ELBA-2021-4203

ELBA-2021-4203 - 389-ds:1.4 bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2021-11-16

Description

[1.4.3.23-10]
- Bump version to 1.4.3.23-10
- Resolves: Bug 1997138 - LDAP server crashes when dnaInterval attribute is set to 0

[1.4.3.23-9]
- Bump version to 1.4.3.23-9
- Resolves: Bug 1947044 - remove unsupported GOST password storage scheme

[1.4.3.23-8]
- Bump version to 1.4.3.23-8
- Resolves: Bug 1947044 - add missing patch for import result code
- Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute

[1.4.3.23-7]
- Bump version to 1.4.3.23-7
- Resolves: Bug 1983921 - persistent search returns entries even when an error is returned by content-sync-plugin

[1.4.3.23-6]
- Bump version to 1.4.3.23-6
- Resolves: Bug 1982787 - CRYPT password hash with asterisk allows any bind attempt to succeed

[1.4.3.23-5]
- Bump version to 1.4.3.23-5
- Resolves: Bug 1951020 - Internal unindexed searches in syncrepl
- Resolves: Bug 1978279 - ds-replcheck state output message has 'Master' instead of 'Supplier'

[1.4.3.23-4]
- Bump version to 1.4.3.23-4
- Resolves: Bug 1976906 - Instance crash at restart after changelog configuration
- Resolves: Bug 1480323 - ns-slapd crash at startup - Segmentation fault in strcmpi_fast() when the Referential Integrity log is manually edited
- Resolves: Bug 1967596 - Temporary password - add CLI and fix compiler errors

[1.4.3.23-3]
- Bump version to 1.4.3.23-3
- Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute
- Resolves: Bug 1967839 - ACIs are being evaluated against the Replication Manager account in a replication context
- Resolves: Bug 1970259 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
- Resolves: Bug 1972590 - Large updates can reset the CLcache to the beginning of the changelog
- Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)

[1.4.3.23-2]
- Bump version to 1.4.3.23-2
- Resolves: Bug 1812286 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
- Resolves: Bug 1748441 - RFE - Schedule execution of 'compactdb' at specific date/time
- Resolves: Bug 1938239 - RFE - Extend DNA plugin to support intervals sizes for subuids

[1.4.3.23-1]
- Bump version to 1.4.3.23-1
- Resolves: Bug 1947044 - Rebase 389 DS with 389-ds-base-1.4.3.23 for RHEL 8.5
- Resolves: Bug 1850664 - RFE - Add an option for the Retro Changelog to ignore some attributes
- Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)
- Resolves: Bug 1898541 - Changelog cache can upload updates from a wrong starting point (CSN)
- Resolves: Bug 1889562 - client psearch with multiple threads hangs if nsslapd-maxthreadsperconn is under sized
- Resolves: Bug 1924848 - Negative wtime on ldapcompare
- Resolves: Bug 1895460 - RFE - Log an additional message if the server certificate nickname doesnt match nsSSLPersonalitySSL value
- Resolves: Bug 1897614 - Performance search rate: change entry cache monitor to recursive pthread mutex
- Resolves: Bug 1939607 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 1626633 - [RFE] DS - Update the password policy to support a Temporary Password with expiration
- Resolves: Bug 1952804 - CVE-2021-3514 389-ds:1.4/389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	389-ds-base-1.4.3.23-10.module+el8.5.0+20376+fc99395b.src.rpm	aeeefd71b53589ccbe72c7274fb392d81185d8c74209b6ac22543a5cdbc0dc06	-	ol8_aarch64_appstream
	389-ds-base-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	1a7ff124851a027911af9f71e7cc52bddb52c68a381e7cdef12f52909eb62ec8	-	ol8_aarch64_appstream
	389-ds-base-devel-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	0a7528cee48386a87b07f3a59241e48ed62e793ccbbb0b2de3809998ae24e3ea	-	ol8_aarch64_appstream
	389-ds-base-legacy-tools-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	9117c3f61c751fbfa1b078f228a3d3c7cb93ef2c69930ca863e057bf55fb5466	-	ol8_aarch64_appstream
	389-ds-base-libs-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	947927a1d3f36e0fa840bdd8c638b23378ecf37c0b48a629dc6e2e4d41664908	-	ol8_aarch64_appstream
	389-ds-base-snmp-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	b4fd15d0cb8ef0e274b48a9acbd491d9d04d42eeb620b473309ef995d1ab3106	-	ol8_aarch64_appstream
	python3-lib389-1.4.3.23-10.module+el8.5.0+20376+fc99395b.noarch.rpm	4f7689c143c4ddcd61f8034893b7f2de145585f1e96a295f3ce476c268ab809a	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	389-ds-base-1.4.3.23-10.module+el8.5.0+20376+fc99395b.src.rpm	aeeefd71b53589ccbe72c7274fb392d81185d8c74209b6ac22543a5cdbc0dc06	-	ol8_x86_64_appstream
	389-ds-base-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	c6d21d6da3336d06ec44b8fe89c47a8f044a01cadf1e8fe1a694dba216ad3164	-	ol8_x86_64_appstream
	389-ds-base-devel-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	263bbd751070afd82142d87ccb183096d7ff0b8d9b24a1ed8d2b835665dc8258	-	ol8_x86_64_appstream
	389-ds-base-legacy-tools-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	48aebc069cf80e332772db33ee8e9b9ed36c0a405643c94ada662e4f3d29e705	-	ol8_x86_64_appstream
	389-ds-base-libs-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	b05f240e8dd57f945a2f5969f68154d3172ae54a8086c084b351ffe2c695056f	-	ol8_x86_64_appstream
	389-ds-base-snmp-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	ecac01a2871f05fa82e9e55c8ef0e7db08d7b75baa506ac94ff020f814b1bd11	-	ol8_x86_64_appstream
	python3-lib389-1.4.3.23-10.module+el8.5.0+20376+fc99395b.noarch.rpm	4f7689c143c4ddcd61f8034893b7f2de145585f1e96a295f3ce476c268ab809a	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team