# changelog

author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.8-2
changelog:
  - Fixes spec file to make sure all the server instances are stopped before upgrade
  - Ticket 48030 - DNS errors after IPA upgrade due to broken ReplSync


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.9-1
changelog:
  - bump version to 1.3.3.9
  - Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
  - Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
  - Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
  - Ticket 47431 - CI test: added test cases for ticket 47431
  - Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
  - Ticket 47936: Create a global lock to serialize write operations over several backends
  - Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
  - Ticket 48048 - Fix coverity issues - 2015/3/1
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48109 - CI test: added test cases for ticket 48109
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48048 - Fix coverity issues - 2015/2/24
  - Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
  - Ticket 47828: DNA scope: allow to exlude some subtrees
  - Ticket 47988: test case
  - Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
  - Ticket 48003 - add template scripts
  - Ticket 48003 - build "suite" framework
  - Ticket 48005 - CI test: added test cases for ticket 48005
  - Ticket 48005 - ns-slapd crash in shutdown phase
  - Ticket 47742 - 64bit problem on big endian: auth method not supported
  - Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
  - Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
  - Ticket 48027 - revise the rootdn plugin configuration validation
  - Ticket 47451 - dynamic plugins - fix crash caused by invalid  plugin config
  - Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.10-1
changelog:
  - release 1.3.3.10
  - Resolves: Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.11-1
changelog:
  - release 1.3.3.11
  - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
  - Ticket 48190 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane
  - Ticket 48183 - bind on db chained to AD returns err=32
  - Ticket 48158 - cleanAllRUV task limit not being enforced correctly
  - Ticket 48158 - Remove cleanAllRUV task limit of 4
  - Ticket 48146 - async simple paged results issue; need to close a small window for a pr index competed among multiple threads.
  - Ticket 48146 - async simple paged results issue; log pr index
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48177 - dynamic plugins should not return an error when modifying a critical plugin
  - Ticket 48146 - async simple paged results issue


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.12-1
changelog:
  - release 1.3.3.12
  - Resolves: Bug 1232896 - CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-1
changelog:
  - Release 1.3.4.0 (rebase)
  - Enable nunc-stans in the build.
  - Ticket 47490 - test case failing if 47721 is also fixed
  - Ticket 47640 - Linked attributes transaction not aborted when  linked entry does not exit
  - Ticket 47669 - CI test: added test cases for ticket 47669
  - Ticket 47669 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute
  - Ticket 47723 - winsync sets AccountUserControl in AD to 544
  - Ticket 47787 - Make the test case more robust
  - Ticket 47833 - TEST CASE only (modrdn fails if renamed entry member of a group and is out of memberof scope)
  - Ticket 47878 - Improve setup-ds update logging
  - Ticket 47893 - should use Sys::Hostname instead Net::Domain
  - Ticket 47910 - allow logconv.pl -S/-E switches to work even when timestamps not present in access log
  - Ticket 47913 - remove-ds.pl should not remove /var/lib/dirsrv
  - Ticket 47921 - indirect cos does not reflect changes in the cos attribute
  - Ticket 47927 - Uniqueness plugin: should allow to exclude some subtrees from its scope
  - Ticket 47953 - testcase for removing invalid aci
  - Ticket 47966 - CI test: added test cases for ticket 47966
  - Ticket 47966 - slapd crashes during Dogtag clone reinstallation
  - Ticket 47972 - make parsing of nsslapd-changelogmaxage more fault tolerant
  - Ticket 47972 - make parsing of nsslapd-changelogmaxage more fool proof
  - Ticket 47998 - cleanup WINDOWS ifdef's
  - Ticket 47998 - remove remaining obsolete OS code/files
  - Ticket 47998 - remove "windows" files
  - Ticket 47999 - address several race conditions in tests
  - Ticket 47999 - lib389 individual tests not running correctly  when run as a whole
  - Ticket 48003 - build "suite" framework
  - Ticket 48008 - db2bak.pl man page should be improved.
  - Ticket 48017 - add script to generate lib389 CI test script
  - Ticket 48019 - Remove refs to constants.py and backup/restore from lib389 tests
  - Ticket 48023 - replace old replication check with lib389 function
  - Ticket 48025 - add an option '-u' to dbgen.pl for adding group entries with uniquemembers
  - Ticket 48026 - fix invalid write for friendly attribute names
  - Ticket 48026 - Fix memory leak in uniqueness plugin
  - Ticket 48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes.
  - Ticket 48032 - change C code license to GPLv3; change C code license to allow openssl
  - Ticket 48035 - nunc-stans - Revise shutdown sequence
  - Ticket 48036 - ns_set_shutdown should call ns_job_done
  - Ticket 48037 - ns_thrpool_new should take a config struct rather than many parameters
  - Ticket 48038 - logging should be pluggable
  - Ticket 48039 - nunc-stans malloc should be pluggable
  - Ticket 48040 - preserve the FD when disabling a listener
  - Ticket 48043 - use nunc-stans config initializer
  - Ticket 48103 - update DS for new nunc-stans header file
  - Ticket 48110 - Free all the nunc-stans signal jobs when shutdown is detected
  - Ticket 48111 - "make clean" wipes out original files
  - Ticket 48122 - nunc-stans FD leak
  - Ticket 48127 - Using RPM, allows non root user to create/remove DS instance
  - Ticket 48141 - aci with wildcard and macro not correctly evaluated
  - Ticket 48143 - Password is not correctly passed to perl command line tools if it contains shell special characters.
  - Ticket 48149 - ns-slapd double free or corruption crash
  - Ticket 48154 - abort cleanAllRUV tasks should not certify-all by default
  - Ticket 48169 - support NSS 3.18
  - Ticket 48170 - Parse nsIndexType correctly
  - Ticket 48175 - Avoid using regex in ACL if possible
  - Ticket 48178 - add config param to enable nunc-stans
  - Ticket 48191 - CI test: added test cases for ticket 48191
  - Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn
  - Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn Adding nsslapd-maxsimplepaged-per-conn
  - Ticket 48194 - CI test: added test cases for ticket 48194
  - Ticket 48197 - error texts from preop plugins not sent to client


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.1-1
changelog:
  - Release 1.3.4.1
  - Resolves: Bug 1234277 - distro-wide architecture set overriden by buildsystem; Upgrade nunc-stans to 0.1.5.
  - Enable nunc-stans just for x86_64.
  - Ticket 48203 - Fix coverity issues - 06/22/2015


