-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-23ddca9ca8 2019-09-26 01:41:14.819533 --------------------------------------------------------------------------------
Name : 389-ds-base Product : Fedora 29 Version : 1.4.0.28 Release : 1.fc29 URL : https://www.port389.org Summary : 389 Directory Server (base) Description : 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration.
-------------------------------------------------------------------------------- Update Information:
Bump version to 1.4.0.28 -------------------------------------------------------------------------------- ChangeLog:
* Tue Sep 17 2019 Mark Reynolds mreynolds@redhat.com - 1.4.0.28-1 - Bump version to 1.4.0.28 - Issue 50581 - ns-slapd crashes during ldapi search - Issue 50499 - Audit fix - Update npm 'eslint-utils' version - Issue 49624 - modrdn silently fails if DB deadlock occurs - Issue 50542 - Fix crash in filter tests - Issue 49232 - Truncate the message when buffer capacity is exceeded - Issue 50542 - Entry cache contention during base search - Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks - Issue 50536 - Audit log heading written to log after every update - Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted - Issue 50534 - CLI change schema edit subcommand to replace - Issue 50534 - backport UI schema editing fix * Tue Aug 6 2019 Mark Reynolds mreynolds@redhat.com - 1.4.0.27-1 - Bump version to 1.4.0.27 - Issue 50208 - make instances mark off based on dse.ldif not sysconfig - Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1" - Issue 50529 - LDAP server returning PWP controls in different sequence - Issue 50508 - UI - fix local password policy form * Fri Jul 19 2019 Mark Reynolds mreynolds@redhat.com - 1.4.0.26-1 - Bump version to 1.4.0.26 - Issue 50499 - Fix audit issues and remove jquery from the whitelist - Issue 50355 - SSL version min and max not correctly applied - Issue 50325 - Add Security tab to UI - Issue 50177 - Add a new CI test case, also added fixes in lib389 * Mon Jul 8 2019 Mark Reynolds mreynolds@redhat.com - 1.4.0.25-1 - Bump version to 1.4.0.25 - Issue 50431 - Fix regression from coverity fix * Tue Jun 25 2019 Mark Reynolds mreynolds@redhat.com - 1.4.0.24-1 - Bump version to 1.4.0.24 - Issue 50052 - Fix rpm.mk according to audit-ci change - Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present - Issue 50041 - Add the rest UI Plugin tabs - Part 1 - Issue 50217 - Implement dsconf security section - Issue 49602 - Revise replication status messages - Issue 50431 - Fix regression from coverity fix - Issue 50431 - Fix covscan warnings - Issue 50426 - nsSSL3Ciphers is limited to 1024 characters - Issue 50428 - Log the actual base DN when the search fails with "invalid attribute request" - Issue 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS - Issue 50413 - ds-replcheck - Always display the Result Summary - Issue 50355 - NSS can change the requested SSL min and max versions * Fri May 24 2019 Mark Reynolds mreynolds@redhat.com - 1.4.0.23-1 - Ticket 50041 - Add the rest UI Plugin tabs - Part 2 - Ticket 50340 - 2nd try - structs for diabled plugins will not be freed - Ticket 50393 - maxlogsperdir accepting negative values - Ticket 50396 - Crash in PAM plugin when user does not exist - Ticket 50390 - Add Managed Entries Plug-in Config Entry schema - Ticket 50251 - clear text passwords visable in CLI verbose mode logging - Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients - Ticket 50370 - CleanAllRUV task crashing during server shutdown - Ticket 50340 - structs for disabled plugins will not be freed - Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes - Ticket 50329 - revert fix - Ticket 50340 - structs for diabled plugins will not be freed - Ticket 50327 - Add replication conflict support to UI - Ticket 50327 - Add replication conflict entry support to lib389/CLI - Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS - Ticket 49990 - Increase the default FD limits - Ticket 50291 - Add monitor tab functionality to Cockpit UI - Ticket 50305 - Revise CleanAllRUV task restart process - Ticket 50303 - Add task creation date to task data - Ticket 50240 - Improve task logging * Fri Mar 29 2019 Mark Reynolds mreynolds@redhat.com - 1.4.0.22-1 - Bump version to 1.4.0.22 - Ticket 50308 - Revise memory leak fix - Ticket 50308 - Fix memory leaks for repeat binds and replication - Ticket 49873 - (cont 3rd) cleanup debug log - Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup - Ticket 50292 - Fix Plugin CLI and UI issues - Ticket 50289 - Fix various database UI issues - Ticket 50300 - Fix memory leak in automember plugin - Ticket 50265 - the warning about skew time could last forever - Ticket 50260 - Invalid cache flushing improvements - Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry - Ticket 50077 - Do not automatically turn automember postop modifies on - Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members - Ticket 49873 - (cont) Contention on virtual attribute lookup - Ticket 50260 - backend txn plugins can corrupt entry cache - Ticket 50041 - Add CLI functionality for special plugins - Ticket 50273 - reduce default replicaton agmt timeout - Ticket 50234 - one level search returns not matching entry - Ticket 50232 - export creates not importable ldif file - Ticket 50215 - UI - implement Database Tab in reachJS - Ticket 50238 - Failed modrdn can corrupt entry cache - Ticket 50236 - memberOf should be more robust - Ticket 50151 - lib389 support cli add/replace/delete on objects - Ticket 50155 - password history check has no way to just check the current password - Ticket 49873 - Contention on virtual attribute lookup - Ticket 49658 - In replicated topology a single-valued attribute can diverge - Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status - Ticket 50165 - Fix issues with dscreate * Thu Jan 31 2019 Mark Reynolds mreynolds@redhat.com - 1.4.0.21-1 - Bump version to 1.4.0.21 - Ticket 50041 - CLI and WebUI - Add memberOf plugin functionality - Ticket 50079 `Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica` - Ticket 50125 - perl fix ups for tmpfiles - Ticket 50164 - Add test for dscreate - Ticket 50059: If an object is nsds5replica, it must be cn=replica - Ticket 50169 - lib389 changed hardcoded systemctl path - Ticket 50165 - Fix dscreate issues - Ticket 50152 - Replace os.getenv('HOME') with os.path.expanduser - Fix compiler warning in snmp main() - Fix compiler warning in init.c - Ticket 49540 - FIx compiler warning in ldif2ldbm - Ticket 50077 - Fix compiler warnings in automember rebuild task - Ticket 49972 - use-after-free in case of several parallel krb authentication - Ticket 50161 - Fixed some descriptions in "dsconf backend --help" - Ticket 50153 - Increase default max logs - Ticket 50123 - with_tmpfiles_d is associated to systemd - Ticket 49984 - python installer add option to create suffix entry - Ticket 50077 - RFE - improve automember plugin to work with modify ops - Ticket 50136 - Allow resetting passwords on the CLI - Ticket 49994 - Adjust dsconf backend usage - Ticket 50138 - db2bak.pl -P LDAPS does not work when nsslapd-securePort is missing - Ticket 50122 - Fix incorrect path spec - Ticket 50145 - Add a verbose option to the backup tools - Ticket 50056 - dsctl db2ldif throws an exception - Ticket 50078 - cannot add cenotaph in read only consumer - Ticket 50126 - Incorrect usage of sudo in test - Ticket 50130 - Building RPMs on RHEL8 fails - Ticket 50134 - fixup-memberof.pl does not respect protocol requested - Ticket 50122 - Selinux test for presence - Ticket 50101 - Port fourwaymmr Test TET suit to python3 - Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day). - Ticket 50128 - NS Stress fails without ipv6 - Ticket 49618 - Set nsslapd-cachememsize to custom value - Ticket 50117 - after certain failed import operation, impossible to replay an import operation - Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first - Ticket 48064 - Fix various issues in disk monitoring test suite - Ticket 49938 - lib389 - Clean up CLI logging - Ticket 49761 - Fix CI test suite issues - Ticket 50056 - Fix UI bugs (part 2) - Ticket 48064 - CI test - disk_monitoring - Ticket 50099 - extend error messages - Ticket 50099 - In FIPS mode, the server can select an unsupported password storage scheme - Ticket 50041 - Add basic plugin UI/CLI wrappers - Ticket 50082 - Port state test suite - Ticket 49574 - remove index subsystem - Ticket 49588 - Add py3 support for tickets : part-5 - Ticket 50095 - cleanup deprecated key.h includes * Fri Dec 14 2018 Mark Reynolds mreynolds@redhat.com - 1.4.0.20-1 - Bump version to 1.4.0.20 - Ticket 49994 - Add test for backend/suffix CLI functions - Ticket 50090 - refactor fetch_attr() to slapi_fetch_attr() - Ticket 50091 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day) - Ticket 50056 - Fix CLI/UI bugs - Ticket 49864 - Revised replication status messages for transient errors - Ticket 50071 - Set ports in local_simple_allocate function - Ticket 50065 - lib389 aci parsing is too strict - Ticket 50061 - Improve schema loading in UI - Ticket 50063 - Crash after attempting to restore a single backend - Ticket 50062 - Replace error by warning in the state machine defined in repl5_inc_run - Ticket 50041 - Set the React dataflow foundation and add basic plugin UI - Ticket 50028 - Revise ds-replcheck usage - TIcket 50057 - Pass argument into hashtable_new - Ticket 50053 - improve testcase - Ticket 50053 - Subtree password policy overrides a user-defined password policy - Ticket 49974 - lib389 - List instances with initconfig_dir instead of sysconf_dir - Ticket 49984 - Add an empty domain creation to the dscreate - Ticket 49950 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user - Ticket 50046 - Remove irrelevant debug-log messages from CLI tools - Ticket 50022, 50012, 49956, and 49800: Various dsctl/dscreate fixes - Ticket 49927 - dsctl db2index does not work - Ticket 49814 - dscreate should handle selinux ports that are in a range - Ticket 49543 - fix certmap dn comparison - Ticket 49994 - comment out dev paths - Ticket 49994 - Add backend features to CLI - Ticket 48081 - Add new CI tests for password * Thu Nov 1 2018 Mark Reynolds mreynolds@redhat.com - 1.4.0.19-1 - Bump version to 1.4.0.19 - Ticket 50026 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified - Ticket 50020 - during MODRDN referential integrity can fail erronously while updating large groups - Ticket 49999 - Finish up the transfer to React - Ticket 50004 - lib389 - improve X-ORIGIN schema parsing - Ticket 50013 - Log warn instead of ERR when aci target does not exist. - Ticket 49975 - followup for broken prefix deployment - Ticket 49999 - Add dist-bz2 target for Koji build system - Ticket 49814 - Add specfile requirements for python3-libselinux - Ticket 49814 - Add specfile requirements for python3-selinux - Ticket 49999 - Integrate React structure into cockpit-389-ds - Ticket 49995 - Fix Tickets with internal op logging - Ticket 49997 - RFE: ds-replcheck could validate suffix exists and it's replicated - Ticket 49985 - memberof may silently fails to update a member - Ticket 49967 - entry cache corruption after failed MODRDN - Ticket 49975 - Add missing include file to main.c - Ticket 49814 - skip standard ports for selinux labelling - Ticket 49814 - dscreate should set the port selinux labels - Ticket 49856 - Remove backend option from bak2db - Ticket 49926 - Fix various Tickets with replication UI - Ticket 49975 - SUSE rpmlint Tickets - Ticket 49939 - Fix ldapi path in lib389 - Ticket 49978 - Add CLI logging function for UI - Ticket 49929 - Modifications required for the Test Case Management System - Ticket 49979 - Fix regression in last commit - Ticket 49979 - Remove dirsrv tests subpackage - Ticket 49928 - Fix various small WebUI schema Tickets - Ticket 49926 - UI - comment out dev cli patchs - Ticket 49926 - Add replication functionality to UI * Wed Oct 10 2018 Mark Reynolds mreynolds@redhat.com - 1.4.0.18-1 - Bump version to 1.4.0.18 - Ticket 49968 - Confusing CRITICAL message: list_candidates - NULL idl was recieved from filter_candidates_ext - Ticket 49946 - upgrade of 389-ds-base could remove replication agreements. - Ticket 49969 - DOS caused by malformed search operation (part 2) * Tue Oct 9 2018 Mark Reynolds mreynolds@redhat.com - 1.4.0.17-2 - Bump version to 1.4.0.17-2 - Ticket 49969 - DOS caused by malformed search operation (security fix) - Ticket 49943 - rfc3673_all_oper_attrs_test is not strict enough - Ticket 49915 - Master ns-slapd had 100% CPU usage after starting replication and replication cannot finish - Ticket 49963 - ASAN build fails on F28 - Ticket 49947 - Coverity Fixes - Ticket 49958 - extended search fail to match entries - Ticket 49928 - WebUI schema functionality and improve CLI part - Ticket 49954 - On s390x arch retrieved DB page size is stored as size_t rather than uint32_t - Ticket 49928 - Refactor and improve schema CLI/lib389 part to DSLdapObject - Ticket 49926 - Fix replication tests on 1.3.x - Ticket 49926 - Add replication functionality to dsconf - Ticket 49887 - Clean up thread local usage - Ticket 49937 - Log buffer exceeded emergency logging msg is not thread-safe (security fix) - Ticket 49866 - fix typo in cos template in pwpolicy subtree create - Ticket 49930 - Correction of the existing fixture function names to remove test_ prefix - Ticket 49932 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly - Ticket 48053 - Add attribute encryption test cases - Ticket 49866 - Refactor PwPolicy lib389/CLI module - Ticket 49877 - Add log level functionality to UI --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-23ddca9ca8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org