Symas OpenLDAP 2.4.31.1 Available

3, May, 2012

Symas OpenLDAP 2.4.31.1 has been released and is available for download from our portal. The following platforms are available now, with more coming:

  • Red Hat Enterprise Linux 4/5/6 x86 and x86_64
  • Solaris 10 SPARC 32- and 64-bit
  • Debian 5/6 x86 and amd64
  • Ubuntu 10/11 x86 and amd64

Release notes for 2.4.31.1:

April 27, 2012

Release Notes for Symas OpenLDAP
Gold and Silver, Version 2.4.31.1

This release of Symas OpenLDAP contains the following component versions:

OpenLDAP 2.4.31 + patches

BDB 4.8.30

Cyrus SASL 2.1.25

OpenSSL 0.9.8w

GPerftools 2.0 (Selected platforms)

Heimdal Kerberos 1.5.1 (Selected platforms)

Packaging:
Rolled hp-overlays into Symas-OpenLDAP Gold package (no
separate hp-overlays package any more). Available for
selected platforms. (Symas #1623)

OpenLDAP:
Updated to 2.4.31
Added slapo-accesslog support for reqEntryUUID (ITS#6656)
Fixed libldap IPv6 URL detection (ITS#7194)
Fixed libldap rebinding on failed connection (ITS#7207)
Fixed libmdb alignment of MDB_db members (ITS#7191)
Fixed libmdb branch page merging on deletes (ITS#7190)
Fixed libmdb page split with MDB_APPEND (ITS#7213)
Fixed libmdb free page usage with entry deletion (ITS#7210)
Fixed libmdb to use IOV_MAX if it is defined and small (ITS#7196)
Fixed libmdb key alignment (ITS#7219)
Fixed libmdb mdb_page_split (ITS#7229)
Fixed libmdb with zero length IDLs (ITS#7230)
Fixed slapd listener initialization (ITS#7233)
Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197)
Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195)
Fixed slapd to reject MMR setups with bad serverID setting (ITS#7200)
Fixed slapd approxIndexer key generation (ITS#7203)
Fixed slapd modification of olcSuffix (ITS#7205)
Fixed slapd schema validation with missing definitions (ITS#7224)
Fixed slapd syncrepl -c with supplied CSN values (ITS#7245)
Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231)
Fixed slapd-perl modify with binary values (ITS#7149)
Fixed slapd-shell cn=config support (ITS#7201)
Fixed slapd-shell modify with binary values (ITS#7149)
Fixed slapo-accesslog deadlock with non-logged write ops (ITS#7088)
Fixed slapo-syncprov sessionlog check (ITS#7218)
Fixed slapo-syncprov entry leak (ITS#7234)
Fixed slapo-syncprov startup initialization (ITS#7235)
Fixed slapschema(8) formatting (ITS#7188)
Fixed limdb functionality documentation (ITS#7238)
Fixed ldap_get_option(3) note inheritance behavior (ITS#7240)
Fixed libldap socket polling for writes (ITS#7167)
Fixed liblutil string modifications (ITS#7174)
Fixed slapd crash when attrsOnly is true (ITS#7143)
Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162)
Fixed slapd-mdb slapadd with -q (ITS#7170)
Fixed slapd-mdb slapadd with -w (ITS#7180)
Fixed slapd-mdb slapindex with -q and -t (ITS#7176)
Fixed slapo-pcache time-to-refesh handling (ITS#7178)
Fixed slapo-syncprov loop detection (ITS#6024)
Added slapo-accesslog support for reqEntryUUID (ITS#6656)
Fixed libldap IPv6 URL detection (ITS#7194)
Fixed libldap rebinding on failed connection (ITS#7207)
Fixed libmdb alignment of MDB_db members (ITS#7191)
Fixed libmdb branch page merging on deletes (ITS#7190)
Fixed libmdb page split with MDB_APPEND (ITS#7213)
Fixed libmdb free page usage with entry deletion (ITS#7210)
Fixed libmdb to use IOV_MAX if it is defined and small (ITS#7196)
Fixed libmdb key alignment (ITS#7219)
Fixed libmdb mdb_page_split (ITS#7229)
Fixed libmdb with zero length IDLs (ITS#7230)
Fixed slapd listener initialization (ITS#7233)
Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197)
Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195)
Fixed slapd to reject MMR setups with bad serverID setting (ITS#7200)
Fixed slapd approxIndexer key generation (ITS#7203)
Fixed slapd modification of olcSuffix (ITS#7205)
Fixed slapd schema validation with missing definitions (ITS#7224)
Fixed slapd syncrepl -c with supplied CSN values (ITS#7245)
Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231)
Fixed slapd-perl modify with binary values (ITS#7149)
Fixed slapd-shell cn=config support (ITS#7201)
Fixed slapd-shell modify with binary values (ITS#7149)
Fixed slapo-accesslog deadlock with non-logged write ops (ITS#7088)
Fixed slapo-syncprov sessionlog check (ITS#7218)
Fixed slapo-syncprov entry leak (ITS#7234)
Fixed slapo-syncprov startup initialization (ITS#7235)
Renamed adauth overlay to remoteauth. Added man page
slapo-remoteauth.5 (Symas #1614)
Fixed remoteauth slapd.conf to dynamic config conversion issues
(Symas #1635)
Fixed back-ldap TLS issues (Symas #1664)
Added back-ldap omit-unknown-schema support (Symas #1673)
Added back-monitor enhancements (ITS#7182, Symas #1689)
Added option “-o” to ldap*(1) pages (ITS#7152)
Fixed ldap*(1) page cleanup (ITS#7177)
Fixed ldap_modify(3) prototypes (ITS#7173)
Fixed slapschema(8) formatting (ITS#7188)
Fixed limdb functionality documentation (ITS#7238)

Berkeley DB:
No changes.

OpenSSL:
Updated to 0.9.8w (Symas #1692)
Corrected fix for CVS-20122110, (CVE-2012-2131)
Fix for CMS/PKCS#7 MMA CVE-2012-0884
Corrected fix for CVE-2011-4619
Various DTLS fixes.
Fix for ASN1 overflow bug CVE-2012-2110
Fix for CVE-2012-2131 (corrected fix for 0.9.8 and CVE-2012-2110)

GPerftools:
Updated to 2.0

SASL:
No changes.

Heimdal Kerberos:
No changes.

Status of this release:
This is a production release and is made available for general use. We
have tested it in our labs and in the field and we believe it is
suitable for use in production environments. However, as is always the
case with any software, please test it in your own environment to make
sure it meets your requirements, Maintain backups of critical data and
make appropriate provisions for unexpected outages.

Bug reports, comments, and suggestions should be submitted to your
dedicated support email address or to support@symas.com.

We look forward to hearing from you!

UUM v4 Testing Release 4.0.120315 »
« Symas OpenLDAP 2.4.32.1 Available