# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-3
changelog:
  - Bump version to 1.4.2.4-3
  - Issue 50712 - Version comparison doesn't work correctly on git builds (relates to #1748994)


author: Mark Reynolkds <mreynolds@redhat.com> - 1.4.2.4-5
changelog:
  - Bump version to 1.4.2.4-5
  - Resolves: Bug 1676699 - dsconf allows to set an empty password for Directory Manager
  - Resolves: Bug 1714688 - dscontainer executable should be placed under /usr/libexec/dirsrv/
  - Resolves: Bug 1773115 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1790979 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1790981 - Entry cache contention during base search
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-6
changelog:
  - Resolves: Bug 1776227 - Error: 'PwPolicyManager' object has no attribute 'get_attr_list'
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10(fix regression)
  - Resolves: Bug 1758473 - AddressSanitizer: heap-use-after-free in log_get_loglist
  - Resolves: Bug 1790259 - Change the default behavior of 'nsslapd-verify-filter-schema'
  - Resolves: Bug 1773114 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-7
changelog:
  - Bump version to 1.4.2.4-7
  - Resolves: Bug 1744662 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1779216 - dsctl doesn't work with 'slapd-' in the instance name
  - Resolves: Bug 1790984 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1793060 - dsctl healthcheck issues error : type object 'datetime.date' has no attribute 'fromisoformat'
  - Resolves: Bug 1758494 - LeakSanitizer: detected memory leaks in do_add 
  - Resolves: Bug 1790975 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-8
changelog:
  - Bump version to 1.4.2.4-8
  - Resolves: Bug 1807971 - dsctl healthcheck fails at checking replica when conflict entries are present


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.2.4-9
changelog:
  - Bump version to 1.4.2.4-9
  - Resolves: Bug 1867097 - Memory leak in ACI using IP subject
  - Resolves: Bug 1862170 - python3-lib389 pulls unnecessary bash-completion package
  - Resolves: Bug 1867988 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.4-1
changelog:
  - Bump version to 1.4.3.4
  - Issue 50954 - Port buildnum.pl to python(part 2)
  - Issue 50955 - Fix memory leaks in chaining plugin
  - Issue 50954 - Port buildnum.pl to python
  - Issue 50947 - change 00core.ldif objectClasses for openldap migration
  - Issue 50755 - setting nsslapd-db-home-directory is overriding db_directory
  - Issue 50937 - Update CLI for new backend split configuration
  - Issue 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  - Issue 50945 - givenname alias of gn from openldap
  - Issue 50935 - systemd override in lib389 for dscontainer
  - Issue 50499 - Fix npm audit issues
  - Issue 49761 - Fix CI test suite issues
  - Issue 50618 - clean compiler warning and log level
  - Issue 50889 - fix compiler issues
  - Issue 50884 - Health check tool DSEldif check fails
  - Issue 50926 - Remove dual spinner and other UI fixes
  - Issue 50928 - Unable to create a suffix with countryName
  - Issue 50758 - Only Recommend bash-completion, not Require
  - Issue 50923 - Fix a test regression
  - Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  - Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  - Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  - Issue 50919 - Backend delete fails using dsconf
  - Issue 50872 - dsconf can't create GSSAPI replication agreements
  - Issue 50912 - RFE - add password policy attribute pwdReset
  - Issue 50914 - No error returned when adding an entry matching filters for a non existing automember group
  - Issue 50889 - Extract pem files into a private namespace
  - Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  - Issue 50686 - Port fractional replication test cases from TET to python3 final
  - Issue 49845 - Remove pkgconfig check for libasan
  - Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  - Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  - Issue 50786 - connection table freelist
  - Issue 50618 - support cgroupv2
  - Issue 50900 - Fix cargo offline build
  - Issue 50898 - ldclt core dumped when run with -e genldif option


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.5-1
changelog:
  - Bump version to 1.4.3.5
  - Issue 50994 - Fix latest UI bugs found by QE
  - Issue 50933 - rfc2307compat.ldif
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 50984 - Memory leaks in disk monitoring
  - Issue 49731 - dscreate fails in silent mode because of db_home_dir
  - Issue 50975 - Revise UI branding with new minimized build
  - Issue 49437 - Fix memory leak with indirect COS
  - Issue 49731 - Do not add db_home_dir to template-dse.ldif
  - Issue 49731 - set and use db_home_directory by default
  - Issue 50971 - fix BSD_SOURCE
  - Issue 50744 - -n option of dbverify does not work
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50976 - Clean up Web UI source directory from unused files
  - Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  - Issue 50966 - UI - Database indexes not using typeAhead correctly
  - Issue 50974 - UI - wrong title in "Delete Suffix" popup
  - Issue 50972 - Fix cockpit plugin build
  - Issue 49761 - Fix CI test suite issues
  - Issue 50971 - Support building on FreeBSD.
  - Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  - Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  - Issue 50963 - We should bundle *.min.js files of Console
  - Issue 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  - Issue 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  - Issue 50954 - buildnum.py - fix date formatting issue


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.6-1
changelog:
  - Bump version to 1.4.3.6
  - Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  - Issue 50931 - RFE AD filter rewriter for ObjectCategory
  - Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  - Issue 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  - Issue 51008 - dbhome in containers
  - Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  - Issue 51014 - slapi_pal.c possible static buffer overflow
  - Issue 50545 - remove dbmon "incr" option from arg parser
  - Issue 50545 - Port dbmon.sh to dsconf
  - Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  - Issue 49731 - Fix additional issues with setting db home directory by default
  - Issue 50337 - Replace exec() with setattr()
  - Issue 50905 - intermittent SSL hang with rhds
  - Issue 50952 - SSCA lacks basicConstraint:CA
  - Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.7-1
changelog:
  - Bump version to 1.4.3.7
  - Issue 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  - Issue 51035 - Heavy StartTLS connection load can randomly fail with err=1
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51031 - UI - transition between two instances needs improvement


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-0
changelog:
  - Bump version to 1.4.3.8-0
  - Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  - Issue 51054 - Revise ACI target syntax checking
  - Issue 51068 - deadlock when updating the schema
  - Issue 51060 - unable to set sslVersionMin to TLS1.0
  - Issue 51064 - Unable to install server where IPv6 is disabled
  - Issue 51051 - CLI fix consistency issues with confirmations
  - Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  - Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Issue 51047 - React deprecating ComponentWillMount
  - Issue 50499 - fix npm audit issues
  - Issue 50545 - Port dbgen.pl to dsctl


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-1
changelog:
  - Bump version to 1.4.3.8-1
  - Resolves: Bug 1833350 - Rebase 389-ds-base for RHEL 8.3
  - Resolves: Bug 1728943 - [RFE] Advance options in RHDS Disk Monitoring Framework
  - Resolves: Bug 1775285 - [RFE] Implement the Password Policy attribute "pwdReset"
  - Resolves: Bug 1638875 - [RFE] extract key/certs pem file into a private namespace
  - Resolves: Bug 1758478 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  - Resolves: Bug 1795943 - Port dbmon.sh from legacy tools package
  - Resolves: Bug 1798394 - Port dbgen from legacy tools package
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring
  - Resolves: Bug 1807419 - Unable to create a suffix with countryName either via dscreate or the admin console
  - Resolves: Bug 1816848 - Database links: get_monitor() takes 1 positional argument but 2 were given
  - Resolves: Bug 1816854 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  - Resolves: Bug 1816857 - Searches on cn=config takes values with spaces and makes multiple attributes out of them
  - Resolves: Bug 1816859 - lib389 - Replace exec() with setattr()
  - Resolves: Bug 1816862 - Memory leak in indirect COS
  - Resolves: Bug 1829071 - Installation of RHDS 11 fails on RHEL8 server with IPv6 disabled
  - Resolves: Bug 1833515 - set 'nsslapd-enable-upgrade-hash: off' as this raises warnings in IPA
  - Resolves: Bug 1790986 - cenotaph errors on modrdn operations
  - Resolves: Bug 1769734 - Heavy StartTLS connection load can randomly fail with err=1
  - Resolves: Bug 1758501 - LeakSanitizer: detected memory leaks in changelog5_init and perfctrs_init


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-2
changelog:
  - Bump version to 1.4.3.8-2
  - Resolves: Bug 1833350 - Remove cockpit dependancies that are breaking builds


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-3
changelog:
  - Bump version to 1.4.3.8-3
  - Resolves: Bug 1835619 - Healthcheck with --json option reports "Object of type 'bytes' is not JSON serializable" when mapping tree is deleted 
  - Resolves: Bug 1836428 - Directory Server ds-replcheck RFE to add a timeout command-line arg/value to wait longer when connecting to a replica server
  - Resolves: Bug 1843090 - abort when a empty valueset is freed
  - Resolves: Bug 1843156 - Prevent unnecessarily duplication of the target entry
  - Resolves: Bug 1843157 - Check for clock errors and time skew
  - Resolves: Bug 1843159 - RFE AD filter rewriter for ObjectCategory
  - Resolves: Bug 1843162 - Creating Replication Manager fails if uid=repman is used
  - Resolves: Bug 1816851 - Add option to healthcheck to list all the lint reports
  - Resolves: Bug 1748227 - Instance name length is not enforced
  - Resolves: Bug 1748244 - dscreate doesn't sanitize instance name


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-4
changelog:
  - Bump version to 1.4.3.8-4
  - Resolves: Bug 1806978 - ns-slapd crashes during db2ldif
  - Resolves: Bug 1450863 - Log warning when tuning of nsslapd-threadnumber above or below the optimal value
  - Resolves: Bug 1647017 - A distinguished value of a single valued attribute can be missing in an entry
  - Resolves: Bug 1806573 - Dsctl healthcheck doesn't work when using instance name with 'slapd-'
  - Resolves: Bug 1807773 - dsctl healthcheck : typo in DSREPLLE0002 Lint error suggested resolution commands
  - Resolves: Bug 1843567 - Healthcheck to find notes=F
  - Resolves: Bug 1845094 - User/Directory Manager can modify Password Policy attribute "pwdReset"
  - Resolves: Bug 1850275 - Add new access log keywords for time spent in work queue and actual operation time
  - Resolves: Bug 1442386 - Recreating an index while changing case will create an indexfile with the old name (different case) and after restart the indexfile is abandoned
  - Resolves: Bug 1672574 - nsIndexIDListScanLimit accepts any value
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-5
changelog:
  - Bump version to 1.4.3.8-5
  - Resolves: Bug 1841086 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  - Resolves: Bug 1800529 - Memory leaks in disk monitoring
  - Resolves: Bug 1748227 - Instance name length is not enforced
  - Resolves: Bug 1849418 - python3-lib389 pulls unnecessary bash-completion package


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1851973 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1888863 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1859228 - do not add referrals for masters with different data generation
  - Resolves: Bug 1859227 - create keep alive entry after on line init
  - Resolves: Bug 1896850 - NULL dereference in revert_cache()
  - Resolves: Bug 1861504 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1898850 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-6
changelog:
  - Bump version to 1.4.3.8-6
  - Resolves: Bug 1904348 - Duplicate entryUSN numbers for different LDAP entries in the same backend
  - Resolves: Bug 1904349 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1904350 - do not add referrals for masters with different data generation
  - Resolves: Bug 1904351 - create keep alive entry after on line init
  - Resolves: Bug 1904352 - NULL dereference in revert_cache()
  - Resolves: Bug 1904353 - ds-replcheck crashes in offline mode
  - Resolves: Bug 1904347 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.3.8-7
changelog:
  - Bump version to 1.4.3.8-7
  - Resolves: Bug 1908705 - CVE-2020-35518 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
  - Resolves: Bug 1936461 - A failed re-indexing leaves the database in broken state.
  - Resolves: Bug 1912481 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.9-1
changelog:
  - Bump version to 1.4.4.9
  - Issue 4105 - Remove python.six (fix regression)
  - Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  - Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  - Issue 4460 - BUG  - lib389 should use system tls policy
  - Issue 3657 - Add options to dsctl for dsrc file
  - Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  - Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  - Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  - Issue 4105 - Remove python.six from lib389 (#4456)
  - Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  - Issue 2054 - do not add referrals for masters with different data generation #2054 (#4427)
  - Issue 2058 - Add keep alive entry after on-line initialization - second version (#4399)
  - Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  - Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  - Issue 4428 - Paged Results with Chaining Test Case
  - Issue 4383 - Do not normalize escaped spaces in a DN
  - Issue 4432 - After a failed online import the next imports are very slow
  - Issue 4404 - build problems at alpine linux
  - Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  - Issue 4429 - NULL dereference in revert_cache()
  - Issue 4391 - DSE config modify does not call be_postop (#4394)
  - Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.10-1
changelog:
  - Bump version to 1.4.4.10
  - Issue 4381 - RFE - LDAPI authentication DN rewritter
  - Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  - Issue 4513 - CI Tests - fix test failures
  - Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  - Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  - Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  - Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  - Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  - Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  - Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  - Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  - Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  - Issue 4414 - disk monitoring - prevent division by zero crash
  - Issue 4507 - Improve csngen testing task (#4508)
  - Issue 4498 - BUG - entryuuid replication may not work (#4503)
  - Issue 4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  - Issue 4480 - Unexpected info returned to ldap request (#4491)
  - Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  - Issue 4500 - Add cockpit enabling to dsctl
  - Issue 4272 - RFE - add support for gost-yescrypt for hashing passwords (#4497)
  - Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  - Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  - Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  - Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  - Issue 4224 - cleanup specfile after libsds removal
  - Issue 4421 - Unable to build with Rust enabled in closed environment
  - Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  - Issue 4464 - RFE - clang with ds+asan+rust
  - Issue 4224 - openldap can become confused with entryuuid
  - Issue 4313 - improve tests and improve readme re refdel
  - Issue 4313 - fix potential syncrepl data corruption
  - Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt (#4437)
  - Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  - Issue 4446 - RFE - openldap password hashers
  - Issue 4403 - RFE - OpenLDAP pw hash migration tests (#4408)
  - Issue 4410  -RFE - ndn cache with arc in rust
  - Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  - Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.11-1
changelog:
  - Bump version to 1.4.4.11
  - Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  - Issue 4513 - Fix schema test and lib389 task module (#4514)
  - Issue 4535 - lib389 - Fix log function in backends.py
  - Issue 4534 - libasan read buffer overflow in filtercmp (#4541)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.12-1
changelog:
  - Bump version to 1.4.4.12
  - Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  - Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  - Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  - Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  - Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  - Issue 5442 - Search results are different between RHDS10 and RHDS11


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.13-1
changelog:
  - Bump version to 1.4.4.13
  - Update dscontainer (#4564)
  - Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  - Issue 4324 - Some architectures the cache line size file does not exist
  - Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  - Issue 4609 - CVE - info disclosure when authenticating


author: Thierry Bordaz <tbordaz@redhat.com> 1.4.4.14-1
changelog:
  - Bump version to 1.4.4.14
  - Issue 4671 - UI - Fix browser crashes
  - Issue 4229 - Fix Rust linking
  - Issue 4658 - monitor - connection start date is incorrect
  - Issue 4656 - Make replication CLI backwards compatible with role name change
  - Issue 4656 - Remove problematic language from UI/CLI/lib389
  - Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  - Issue 4661 - RFE - allow importing openldap schemas (#4662)
  - Issue 4659 - restart after openldap migration to enable plugins (#4660)
  - Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  - Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  - Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  - Issue 4513 - Fix replication CI test failures (#4557)
  - Issue 4646 - CLI/UI - revise DNA plugin management
  - Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  - Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  - Issue 4513 - CI - make acl ip address tests more robust
  - Issue 4619 - remove pytest requirement from lib389
  - Issue 4615 - log message when psearch first exceeds max threads per conn


author: Thierry Bordaz <tbordaz@redhat.com> 1.4.4.15-1
changelog:
  - Bump version to 1.4.4.15
  - Issue 4700 - Regression in winsync replication agreement (#4712)
  - Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  - Issue 4706 - negative wtime in access log for CMP operations


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.16-1
changelog:
  - Bump version to 1.4.4.16
  - Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  - Issue 4623 - RFE - Monitor the current DB locks (#4762)
  - Issue 4725 - RFE - Update the password policy to support a Temporary Password Rules (#4727)
  - Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  - Issue 4773 - RFE - Enable interval feature of DNA plugin
  - Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  - Issue 4764 - replicated operation sometime checks ACI (#4783)
  - Issue 4781 - There are some typos in man-pages
  - Issue 3555 - Fix UI audit issue
  - Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  - Issue 4725 - Fix compiler warnings
  - Issue 4770 - Lower FIPS logging severity
  - Issue 4759 - Fix coverity issue (#4760)
  - Issue 4742 - UI - should always use LDAPI path when calling CLI
  - Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  - Issue 4711 - SECURITY FIX - SIGSEV with sync_repl (#4738)
  - Issue 4637 - ndn cache leak (#4724)
  - Issue 4577 - Fix ASAN flags in specfile


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.4.17-1
changelog:
  - Bump version to 1.4.4.17
  - Issue 4927 - rebase lib389 and cockpit in 1.4.4
  - Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  - Issue 4912 - Account Policy plugin does not set the config entry DN
  - Issue 4796 - Add support for nsslapd-state to CLI & UI
  - Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  - Issue 4169 - backport lib389 cert list fix
  - Issue 4912 - dsidm command crashing when account policy plugin is enabled
  - Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  - Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  - Issue - 4696 - Password hash upgrade on bind (#4840)
  - Issue 4875 - CLI - Add some verbosity to installer
  - Issue 4884 - server crashes when dnaInterval attribute is set to zero
  - Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  - Issue 4734 - import of entry with no parent warning (#4735)
  - Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  - Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  - Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  - Issue 4736 - lib389 - fix regression in certutil error checking
  - Issue 4736 - CLI - Errors from certutil are not propagated
  - Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  - Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  - Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  - Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  - Issue 4262 - Fix Index out of bound in fractional test (#4828)
  - Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  - Issue 4656 - remove problematic language from ds-replcheck
  - Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  - Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  - Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  - Issue 4506 - Improve SASL logging
  - Issue 4093 - Fix MEP test case
  - Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  - Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  - Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  - Issue 4447 - Crash when the Referential Integrity log is manually edited
  - Issue 4773 - Add CI test for DNA interval assignment
  - Issue 4750 - Fix compiler warning in retrocl (#4751)


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.1-1
changelog:
  - Bump version to 2.0.1
  - Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  - Issue 4391 - DSE config modify does not call be_postop (#4394)
  - Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  - Issue 4176 - CL trimming causes high CPU
  - Issue 2058 - Add keep alive entry after on-line initialization - second version (#4399)
  - Issue 4403 - RFE - OpenLDAP pw hash migration tests (#4408)


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.2-1
changelog:
  - Bump version to 2.0.2
  - Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  - Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  - Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  - Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  - Issue 4513 - CI Tests - fix test failures
  - Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  - Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  - Issue 4504 - pytest test_dsconf_replication_monitor fails on RHEL - Fix merging issue (#4530)
  - Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  - Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  - Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  - Issue 4219 - Log internal unindexed searches (notes=A)
  - Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  - Issue 4381 - RFE - LDAPI authentication DN rewritter
  - Issue 4513 - Fix schema test and lib389 task module (#4514)
  - Issue 4414 - disk monitoring - prevent division by zero crash
  - Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  - Issue 4507 - Improve csngen testing task (#4508)
  - Issue 4498 - BUG - entryuuid replication may not work (#4503)
  - Issue 4480 - Unexpected info returned to ldap request (#4491)
  - Issue 4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  - Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  - Issue 4500 - Add cockpit enabling to dsctl
  - Issue 4272 - RFE - add support for gost-yescrypt for hashing passwords (#4497)
  - Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  - Issue 3522 - Remove DES to AES conversion code
  - Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  - Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  - Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  - Issue 4486 - Remove random ldif file generation from import test (#4487)
  - Issue 4224 - cleanup specfile after libsds removal
  - Issue 4421 - Unable to build with Rust enabled in closed environment
  - Issue 4489 - Remove return statement from a void function (#4490)
  - Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  - Issue 4224 - openldap can become confused with entryuuid
  - Issue 4313 - improve tests and improve readme re refdel
  - Issue 4313 - fix potential syncrepl data corruption
  - Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  - Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  - Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt (#4437)
  - Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  - Issue 4446 - RFE - openldap password hashers
  - Issue 4284 - dsidm fails to delete an organizationalUnit entry
  - Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  - Issue 4464 - RFE - clang with ds+asan+rust
  - Issue 4105 - Remove python.six (fix regression)
  - Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  - Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  - Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  - Issue 4460 - BUG  - lib389 should use system tls policy
  - Issue 3657 - Add options to dsctl for dsrc file
  - Issue 4454 - RFE - fix version numbers to allow object caching
  - Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  - Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  - Issue 4112 - Added a CI test (#4441)
  - Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  - Issue 4105 - Remove python.six from lib389 (#4456)
  - Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  - Issue 4410 - RFE - ndn cache with arc in rust
  - Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  - Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  - Issue 4428 - Paged Results with Chaining Test Case
  - Issue 2054 - do not add referrals for masters with different data generation
  - Issue 4383 - Do not normalize escaped spaces in a DN
  - Issue 4432 - After a failed online import the next imports are very slow
  - Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  - Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  - Issue 4429 - NULL dereference in revert_cache()
  - Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  - Issue 4407 - RFE - remove http client and presence plugin (#4409)
  - Issue 4398 - build problems at alpine linux
  - Issue 4415 - unable to query schema if there are extra parenthesis


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.3-1
changelog:
  - Bump version to 2.0.3
  - Issue 4619 - remove pytest requirement from lib389
  - Issue 4615 - log message when psearch first exceeds max threads per conn
  - Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  - Issue 4324 - Some architectures the cache line size file does not exist
  - Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  - Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  - PR 4564 - Update dscontainer
  - Issue 4149 - UI - port TreeView and opther components to PF4
  - Issue 4577 - Add GitHub actions
  - Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  - issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  - Issue 4609 - CVE - info disclosure when authenticating
  - Issue 4348 - Add tests for dsidm
  - Issue 4571 - Stale libdb-utils dependency
  - Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  - Issue 4577 - Add GitHub actions
  - Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  - Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  - Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  - Issue 4348 - Add tests for dsidm
  - Issue 4577 - Add GitHub actions
  - Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  - Issue 4093 - fix compiler warnings and update doxygen
  - Issue 4575 - Update test docstrings metadata
  - Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  - Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  - Issue 4513 - Add DS version check to SSL version test (#4570)
  - Issue 5442 - Search results are different between RHDS10 and RHDS11
  - Issue 4396 - Minor memory leak in backend (#4558)
  - Issue 4513 - Fix replication CI test failures (#4557)
  - Issue 4513 - Fix replication CI test failures (#4557)
  - Issue 4153 - Added a CI test (#4556)
  - Issue 4506 - BUG - fix oob alloc for fds (#4555)
  - Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  - Issue 4506 - Temporary fix for io issues (#4516)
  - Issue 4535 - lib389 - Fix log function in backends.py
  - Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  - Issue 4544 - Compiler warnings on krb5 functions (#4545)
  - Update rpm.mk for RUST tarballs


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.3-2
changelog:
  - Bump version to 2.0.3-2
  - Revert Issue 4609 - CVE - info disclosure when authenticating(breaks DogTag)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.0.3-3
changelog:
  - Remove a revert of the fix for Issue 4609 - CVE - info disclosure when authenticating(breaks Dogtag)
  - Dogtag has fixed own code that failed in the presence of the fix for Issue 4609


author: Thierry Bordaz <tbordaz@redhat.com> - 2.0.4-1
changelog:
  - Bump version to 2.0.4
  - Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  - Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  - Issue 4700 - Regression in winsync replication agreement (#4712)
  - Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  - Issue 4169 - UI - migrate monitor tables to PF4
  - issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  - Issue 2736 - remove remaining perl references
  - Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  - Issue 4706 - negative wtime in access log for CMP operations
  - Issue 3585 - LDAP server returning controltype in different sequence
  - Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  - Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  - Issue 4671 - UI - Fix browser crashes
  - Issue 4169 - UI - Add PF4 charts for server stats
  - Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  - Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  - Issue 4229 - Fix Rust linking
  - Issue 4673 - Update Rust crates
  - Issue 4658 - monitor - connection start date is incorrect
  - Issue 4169 - UI - migrate modals to PF4
  - Issue 4656 - remove problematic language from ds-replcheck
  - Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  - Issue 4656 - Remove problematic language from UI/CLI/lib389
  - Issue 4661 - RFE - allow importing openldap schemas (#4662)
  - Issue 4659 - restart after openldap migration to enable plugins (#4660)
  - Merge pull request #4664 from mreynolds389/issue4663
  - issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  - Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  - Issue 4646 - CLI/UI - revise DNA plugin management
  - Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  - Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  - Issue 4169 - UI - Migrate alerts to PF4
  - Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  - Issue 4595 - Paged search lookthroughlimit bug (#4602)
  - Issue 4169 - UI - port charts to PF4
  - Issue 2820 - Fix CI test suite issues
  - Issue 4513 - CI - make acl ip address tests more robust


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.5-1
changelog:
  - Bump version to 2.0.5
  - Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  - Issue 4169 - UI - Port plugin tables to PF4
  - Issue 4656 - Allow backward compatilbity for replication plugin name change
  - Issue 4764 - replicated operation sometime checks ACI (#4783)
  - Issue 2820 - Fix CI test suite issues
  - Issue 4781 - There are some typos in man-pages
  - Issue 4773 - Enable interval feature of DNA plugin
  - Issue 4623 - RFE - Monitor the current DB locks (#4762)
  - Issue 3555 - Fix UI audit issue
  - Issue 4725 - Fix compiler warnings
  - Issue 4770 - Lower FIPS logging severity
  - Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  - Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  - Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  - Issue 4759 - Fix coverity issue (#4760)
  - Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  - Issue 4714 - dscontainer fails with rootless podman
  - Issue 4750 - Fix compiler warning in retrocl (#4751)
  - Issue 4742 - UI - should always use LDAPI path when calling CLI
  - Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  - Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  - Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  - Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  - Issue 4711 - SIGSEV with sync_repl (#4738)
  - Issue 4734 - import of entry with no parent warning (#4735)
  - Issue 4729 - GitHub Actions fails to run pytest tests
  - Issue 4656 - Remove problematic language from source code
  - Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  - Issue 4169 - UI - migrate replication tables to PF4
  - Issue 4637 - ndn cache leak (#4724)
  - Issue 4577 - Fix ASAN flags in specfile
  - Issue 4169 - UI - PF4 migration - database tables
  - issue 4653 - refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)


author: Thierry Bordaz <tbordaz@redhat.com> - 2.0.6-1
changelog:
  - Bump version to 2.0.6
  - Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  - Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  - Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  - Issue 4414 - disk monitoring - prevent division by zero crash
  - Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  - Issue 4656 - Fix replication plugin rename dependency issues
  - Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  - Issue 4506 - Improve SASL logging
  - Issue 4709 - Fix double free in dbscan
  - Issue 4093 - Fix MEP test case
  - Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  - Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  - Issue 4794 - BUG - don't capture container output (#4798)
  - Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  - Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  - Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  - Issue 4447 - Crash when the Referential Integrity log is manually edited
  - Issue 4773 - Add CI test for DNA interval assignment
  - Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  - Issue 4379 - fixing regression in test_info_disclosure
  - Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  - Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  - Issue 4575 Update test docstrings metadata
  - Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  - removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  - Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream


author: Peter Hanecak <hany@hany.sk> - 9.12.2-1
changelog:
  - Upstream release of 9.12.2
  - Small spec tweaks
  - Updated xsltproc network read patch
  - Added patch for setup_option in v84
  - Build now requires also po4a


author: Hanecak <hany@hany.sk> - 9.15.1-2
changelog:
  - Custom /usr/lib/ocf/resource.d/linbit/drbd is broken, upstream variant works
    (#1908265, PR by robert)


author: Karel Volný <kvolny@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - see the upstream changelog at http://qmmp.ylsoftware.com/
  - also fixes rhbz#1684881


author: Karel Volný <kvolny@redhat.com> 1.3.5-1
changelog:
  - new version 1.3.5 (#1785870)
  - see the upstream changelog at http://qmmp.ylsoftware.com/
  - fixes crash when reading encrypted archive (#1694388)


author: Karel Volný <kvolny@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 (#1828957)
  - see the upstream changelog at http://qmmp.ylsoftware.com/
  - adapted to F33 System-Wide Change: CMake to do out-of-source builds
  - install desktop file for opening audio CDs as Solid action


author: Irina Boverman <iboverma@redhat.com> - 0.29.0-1
changelog:
  - Resolved PROTON-2092
  - Rebased to 0.29.0 rc1 upstream
  - Removed jsoncpp BuildRequires and Requires for now, there is no jsoncpp in EPEL 8


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


