Compare commits
No commits in common. "imports/c9-beta/slapi-nis-0.56.7-4.el9" and "c8-stream-DL1" have entirely different histories.
imports/c9
...
c8-stream-
|
|
@ -1 +1 @@
|
|||
SOURCES/slapi-nis-0.56.7.tar.gz
|
||||
SOURCES/slapi-nis-0.60.0.tar.gz
|
||||
|
|
|
|||
|
|
@ -1 +1 @@
|
|||
53226040ee1c83e08a89cddf30f3943f88371ea9 SOURCES/slapi-nis-0.56.7.tar.gz
|
||||
e5a84cf93b13b174c6d865de2f735cbfbc950917 SOURCES/slapi-nis-0.60.0.tar.gz
|
||||
|
|
|
|||
|
|
@ -1,16 +0,0 @@
|
|||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iQIzBAABCgAdFiEEhAodHH8+xLL+UwQ1RxniuKu/YhoFAmCjZIsACgkQRxniuKu/
|
||||
YhpwrQ//X4EKLzW7zSGX0YrNEK7v4dMI8nsY6oAip1k1zQh9PnbUjbedWq7ArkDU
|
||||
VZIJ3l95qQZGSpFipNdy5ylAJEitQEVYG77KZtee/5Y7dyJp5dxMP58U0n7dxxsI
|
||||
V3JurNAGZgTkrdY860ByiFqHu6hqWtnx+IBXiIzOnnCkgMoHc5YTDAUSR3nQI6yL
|
||||
cZcoFHtaiwdiXTL5jJokbDYVc8ruJsTo8FouRQTWjzs+lNrmI1dlEfW4b7v01GQy
|
||||
GzMXn8NnoEOCJimnSDoEkl2IyOxEhU/J8jo43PtiFiVK22jwWcEtWYP7DuiJP4eN
|
||||
qFXicBDWnoYdlET5/3Lagbt9ogXT+cCZrZHoRyAQ6yrCGDUdu9O2iG6oAr3m/tFb
|
||||
IJfZuC2vgWjXYASdVLNEakD05ggOoS4T/UYh1qHQCPV7Qp884J5m9k9qPDIyKRx2
|
||||
BDugRAiLMOADEbntDyy6jOFit15RwmPklz3KI45LvIuWy8z++SiFAXoG04ysXigL
|
||||
tJJoPZpIZ/pn/9cSA+rga0Jfp8M8hwKgxxPuOlEuonIrFTaaGGNwq6JbUbV2QNZU
|
||||
utH3nrlkxX6mjp7xj6GMlX/oZAo+lcKIJmoIFo6sT6XQQQjnieame08CqyTB6yKH
|
||||
9MZqibIPTipzvLe3kDn/o3q0fXKP7mvlvBdFyBeitXWJ/fq0A6c=
|
||||
=FVlm
|
||||
-----END PGP SIGNATURE-----
|
||||
|
|
@ -0,0 +1,16 @@
|
|||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iQIzBAABCgAdFiEEhAodHH8+xLL+UwQ1RxniuKu/YhoFAmMAimgACgkQRxniuKu/
|
||||
YhorRw/8D0typYdDLGlalL7nMo57rjSApgy6gA4FKxMsNg/KiN1/7rMoCbu13iG0
|
||||
sP6wpeZLjBNI/nWGYLRuQOyi7DSxgXYlNp+8xzJDMKjnNjRSaK+/EjqIcWhdWoEq
|
||||
Q1JDjTdJ3hDCWCMQFrA/EBqb/WgQAhdmPdVzMoy6L2GBvX7W+UlCWaSMfpq5hnqg
|
||||
9SZe4NpC7i6BVhHrnWUMsQRcApnjdHlC8tQmzqdD0+iNer0asXmJcQGCI9W7EwAs
|
||||
MT4be/C2hfLfWgBdaMCZGgefGFYGI1ec+hfM9jyGsJcBsRXQ8Rq+VOLEI7lkD+wc
|
||||
nQwq1VVVcAwFkbziQ5JBZqOKdem8lo9Mucn/sQ297EIfIi8NVhlDDZFtkgsYAglT
|
||||
gaEeK4+d0QNz2+ViwJxGp2l0mG2inV8GjiyINpntbw8dh+qwI8xLI6/6B7R6wP30
|
||||
Kj/90EehX0vFXX2ylrkrvg3d7UGp6PBgsiqeaJT5bL2ItVKJl8FyD0N9JsEL766/
|
||||
SKqNHGZjEJv1rzPf2MMqutLHe1aSyTBjq4JBYPJKHAXPdvZluyALLM94erZqA/tJ
|
||||
17PCLAf3P+OvixcnyzsUTP9U7SNlLPiMqwyvUB26ul0+CqEqKzZxiTOfpbKQ8p/j
|
||||
3QpkrKLn0JbofZN1K7H6x/Mdwe5scdeTP0T8YPJm+ofZq+fBdnI=
|
||||
=ZUV6
|
||||
-----END PGP SIGNATURE-----
|
||||
|
|
@ -0,0 +1,102 @@
|
|||
From ee94788e63d9f35daca7c0d1e80a488f738a9c52 Mon Sep 17 00:00:00 2001
|
||||
From: Thierry Bordaz <tbordaz@redhat.com>
|
||||
Date: Fri, 1 Sep 2023 11:02:08 +0200
|
||||
Subject: [PATCH 1/2] BZ 2124214 - schema compat plugin deadlock on delete post
|
||||
op
|
||||
|
||||
Bug description:
|
||||
backends locks (SC map and retroCL) are acquired in
|
||||
the opposite order
|
||||
(https://bugzilla.redhat.com/show_bug.cgi?id=2124214#c17)
|
||||
|
||||
Fix description:
|
||||
Credits of the fix are to Pierre Rogier who found
|
||||
a reproducible testcase, did the fix and verified it.
|
||||
|
||||
In specific condition of retroCL trimming the DEL
|
||||
callback of the SC should check if the backend should
|
||||
be ignored
|
||||
|
||||
relates: 2124214
|
||||
---
|
||||
src/back-shr.c | 12 ++++++++++++
|
||||
1 file changed, 12 insertions(+)
|
||||
|
||||
diff --git a/src/back-shr.c b/src/back-shr.c
|
||||
index ce2b1f3..1792bef 100644
|
||||
--- a/src/back-shr.c
|
||||
+++ b/src/back-shr.c
|
||||
@@ -2811,6 +2811,18 @@ backend_shr_delete_cb(Slapi_PBlock *pb)
|
||||
if (wrap_get_call_level() > 0) {
|
||||
return 0;
|
||||
}
|
||||
+ /* especially important to test if we want to prevent frequent
|
||||
+ * deadlocks when backends are accesses in opposite order.
|
||||
+ * i.e. "regular" update on domain map+retroCL and retroCL trimming
|
||||
+ * retroCL+domain map
|
||||
+ */
|
||||
+ if (backend_shr_write_ignore(pb)) {
|
||||
+#if DEBUG_MAP_LOCK
|
||||
+ slapi_log_error(SLAPI_LOG_FATAL, "schema-compat",
|
||||
+ "backend_shr_delete_cb: (%p) operation is not impacting schema compat\n", PR_MyThreadId(), 1);
|
||||
+#endif
|
||||
+ return 0;
|
||||
+ }
|
||||
|
||||
/* Read parameters from the pblock. */
|
||||
slapi_pblock_get(pb, SLAPI_PLUGIN_PRIVATE, &cbdata.state);
|
||||
--
|
||||
2.41.0
|
||||
|
||||
|
||||
From 61fcf534c3da767788e27641f3ebfe4d6a6c0b25 Mon Sep 17 00:00:00 2001
|
||||
From: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
Date: Mon, 9 Oct 2023 13:53:28 +0300
|
||||
Subject: [PATCH 2/2] Add more ignores to modrdn and modify cases
|
||||
|
||||
BZ 2124214 - schema compat plugin deadlock on delete post op
|
||||
|
||||
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
---
|
||||
src/back-shr.c | 18 ++++++++++++++++++
|
||||
1 file changed, 18 insertions(+)
|
||||
|
||||
diff --git a/src/back-shr.c b/src/back-shr.c
|
||||
index 1792bef..4cbc39b 100644
|
||||
--- a/src/back-shr.c
|
||||
+++ b/src/back-shr.c
|
||||
@@ -2463,6 +2463,15 @@ backend_shr_modify_cb(Slapi_PBlock *pb)
|
||||
/* No data yet, ignore */
|
||||
return 0;
|
||||
}
|
||||
+
|
||||
+ if (backend_shr_write_ignore(pb)) {
|
||||
+#if DEBUG_MAP_LOCK
|
||||
+ slapi_log_error(SLAPI_LOG_FATAL, "schema-compat",
|
||||
+ "backend_shr_modify_cb: (%p) operation is not impacting schema compat\n", PR_MyThreadId(), 1);
|
||||
+#endif
|
||||
+ return 0;
|
||||
+ }
|
||||
+
|
||||
slapi_pblock_get(pb, SLAPI_MODIFY_TARGET, &dn);
|
||||
slapi_pblock_get(pb, SLAPI_MODIFY_MODS, &cbdata.mods);
|
||||
slapi_pblock_get(pb, SLAPI_ENTRY_PRE_OP, &cbdata.e_pre);
|
||||
@@ -2669,6 +2678,15 @@ backend_shr_modrdn_cb(Slapi_PBlock *pb)
|
||||
/* No data yet, ignore */
|
||||
return 0;
|
||||
}
|
||||
+
|
||||
+ if (backend_shr_write_ignore(pb)) {
|
||||
+#if DEBUG_MAP_LOCK
|
||||
+ slapi_log_error(SLAPI_LOG_FATAL, "schema-compat",
|
||||
+ "backend_shr_modrdn_cb: (%p) operation is not impacting schema compat\n", PR_MyThreadId(), 1);
|
||||
+#endif
|
||||
+ return 0;
|
||||
+ }
|
||||
+
|
||||
slapi_pblock_get(pb, SLAPI_ENTRY_PRE_OP, &cbdata.e_pre);
|
||||
slapi_pblock_get(pb, SLAPI_ENTRY_POST_OP, &cbdata.e_post);
|
||||
|
||||
--
|
||||
2.41.0
|
||||
|
||||
|
|
@ -1,52 +0,0 @@
|
|||
From 0f700cf71f5531fb6c863990216aa1eb88970dc8 Mon Sep 17 00:00:00 2001
|
||||
From: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
Date: Wed, 16 Jun 2021 11:08:21 +0300
|
||||
Subject: [PATCH] back-sch-nss: only loop if asked to try again
|
||||
|
||||
slapi-nis uses sss-idmap library to discover user group membership. Its
|
||||
sss_nss_getgrouplist_timeout() function can return timeout errors as
|
||||
well which might cause a busy looping. sss_nss_getgrouplist_timeout()
|
||||
will return ERANGE which is translated by slapi-nis to NSS_STATUS_TRYAGAIN.
|
||||
|
||||
Fixes: rhbz#1967179
|
||||
|
||||
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
---
|
||||
src/back-sch-nss.c | 13 ++++++++-----
|
||||
1 file changed, 8 insertions(+), 5 deletions(-)
|
||||
|
||||
diff --git a/src/back-sch-nss.c b/src/back-sch-nss.c
|
||||
index df04a96..b595f3b 100644
|
||||
--- a/src/back-sch-nss.c
|
||||
+++ b/src/back-sch-nss.c
|
||||
@@ -589,19 +589,22 @@ repeat:
|
||||
return NULL;
|
||||
}
|
||||
|
||||
- do {
|
||||
+ for(rc = NSS_STATUS_TRYAGAIN; rc == NSS_STATUS_TRYAGAIN;) {
|
||||
rc = backend_nss_getgrouplist(ctx, user_name, pwd.pw_gid,
|
||||
grouplist, &ngroups,
|
||||
&lerrno);
|
||||
- if ((rc != NSS_STATUS_SUCCESS)) {
|
||||
- tmp_list = realloc(grouplist, ngroups * sizeof(gid_t));
|
||||
- if (tmp_list == NULL) {
|
||||
+ if (rc == NSS_STATUS_TRYAGAIN) {
|
||||
+ tmp_list = NULL;
|
||||
+ if (lerrno == ERANGE) {
|
||||
+ tmp_list = realloc(grouplist, ngroups * sizeof(gid_t));
|
||||
+ }
|
||||
+ if ((tmp_list == NULL) || (lerrno == ENOMEM)) {
|
||||
free(grouplist);
|
||||
return NULL;
|
||||
}
|
||||
grouplist = tmp_list;
|
||||
}
|
||||
- } while (rc != NSS_STATUS_SUCCESS);
|
||||
+ }
|
||||
|
||||
entries = calloc(ngroups + 1, sizeof(entries[0]));
|
||||
if (entries == NULL) {
|
||||
--
|
||||
2.31.1
|
||||
|
||||
|
|
@ -1,41 +0,0 @@
|
|||
From d18b1d105c928363eddec87af37fda0757cfb440 Mon Sep 17 00:00:00 2001
|
||||
From: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
Date: Thu, 1 Jul 2021 11:37:38 +0300
|
||||
Subject: [PATCH] back-sch: reuse backend_should_descend
|
||||
|
||||
When backend_search_find_set_dn_cb() is called, use the same logic as in
|
||||
other callbacks -- identify whether we should descend into the group by
|
||||
using backend_should_descend().
|
||||
|
||||
The issue was introduced in 2015 with ID Views support but was masked
|
||||
until 61ea8f6a104da25329e301a8f56944f860de8177 as we always felt through
|
||||
to the full scan of the groups anyway. with the latter change the
|
||||
fell-through part was removed.
|
||||
|
||||
Resolves: rhbz#1958909
|
||||
|
||||
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
Signed-off-by: Thierry Bordaz <tbordaz@redhat.com>
|
||||
---
|
||||
src/back-sch.c | 5 +++--
|
||||
1 file changed, 3 insertions(+), 2 deletions(-)
|
||||
|
||||
diff --git a/src/back-sch.c b/src/back-sch.c
|
||||
index d806627..0ed06fb 100644
|
||||
--- a/src/back-sch.c
|
||||
+++ b/src/back-sch.c
|
||||
@@ -1369,8 +1369,9 @@ backend_search_find_set_dn_cb(const char *group, void *cb_data)
|
||||
|
||||
/* Check the group itself. */
|
||||
group_dn = slapi_sdn_new_dn_byval(group);
|
||||
- if (slapi_sdn_scope_test(group_dn, cbdata->target_dn,
|
||||
- cbdata->scope) == 1) {
|
||||
+ if (backend_should_descend(group_dn,
|
||||
+ cbdata->target_dn,
|
||||
+ cbdata->scope)) {
|
||||
cbdata->answer = TRUE;
|
||||
slapi_sdn_free(&group_dn);
|
||||
return TRUE;
|
||||
--
|
||||
2.31.1
|
||||
|
||||
|
|
@ -0,0 +1,78 @@
|
|||
From 24eeccd408d9627299231d7843ca9e65e71af3de Mon Sep 17 00:00:00 2001
|
||||
From: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
Date: Tue, 21 Mar 2023 17:32:47 +0200
|
||||
Subject: [PATCH 1/2] Test the case when container is a child of the target DN
|
||||
|
||||
We can have target DN both inside or outside of a container.
|
||||
Previously, the code did not look into the latter one. When container is
|
||||
a child of the target DN (like using IPA's base DN instead of
|
||||
cn=compat,$BASE_DN) and a search was done with a subtree scope, the
|
||||
check failed.
|
||||
|
||||
With this change a subtree scope search which starts with a base DN
|
||||
that includes a compat tree's container would be considered for the
|
||||
search.
|
||||
|
||||
Fixes: rhbz#2168893
|
||||
|
||||
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
---
|
||||
src/back-sch.c | 9 +++++----
|
||||
1 file changed, 5 insertions(+), 4 deletions(-)
|
||||
|
||||
diff --git a/src/back-sch.c b/src/back-sch.c
|
||||
index 93746b1..e447bda 100644
|
||||
--- a/src/back-sch.c
|
||||
+++ b/src/back-sch.c
|
||||
@@ -1340,11 +1340,12 @@ backend_search_find_set_dn_in_group_cb(const char *group, const char *set, bool_
|
||||
|
||||
if (slapi_sdn_scope_test(cbdata->target_dn,
|
||||
set_data->container_sdn,
|
||||
- cbdata->scope) == 1) {
|
||||
+ cbdata->scope) != 0) {
|
||||
cbdata->answer = TRUE;
|
||||
- }
|
||||
-
|
||||
- if (slapi_sdn_issuffix(cbdata->target_dn, set_data->container_sdn) == 1) {
|
||||
+ } else if ((cbdata->scope == LDAP_SCOPE_SUBTREE) &&
|
||||
+ slapi_sdn_scope_test(set_data->container_sdn,
|
||||
+ cbdata->target_dn,
|
||||
+ cbdata->scope) != 0) {
|
||||
cbdata->answer = TRUE;
|
||||
}
|
||||
|
||||
--
|
||||
2.40.0
|
||||
|
||||
|
||||
From 73058645eac86b40913deec01807854e0a8bda0d Mon Sep 17 00:00:00 2001
|
||||
From: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
Date: Mon, 24 Apr 2023 12:19:10 +0300
|
||||
Subject: [PATCH 2/2] Identify the container without search base check
|
||||
|
||||
Ignore the actual search base when identifying whether a target DN is
|
||||
within a known data container. The reason is that we need to know
|
||||
whether a search would have to descent into a particular container. The
|
||||
scope validation will happen later.
|
||||
|
||||
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
|
||||
---
|
||||
src/back-sch.c | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/src/back-sch.c b/src/back-sch.c
|
||||
index e447bda..a79f61b 100644
|
||||
--- a/src/back-sch.c
|
||||
+++ b/src/back-sch.c
|
||||
@@ -1340,7 +1340,7 @@ backend_search_find_set_dn_in_group_cb(const char *group, const char *set, bool_
|
||||
|
||||
if (slapi_sdn_scope_test(cbdata->target_dn,
|
||||
set_data->container_sdn,
|
||||
- cbdata->scope) != 0) {
|
||||
+ LDAP_SCOPE_SUBTREE) != 0) {
|
||||
cbdata->answer = TRUE;
|
||||
} else if ((cbdata->scope == LDAP_SCOPE_SUBTREE) &&
|
||||
slapi_sdn_scope_test(set_data->container_sdn,
|
||||
--
|
||||
2.40.0
|
||||
|
||||
|
|
@ -10,17 +10,21 @@
|
|||
%endif
|
||||
|
||||
Name: slapi-nis
|
||||
Version: 0.56.7
|
||||
Release: 4%{?dist}
|
||||
Version: 0.60.0
|
||||
Release: 4%{?dist}.alma.1
|
||||
Summary: NIS Server and Schema Compatibility plugins for Directory Server
|
||||
License: GPLv2
|
||||
Group: System Environment/Daemons
|
||||
License: GPLv3
|
||||
URL: http://pagure.io/slapi-nis/
|
||||
Source0: https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz
|
||||
Source1: https://releases.pagure.org/slapi-nis/slapi-nis-%{version}.tar.gz.asc
|
||||
Patch1: slapi-nis-bz1979623.patch
|
||||
Patch2: slapi-nis-bz1979619.patch
|
||||
Patch0: slapi-nis-bz2183469.patch
|
||||
|
||||
BuildRequires: make
|
||||
# Patches were taken from:
|
||||
# https://gitlab.com/redhat/centos-stream/rpms/slapi-nis/-/commit/0c099f8456d77e063b51c39fac7c70105816855a
|
||||
Patch1: slapi-nis-RHEL-5134.patch
|
||||
|
||||
BuildRequires: make
|
||||
BuildRequires: autoconf
|
||||
BuildRequires: automake
|
||||
BuildRequires: libtool
|
||||
|
|
@ -38,7 +42,7 @@ BuildRequires: libtirpc-devel
|
|||
%else
|
||||
BuildRequires: libnsl2-devel
|
||||
%endif
|
||||
%if 0%{?fedora} > 27 || 0%{?rhel} >= 9
|
||||
%if 0%{?fedora} > 27 || 0%{?rhel} > 7
|
||||
ExcludeArch: %{ix86}
|
||||
%endif
|
||||
Requires: 389-ds-base >= 1.3.5.6
|
||||
|
|
@ -58,8 +62,8 @@ for attributes from multiple entries in the tree.
|
|||
|
||||
%prep
|
||||
%setup -q
|
||||
%patch0 -p1
|
||||
%patch1 -p1
|
||||
%patch2 -p1
|
||||
|
||||
%build
|
||||
autoconf --force
|
||||
|
|
@ -81,71 +85,79 @@ make check
|
|||
%endif
|
||||
|
||||
%files
|
||||
%defattr(-,root,root,-)
|
||||
%doc COPYING NEWS README STATUS doc/*.txt doc/examples/*.ldif doc/ipa
|
||||
%{_mandir}/man1/*
|
||||
%{_libdir}/dirsrv/plugins/*.so
|
||||
%{_sbindir}/nisserver-plugin-defs
|
||||
|
||||
%changelog
|
||||
* Fri Jan 21 2022 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-4
|
||||
- Rebuild against libnsl 2.0.0
|
||||
- Related: rhbz#2039220
|
||||
* Wed Nov 15 2023 Eduard Abdullin <eabdullin@almalinux.org> - 0.60.0-4.alma.1
|
||||
- Ignore updates from non-tracked subtrees during modify/modrdn/update
|
||||
to avoid deadlocks with retro changelog
|
||||
|
||||
* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 0.56.7-3
|
||||
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
||||
Related: rhbz#1991688
|
||||
|
||||
* Wed Jul 07 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
|
||||
- Resolves: rhbz#1979619
|
||||
IPA: High CPU utilization (over 1000% plus) by ns-slapd process
|
||||
- Resolves: rhbz#1979623
|
||||
With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.
|
||||
* Mon Apr 24 2023 Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-3
|
||||
- Also handle base searches within the compat tree
|
||||
- Related: rhbz#2183469
|
||||
|
||||
* Wed May 19 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-1
|
||||
- CVE-2021-3480: invalid bind DN crash
|
||||
- New upstream release
|
||||
- Resolves: rhbz#1947351
|
||||
* Wed Apr 12 2023 Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-2
|
||||
- Fix base DN searches outside the compat tree
|
||||
- Resolves: rhbz#2183469
|
||||
|
||||
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 0.56.6-3
|
||||
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
||||
* Sat Aug 20 2022 Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
|
||||
- upstream release 0.60.0
|
||||
- Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
|
||||
- Resolves: rhbz#1984010
|
||||
Fix ID views integration
|
||||
- Fix base scope lookups
|
||||
- Resolves: rhbz#1784172
|
||||
Bump NIS max dgram size to 8KB by default instead of 1KB
|
||||
- Resolves: rhbz#2070575
|
||||
Allow to rebuild the compat tree
|
||||
|
||||
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.6-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
||||
* Mon Sep 13 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-4
|
||||
- Resolves: rhbz#2000919 - memory leak in backend_search_cb
|
||||
|
||||
* Thu Jul 01 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
|
||||
- Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
|
||||
- Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap
|
||||
|
||||
* Wed Apr 07 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
|
||||
- CVE 2021-3480: idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
|
||||
- Resolves: rhbz#1944713
|
||||
|
||||
* Fri Dec 04 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-1
|
||||
- New upstream release
|
||||
- Ignore searches which don't match any configured map
|
||||
- Upstream release 0.56.6
|
||||
- Resolves rhbz#1891741
|
||||
|
||||
* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.5-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||
* Mon Sep 14 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-4
|
||||
- Ignore unmatched searches
|
||||
- Resolves: rhbz#1874015
|
||||
|
||||
* Thu Sep 10 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-3
|
||||
- Fix memory leaks in ID views processing
|
||||
- Resolves: rhbz#1875348
|
||||
|
||||
* Wed May 06 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-2
|
||||
- Initialize map locks in NIS plugin to prevent crash
|
||||
- Initialize map lock in NIS plugin
|
||||
- Resolves: rhbz#1832331
|
||||
|
||||
* Mon May 04 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
|
||||
- New upstream release
|
||||
- Upstream release 0.56.5
|
||||
- Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
|
||||
- Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
|
||||
|
||||
* Fri Feb 07 2020 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.4-1
|
||||
* Fri Aug 16 2019 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.3-2
|
||||
- Resolves rhbz#1741881
|
||||
ns-slapd is crashing intermittently
|
||||
|
||||
* Wed Jun 05 2019 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.3-1
|
||||
- New upstream release
|
||||
- Fix build with newer gcc versions
|
||||
- Resolves rhbz#1800097
|
||||
- Resolves rhbz#1684563
|
||||
|
||||
* Thu Jan 30 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.3-3
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
||||
|
||||
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.3-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
||||
|
||||
* Thu Jun 06 2019 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.3-1
|
||||
- New upstream release
|
||||
|
||||
* Sat Feb 02 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.2-8
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
||||
|
||||
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.56.2-7
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
||||
* Mon Jul 23 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-7
|
||||
- 389-ds is not available on i686 architecture, don't build there
|
||||
|
||||
* Wed May 02 2018 Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-6
|
||||
- Force rebuild of configure
|
||||
|
|
|
|||
Loading…
Reference in New Issue