonas.jelten@canonical.com>  Mon, 08 Dec 2025 15:45:13 +0100

python-ldap (3.4.4-2ubuntu1) resolute; urgency=medium

  * d/t/{startserver,upstream}: fix slapd apparmor access to test directory
    (LP: #2130351)
    - d/t/apparmor.sh: ignore apparmor control failures on Ubuntu+armhf
      (LP: #2008393)

 -- Jonas Jelten <jonas.jelten@canonical.com>  Tue, 11 Nov 2025 17:53:15 +0100

python-ldap (3.4.4-2) unstable; urgency=medium

  * Team Upload
  * Fix d/watch for new PyPi archive naming policy
  * Use dh-sequence-python3
  * Drop "Rules-Requires-Root: no": it is the new default
  * Bump Standards-Version: to 4.7.2

 -- Alexandre Detiste <tchet@debian.org>  Sun, 12 Oct 2025 13:52:20 +0200

python-ldap (3.4.4-1) unstable; urgency=low

  * New upstream version 3.4.4
  * Bump Standards-Version to 4.6.2.
  * Update year in d/copyright.

 -- Michael Fladischer <fladi@debian.org>  Sun, 03 Dec 2023 10:34:54 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python-ldap-doc`.
