5. What’s Fixed in 7.3.1

This section describes bugs fixed in Security Plugins 7.3.1. These are fixes made since 7.3.0.

Security Plugins 7.3.1 is a maintenance release in the 7.3 long-term support (LTS) series. See Previous Releases for all other fixes in the 7.3 LTS series. See Connext Versions and Lifecycle for more information on RTI’s software release model.

For what’s new and fixed in other products in the Connext suite, see those products’ release notes on https://community.rti.com/documentation or in your installation. Or start with the RTI Connext What’s New for a launchpad to all products.

[Critical]: System-stopping issue, such as a crash or data loss.
[Major]: Significant issue with no easy workaround.
[Minor]: Issue that usually has a workaround.
[Trivial]: Small issue, such as a typo in a log.

• 5.1. Interoperability
  • 5.1.1. [Major] Lightweight Security Plugins did not use Additional Authenticated Data by default*
• 5.2. Discovery
  • 5.2.1. [Critical] No communication when using Pre-Shared Key Protection if remote participant did not propagate PID_DOMAIN_ID during discovery*
• 5.3. Discovery and Authentication
  • 5.3.1. [Critical] Authenticated participant could not replace unauthenticated one if QoS changed during authentication
  • 5.3.2. [Critical] Unable to communicate with DomainParticipants that propagate a different authentication class_id version
• 5.4. Cryptography
  • 5.4.1. [Critical] Repair of dispose messages failed when Key Revision History enabled*
• 5.5. Dynamic Participant Renewal, Revocation, and Expiration
  • 5.5.1. [Critical] Loss of data when banishing more than 16,777,208 times*
• 5.6. Logging
  • 5.6.1. [Minor] Setting logging.verbosity to NOTICE did not list provider information*
• 5.7. Crashes
  • 5.7.1. [Critical] Segmentation fault risk with concurrent updates of identity certificates*
  • 5.7.2. [Critical] NULL dereference when simultaneously changing certificate or CRL file while deleting DomainParticipant*
  • 5.7.3. [Critical] Log messages possibly corrupted or lost due to memory reordering on weak memory architectures
  • 5.7.4. [Critical] Invalid read when simultaneously changing CRL file and validating remote DomainParticipant’s identity*
  • 5.7.5. [Critical] Java: segmentation fault while enabling a DataWriter that protects payloads and enables batching*
  • 5.7.6. [Critical] Parsing malformed protected RTPS packets may have caused bus error on some platforms
  • 5.7.7. [Critical] Invalid read when simultaneously changing identity certificate file and validating local DomainParticipant’s identity status*
  • 5.7.8. [Major] Possible crash when using Python API due to collision with OpenSSL symbols when using certain Python releases*
• 5.8. Hangs
  • 5.8.1. [Critical] Potential uncontrolled CPU usage when parsing Governance or Permissions Documents due to a vulnerability in Expat
• 5.9. Memory Leaks/Growth
  • 5.9.1. [Critical] Unbounded memory leak if identity certificate file was polled and emptied repeatedly*
  • 5.9.2. [Major] Memory leak when setting a subject name whitelist while security was not enabled*
• 5.10. Vulnerabilities
  • 5.10.1. [Critical] Potential heap buffer overflow in Security Plugins while creating a DomainParticipant that uses a malformed Identity Certificate

* This bug did not affect you if you are upgrading from 6.1.x or earlier.