5.6. What’s Fixed in 7.4.0

This section describes bugs fixed in Security Plugins 7.4.0. These are fixes made since 7.3.0 LTS.

Security Plugins 7.4.0 is an early access release. See the Connext Versions and Lifecycle page for more information on RTI’s software release model.

For what’s new and fixed in other products in the Connext suite, see those products’ release notes on the RTI Community Portal or in your installation.

[Critical]: System-stopping issue, such as a crash or data loss.
[Major]: Significant issue with no easy workaround.
[Minor]: Issue that usually has a workaround.
[Trivial]: Small issue, such as a typo in a log.

• 5.6.1. Discovery and Authentication
  • 5.6.1.1. [Critical] Unable to communicate with DomainParticipants that propagate a different authentication class_id version
• 5.6.2. Logging
  • 5.6.2.1. [Minor] Setting logging.verbosity to NOTICE did not list provider information
  • 5.6.2.2. [Trivial] Security category missing in some security-related log messages
• 5.6.3. Access Control
  • 5.6.3.1. [Trivial] Grant without a subject name silently ignored when parsing Permissions Document
• 5.6.4. Crashes
  • 5.6.4.1. [Critical] Java: segmentation fault while enabling a DataWriter that protects payloads and enables batching
  • 5.6.4.2. [Critical] Parsing malformed protected RTPS packets may have caused bus error on some platforms
  • 5.6.4.3. [Critical] Invalid read when simultaneously changing identity certificate file and validating local DomainParticipant’s identity status
  • 5.6.4.4. [Critical] Invalid read when simultaneously changing CRL file and validating remote DomainParticipant’s identity
  • 5.6.4.5. [Major] Possible crash when using Python API due to collision with OpenSSL symbols when using certain Python releases
• 5.6.5. Hangs
  • 5.6.5.1. [Critical] Potential uncontrolled CPU usage when parsing Governance or Permissions Documents due to a vulnerability in Expat
• 5.6.6. Vulnerabilities
  • 5.6.6.1. [Critical] Heap buffer overflow while creating a DomainParticipant that uses a malformed Identity Certificate