6.2. What’s Fixed in 7.3.0

This section describes bugs fixed in Security Plugins 7.3.0. These are fixes made since 7.2.0. Fixes in releases 7.0.0, 7.1.0, and 7.2.0 are also part of 7.3.0.

[Critical]: System-stopping issue, such as a crash or data loss.
[Major]: Significant issue with no easy workaround.
[Minor]: Issue that usually has a workaround.
[Trivial]: Small issue, such as a typo in a log.

• 6.2.1. Interoperability
  • 6.2.1.1. [Critical] Wrong out-of-the-box Governance configuration for legacy Builtin Secure Logging topic *
  • 6.2.1.2. [Major] Builtin Security Plugins incompatible with Lightweight Builtin Security Plugins when using non-default cryptographic algorithms *
• 6.2.2. Discovery and Authentication
  • 6.2.2.1. [Critical] Participant discovery failed to complete after re-authentication when using SPDP2 *
  • 6.2.2.2. [Critical] Participants using SPDP2 failed to complete discovery if using Pre-Shared Key protection with domain tags *
  • 6.2.2.3. [Major] allow_unauthenticated_participants did not allow authenticated participant to replace unauthenticated one
  • 6.2.2.4. [Major] Participants with SPDP2 failed to complete discovery if using Lightweight Builtin Security Plugins or HMAC-only mode *
  • 6.2.2.5. [Major] Participants with SPDP2 and allow_unauthenticated_participants failed to communicate if authentication failed *
  • 6.2.2.6. [Major] Errors setting the RSA padding kind did not trigger a failure in signing or verifying DomainParticipant data *
  • 6.2.2.7. [Minor] Failure to announce lack of PSS Padding support when authentication.rsa_pss_pad property was FALSE *
• 6.2.3. Usability
  • 6.2.3.1. [Major] Incorrect information about cryptographic algorithms displayed in Admin Console *
• 6.2.4. Cryptography
  • 6.2.4.1. [Major] Non-random initial session ID for entities other than Secure Key Exchange Channel
  • 6.2.4.2. [Major] Memory leak when calling set_qos() without changing pre-shared key seed ID *
• 6.2.5. Cryptographic Algorithms
  • 6.2.5.1. [Major] Security Plugins for wolfSSL incorrectly propagated mask indicating support for Diffie-Hellman key establishment algorithm *
• 6.2.6. Dynamic Participant Renewal, Revocation, and Expiration
  • 6.2.6.1. [Critical] Invalid read when simultaneously changing a file and changing a property value for an identity certificate or CRL *
  • 6.2.6.2. [Critical] Invalid read when simultaneously changing an identity certificate file and authenticating another participant *
  • 6.2.6.3. [Minor] Changing identity certificate property from string to equivalent file not detected
• 6.2.7. Logging
  • 6.2.7.1. [Minor] DomainParticipants in same application may have have had different verbosities for logging security messages *
  • 6.2.7.2. [Trivial] Typo in “non-compliant DDS Security implementation” log message
• 6.2.8. Crashes
  • 6.2.8.1. [Critical] Security Plugins crashed when enabling pre-shared key protection after DomainParticipant creation *
  • 6.2.8.2. [Critical] Segmentation fault when running out of memory while calling custom OpenSSL allocator function *
  • 6.2.8.3. [Critical] Crash when polling a file and changing QoS from file to string *
  • 6.2.8.4. [Critical] Segmentation fault when running out of memory during creation of local crypto tokens
• 6.2.9. Hangs
  • 6.2.9.1. [Critical] Deadlock when simultaneously changing a file and changing a property value for an identity certificate *
• 6.2.10. Memory Leaks/Growth
  • 6.2.10.1. [Minor] Memory leak when running out of memory while validating permissions of local or remote DomainParticipants
  • 6.2.10.2. [Trivial] Memory leak when running Security Plugins SDK tester *
• 6.2.11. Vulnerabilities
  • 6.2.11.1. [Major] Pre-Shared Key Protection plus Cloud Discovery Service did not protect against Participant Announcement Replay attacks *

* This bug did not affect you if you are upgrading from 6.1.x or earlier.