ELBA-2021-4203

ELBA-2021-4203 - 389-ds:1.4 bug fix and enhancement update

Type:	BUG
Severity:	NA
Release Date:	2021-11-16

Description

[1.4.3.23-10]
- Bump version to 1.4.3.23-10
- Resolves: Bug 1997138 - LDAP server crashes when dnaInterval attribute is set to 0

[1.4.3.23-9]
- Bump version to 1.4.3.23-9
- Resolves: Bug 1947044 - remove unsupported GOST password storage scheme

[1.4.3.23-8]
- Bump version to 1.4.3.23-8
- Resolves: Bug 1947044 - add missing patch for import result code
- Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute

[1.4.3.23-7]
- Bump version to 1.4.3.23-7
- Resolves: Bug 1983921 - persistent search returns entries even when an error is returned by content-sync-plugin

[1.4.3.23-6]
- Bump version to 1.4.3.23-6
- Resolves: Bug 1982787 - CRYPT password hash with asterisk allows any bind attempt to succeed

[1.4.3.23-5]
- Bump version to 1.4.3.23-5
- Resolves: Bug 1951020 - Internal unindexed searches in syncrepl
- Resolves: Bug 1978279 - ds-replcheck state output message has 'Master' instead of 'Supplier'

[1.4.3.23-4]
- Bump version to 1.4.3.23-4
- Resolves: Bug 1976906 - Instance crash at restart after changelog configuration
- Resolves: Bug 1480323 - ns-slapd crash at startup - Segmentation fault in strcmpi_fast() when the Referential Integrity log is manually edited
- Resolves: Bug 1967596 - Temporary password - add CLI and fix compiler errors

[1.4.3.23-3]
- Bump version to 1.4.3.23-3
- Resolves: Bug 1944494 - support for RFC 4530 entryUUID attribute
- Resolves: Bug 1967839 - ACIs are being evaluated against the Replication Manager account in a replication context
- Resolves: Bug 1970259 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
- Resolves: Bug 1972590 - Large updates can reset the CLcache to the beginning of the changelog
- Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)

[1.4.3.23-2]
- Bump version to 1.4.3.23-2
- Resolves: Bug 1812286 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
- Resolves: Bug 1748441 - RFE - Schedule execution of 'compactdb' at specific date/time
- Resolves: Bug 1938239 - RFE - Extend DNA plugin to support intervals sizes for subuids

[1.4.3.23-1]
- Bump version to 1.4.3.23-1
- Resolves: Bug 1947044 - Rebase 389 DS with 389-ds-base-1.4.3.23 for RHEL 8.5
- Resolves: Bug 1850664 - RFE - Add an option for the Retro Changelog to ignore some attributes
- Resolves: Bug 1903221 - Memory leak in 389ds backend (Minor)
- Resolves: Bug 1898541 - Changelog cache can upload updates from a wrong starting point (CSN)
- Resolves: Bug 1889562 - client psearch with multiple threads hangs if nsslapd-maxthreadsperconn is under sized
- Resolves: Bug 1924848 - Negative wtime on ldapcompare
- Resolves: Bug 1895460 - RFE - Log an additional message if the server certificate nickname doesnt match nsSSLPersonalitySSL value
- Resolves: Bug 1897614 - Performance search rate: change entry cache monitor to recursive pthread mutex
- Resolves: Bug 1939607 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 1626633 - [RFE] DS - Update the password policy to support a Temporary Password with expiration
- Resolves: Bug 1952804 - CVE-2021-3514 389-ds:1.4/389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	389-ds-base-1.4.3.23-10.module+el8.5.0+20376+fc99395b.src.rpm	095fba94197f7d0724c0f803a721ece7	-
	389-ds-base-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	a4334c13e0c197b89f36a363dba11a0b	-
	389-ds-base-devel-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	ac182359bcd38d9f8d6a42b2b5261ad3	-
	389-ds-base-legacy-tools-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	01c170a41499c056c0325e35c46fa8f5	-
	389-ds-base-libs-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	077f198685889332435a7604511f783c	-
	389-ds-base-snmp-1.4.3.23-10.module+el8.5.0+20376+fc99395b.aarch64.rpm	00f637a53ca130f23ccd8e3ccba454c3	-
	python3-lib389-1.4.3.23-10.module+el8.5.0+20376+fc99395b.noarch.rpm	17ea79c14589b6896f32b4f959fedb0c	-
Oracle Linux 8 (x86_64)	389-ds-base-1.4.3.23-10.module+el8.5.0+20376+fc99395b.src.rpm	095fba94197f7d0724c0f803a721ece7	-
	389-ds-base-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	f0ed5f2b27562cc75d827b145b4e7777	-
	389-ds-base-devel-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	6a492d85ce269ad637caad6b4396a26e	-
	389-ds-base-legacy-tools-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	64131835bee51548a12702356a37234f	-
	389-ds-base-libs-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	a3a23fcf79e24517e2fd9ed112d5b2c7	-
	389-ds-base-snmp-1.4.3.23-10.module+el8.5.0+20376+fc99395b.x86_64.rpm	08f28751c3916a639a58e13cdf2be91d	-
	python3-lib389-1.4.3.23-10.module+el8.5.0+20376+fc99395b.noarch.rpm	17ea79c14589b6896f32b4f959fedb0c	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team