4. Whats Fixed in 7.7.0

This section describes bugs fixed in RTI® Security Plugins 7.7.0. These are fixes made since 7.6.0.

Security Plugins 7.7.0 is the first production release in the 7.7 long-term support (LTS) series. It is built upon and combines all of the features in releases 7.4.0, 7.5.0, and 7.6.0. See Connext Versions and Lifecycle for more information on RTI’s software release model.

For what’s fixed in other products in the Connext suite, see those products’ release notes on the RTI Community Portal or in your installation.

[Critical]: System-stopping issue, such as a crash or data loss.
[Major]: Significant issue with no easy workaround.
[Minor]: Issue that usually has a workaround.
[Trivial]: Small issue, such as a typo in a log.

• 4.1. Cryptography
  • 4.1.1. [Critical] Unable to write samples when using batching and serialized data protection
• 4.2. Dynamic Participant Renewal, Revocation, and Expiration
  • 4.2.1. [Critical] Unexpected loss of keyed data when Persistence Service enabled Key Revision History
  • 4.2.2. [Major] RTI Security Plugins were not compatible with monotonic clock
  • 4.2.3. [Major] Authentication failures when discovering a DomainParticipant and simultaneously updating the local Permissions Document *
• 4.3. Crashes
  • 4.3.1. [Critical] Crash when using Monitoring Library 2.0 and logging.mode_mask set to SECURITY_TOPIC
  • 4.3.2. [Critical] Potential undefined behavior after error acquiring mutex during remote identity validation or local Permissions Document Update *
  • 4.3.3. [Critical] Invalid locking situation when creating DomainParticipant with Security enabled *
  • 4.3.4. [Critical] Invalid read when simultaneously changing Certificate Revocation List and validating local DomainParticipant’s identity status *
  • 4.3.5. [Critical] Problems on VxWorks when multiple threads tried creating the first DomainParticipant or deleting the last DomainParticipant
  • 4.3.6. [Critical] Potential stack buffer read overflow in Builtin Security Plugins when registering local endpoint
  • 4.3.7. [Critical] Potential segmentation fault in Builtin Security Plugins when discovering a DomainParticipant
  • 4.3.8. [Major] Potential precondition failure when removing a remote DomainParticipant that has secure endpoints
• 4.4. Hangs
  • 4.4.1. [Critical] Application hang after failing to post a local credential validation event during DomainParticipant enablement
  • 4.4.2. [Major] Excessive resource consumption in certain scenarios *
• 4.5. Vulnerabilities
  • 4.5.1. [Critical] Potential Denial of Service in RTI Security Plugins for OpenSSL when loading Private Key
  • 4.5.2. [Critical] Potential stack buffer overflow in RTI Security Plugins for OpenSSL when loading Private Key
  • 4.5.3. [Critical] Potential Denial of Service in RTI Security Plugins for OpenSSL when parsing Permissions Document
  • 4.5.4. [Critical] Potential Denial of Service in RTI Security Plugins for OpenSSL when configuring client proxy
  • 4.5.5. [Critical] A malicious authenticated participant could impersonate other participants
  • 4.5.6. [Critical] Origin Authentication could be bypassed by crafting malicious RTPS message