Hi,
the recent security issue means we need to release a 1.8.6 LTM release
upstream as well.
I plan on releasing 1.8.6 with fixes listed below. Does the list makes
sense for everybody? Would you like to add some fixes that went upstream
but may not be fixed in your distribution or release you are using?
Please respond by tomorrow, I'll tag and release 1.8.6 then.
The tentative list of fixes, tickets they fixed (if any) and commit
hashes from the sssd-1-9 branch (as backporting from master might be
challenging already) is below:
* security fix for CVE-2013-2019
-
https://fedorahosted.org/sssd/ticket/1782
- sssd-1-9: e864d914a44a37016736554e9257c06b18c57d37
3843b284cd3e8f88327772ebebc7249990fd87b9
5c17895a272b06897608d951ea4e60c539138208
* security fix for CVE-2013-2020
-
https://fedorahosted.org/sssd/ticket/1781
- sssd-1-9: 30e2585dd46b62aa3a4abdf6de3f40a20e1743ab
* Handle empty namingContexts values safely - was affecting Novell eDirectory
users
-
https://fedorahosted.org/sssd/ticket/1542
- sssd-1-9: 3f5953b0cd6ad826141c62dd239efc675b351689
* sssd_pam: Cleanup requests cache on sbus reconect
- This bug was causing the infamous "Timer Expired" errors on reconnect
-
https://fedorahosted.org/sssd/ticket/1655
- sssd-1-9: 23669fdf7afd1f0b427f98eb20a760101fb80300
* Do not always return PAM_SYSTEM_ERR when offline krb5 authentication fails
- The backport was explicitly requested by a SuSE user
- sssd-1-9: 16e0b00c9f6444f058304f669b3a4b18ed751a52
* Free the internal DP request
- This bug was causing slow and steady memory growth of responders
- sssd-1-9: ff73778464f56c51716140b69ab29f101c036603
* NSS: Fix netgroup midpoint cache refresh
- The netgroup midpoint refresh didn't work as advertized
-
https://fedorahosted.org/sssd/ticket/1683
- sssd-1-9: 83c5a0123f8d473d46091ee0d41a9ed019c78b6c
* responder_dp: Add timeout to side requets
- A general robustness fix, our QE hit the problem, too while testing
6.4
-
https://fedorahosted.org/sssd/ticket/1717
- sssd-1-9: dd85581b726d7db264348ae27d77c4615b7f79d0
* Restart services with a delay in case they are restarted too often
- We've seen several users hit this problem in production
-
https://fedorahosted.org/sssd/ticket/1528
- sssd-1-9: 3c922410f0b92a9b8556e28ff5d46ee7a59709c6