diff --git a/backport-CVE-2025-61911.patch b/backport-CVE-2025-61911.patch deleted file mode 100644 index 9c4e8a064e5ec92e531e31c73787ece23f042092..0000000000000000000000000000000000000000 --- a/backport-CVE-2025-61911.patch +++ /dev/null @@ -1,38 +0,0 @@ -From 3957526fb1852e84b90f423d9fef34c7af25b85a Mon Sep 17 00:00:00 2001 -From: lukas-eu <62448426+lukas-eu@users.noreply.github.com> -Date: Fri, 10 Oct 2025 19:47:46 +0200 -Subject: [PATCH] Merge commit from fork - ---- - Lib/ldap/filter.py | 2 ++ - Tests/t_ldap_filter.py | 4 ++++ - 2 files changed, 6 insertions(+) - -diff --git a/Lib/ldap/filter.py b/Lib/ldap/filter.py -index 782737aa..5bd41b21 100644 ---- a/Lib/ldap/filter.py -+++ b/Lib/ldap/filter.py -@@ -24,6 +24,8 @@ def escape_filter_chars(assertion_value,escape_mode=0): - If 1 all NON-ASCII chars are escaped. - If 2 all chars are escaped. - """ -+ if not isinstance(assertion_value, str): -+ raise TypeError("assertion_value must be of type str.") - if escape_mode: - r = [] - if escape_mode==1: -diff --git a/Tests/t_ldap_filter.py b/Tests/t_ldap_filter.py -index 313b3733..54312050 100644 ---- a/Tests/t_ldap_filter.py -+++ b/Tests/t_ldap_filter.py -@@ -49,6 +49,10 @@ def test_escape_filter_chars_mode1(self): - ), - r'\c3\a4\c3\b6\c3\bc\c3\84\c3\96\c3\9c\c3\9f' - ) -+ with self.assertRaises(TypeError): -+ escape_filter_chars(["abc@*()/xyz"], escape_mode=1) -+ with self.assertRaises(TypeError): -+ escape_filter_chars({"abc@*()/xyz": 1}, escape_mode=1) - - def test_escape_filter_chars_mode2(self): - """ diff --git a/python-ldap-3.4.4.tar.gz b/python-ldap-3.4.4.tar.gz deleted file mode 100644 index 766d2815c534c10df5706ea3305e3bdf6091a9d2..0000000000000000000000000000000000000000 Binary files a/python-ldap-3.4.4.tar.gz and /dev/null differ diff --git a/python-ldap-3.4.5.tar.gz b/python-ldap-3.4.5.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..18e5bf2dc0296597c85c7ca9fea9e1c59b84288b Binary files /dev/null and b/python-ldap-3.4.5.tar.gz differ diff --git a/python-ldap.spec b/python-ldap.spec index fb57a464d255a99e70af6e81e82011e0bea1f726..44044a7645d535ab0ae431bd90a8f0588ece3a1b 100644 --- a/python-ldap.spec +++ b/python-ldap.spec @@ -1,11 +1,10 @@ Name: python-ldap -Version: 3.4.4 -Release: 2 +Version: 3.4.5 +Release: 1 Summary: An object-oriented API to access LDAP directory servers License: Python-2.0 URL: http://python-ldap.org/ Source0: https://files.pythonhosted.org/packages/source/p/%{name}/%{name}-%{version}.tar.gz -Patch0001: backport-CVE-2025-61911.patch BuildRequires: gcc openldap-devel BuildRequires: python3-devel python3-setuptools @@ -56,6 +55,16 @@ sed -i 's,-Werror,-Wignore,g' tox.ini %doc CHANGES README TODO Demo %changelog + +* Mon Oct 13 2025 lizhipeng - 3.4.5-1 +- update to 3.4.5 +- fix CVE-2025-61911 CVE-2025-61912 +- Fix syncrepl.py to use named constants instead of raw decimal values +- Fix error handling in SearchNoOpMixIn to prevent a undefined variable error +- Fixing reconnection issues especially during server restarts +- Add comprehensive reconnection test cases +- Add testing and document support for Python 3.13 + * Mon Oct 13 2025 lizhipeng - 3.4.4-2 - Type: bugfix - ID: NA