openldap-bugs April 2020

openldap-bugs@openldap.org

2 participants
338 discussions

[Bug 9214] New: back-mdb: memory leak in dnSuperiorMatch search filter
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9214 Bug ID: 9214 Summary: back-mdb: memory leak in dnSuperiorMatch search filter Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: grapvar(a)gmail.com Target Milestone: --- Created attachment 709 --> https://bugs.openldap.org/attachment.cgi?id=709&action=edit Fix for cursor leak This is a MDB backend issue. Each time when a dnSuperiorMatch rule of a search filter matches DN that exists in the DIT, the matching operation leaks one MDB cursor. Leak happens in servers/slapd/back-mdb/dn2id.c`mdb_dn2sups(). Leak exists since MDB backend inception, i.e. commit 2011-09-01 0ba4206 Import back-mdb Fix attached. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 9206] New: contrib/passwd/argon2: consolidate libsodium implementation
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9206 Bug ID: 9206 Summary: contrib/passwd/argon2: consolidate libsodium implementation Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: contrib Assignee: bugs(a)openldap.org Reporter: peter(a)adpm.de Target Milestone: --- Created attachment 702 --> https://bugs.openldap.org/attachment.cgi?id=702&action=edit patch to consolidate pw-argon2 implementation based on libsodium Hi, current libsodium implementation of pw-argon2 has 2 issues: - it uses crypto_pwhash_str(), which only guarantees a "memory-hard, CPU-intensive hash function", but not necessarily Argon2. - it uses a different unit for the 'memory' parameter than the libargon2 implementation: bytes instead of KiB. The attached patch aims to fix both issues. (The patch is is git format, you can merge it using 'git am') I'd appreciate if you include them into OpenLDAP. The referenced files are derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Peter Marschall <peter(a)adpm.de>. I have not assigned rights and/or interest in this work to any party. The referenced modifications to OpenLDAP Software are subject to the following notice: Copyright 2020 Peter Marschall Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 9203] New: No manual page for module 'pw-argon2'
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9203 Bug ID: 9203 Summary: No manual page for module 'pw-argon2' Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: contrib Assignee: bugs(a)openldap.org Reporter: peter(a)adpm.de Target Milestone: --- Created attachment 698 --> https://bugs.openldap.org/attachment.cgi?id=698&action=edit add manual page to pw-argon2 contrib module Hi, the pw-argon2 password module lacks a manual page. Please find attached patches to upstream to fix the issue. I'd appreciate if you include them into OpenLDAP. The referenced files are derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Peter Marschall <peter(a)adpm.de>. I have not assigned rights and/or interest in this work to any party. The referenced modifications to OpenLDAP Software are subject to the following notice: Copyright 2015 Peter Marschall Redistribution and use in source and binary forms, with or without modification, are permitted only as authorizedy y the OpenLDAP Public License. -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 9202] Should limit depth of nested filters
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9202 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9198] New: libraries: memory leak in UTF8bvnormalize()
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9198 Bug ID: 9198 Summary: libraries: memory leak in UTF8bvnormalize() Product: OpenLDAP Version: 2.4.49 Hardware: All OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: 1259039012(a)qq.com Target Milestone: --- -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 9182] slapd crash with invalid pcache config
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9182 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9181] Non-initialised global options mutex causes problems on Windows
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9181 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9175] ldapsearch segfault
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9175 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9171] slapd with ppolicy and pwdAccountLockedTime crashes
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9171 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9003] Update slapd-ldap(5) idassert-authzfrom for policy difference
by openldap-its＠openldap.org 28 Apr '20

28 Apr '20

https://bugs.openldap.org/show_bug.cgi?id=9003 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

← Newer
1
...
4
5
6
7
8
9
10
...
34
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs April 2020