- Bump version to 1.2.11.15-97
- Resolves: Bug 1563539 - acl_copyEval_context double free (fix spec file patch)

- Bump version to 1.2.11-15-95
- Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch

- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)

- Release 1.2.11.15-91
- Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages

- Release 1.2.11.15-89
- Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.

- Release 1.2.11.15-85
- Resolves: #1393007 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)

- Release 1.2.11.15-84
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)

- Release 1.2.11.15-75
- Resolves: #1335108 - Paged results search returns the blank list of entries (DS 48808)
- Resolves: #1342614 - password history is not updated when an admin resets the password (DS 48813)
- Resolves: #1342382 - Running db2index with no options breaks replication (DS 48854)

- Release 1.2.11.15-74
- Resolves: #1313258 - change severity of some messages related to "keep alive" entries (DS 48420)

-Release 1.2.11.15-72
- Resolves: #1314241 - Double free while adding entries (DS 48287)
- Resolves: #1314729 - change severity of some messages related to "keep alive" entries (DS 48420)

-Release 1.2.11.15-69
- Resolves: #1289844 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation (DS 48370)
- Resolves: #1290722 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)

-Release 1.2.11.15-68
- Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)

-Release 1.2.11.15-65
- Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266)

- Release 1.2.11.15-62
- Resolves: #1260004 - regression - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)

- Release 1.2.11.15-60
- Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)

- Release 1.2.11.15-50
- Resolves: #1179099 - Problem with single value attribute MMR replication (DS 47915, DS 569)

- Release 1.2.11.15-48
- Resolves: Bug #1157395 - ns-slapd segfault in libslapd.so.0.0.0 (DS 47889)

- Release 1.2.11.15-47
- Resolves: #1147479 - Memory leak during Reliab15 execution (6.6.z - #47750)

- Release 1.2.11.15-46
- Resolves: #1138745 - Memory leak during Reliab15 execution

- Release 1.2.11.15-45
- Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)

- Release 1.2.11.15-34
- Resolves: #1123861
  EMBARGOED CVE-2014-3562 unauthenticated information disclosure [rhel-6.5.z] (DS 616, BZ 1123477)

- Release 1.2.11.15-33
- Resolves: Bug 1094412 - fix memleak introduced by "Simple paged results should support async search (957864)" (DS 47623)
- Resolves: Bug 1094413 - rhds91 389-ds-base-1.2.11.15-31.el6_5 crash on paged searches followed by simple srch (DS 47707)

- Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.5.z] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)

- Resolves: bug 1037271 - regression in ipa due to patch for ns-slapd stuck in DS_Sleep

- Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches

- Bump version to 1.2.11.15-29
- Resolves: bug 1008013:  DS91: ns-slapd stuck in DS_Sleep

- Resolves: Bug 1000631 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN -- retry

- Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)

- Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
- Resolves: Bug 929114 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)

- Resolves: Bug 910994 - PamConfig schema not updated during upgrade
- Resolves: Bug 910995 - Valgrind reports memleak in modify_update_last_modified_attr
- Resolves: Bug 910996 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
- Resolves: Bug 911467 - DNA: use event queue for config update only at the start up
- Resolves: Bug 911468 - Error messages encountered when using POSIX winsync
- Resolves: Bug 911469 - dse.ldif is 0 length after server kill or machine kill
- Resolves: Bug 911474 - Invalid chaining config triggers a disk full error and shutdown
- Resolves: Bug 914305 - ns-slapd segfaults while trying to delete a tombstone entry
- Resolves: Bug 913228 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data

- Resolves: Bug 896256 - updating package touches configuration files

- Resolves: Bug 836251 - Account Usability Control Not Working (bz.835238)

- Resolves: Bug 830001 - unhashed#user#password visible after changing password
-- patch 0020 disallows users' direct modify on unhashed#user#password

- Resolves: Bug 824014 - DS Shuts down intermittently

- Bug 771632 - Incorrect entryUSN index under high load in replicated environment
- Bug 771631 - Add slapi_rwlock API and use POSIX rwlocks
- WARNING - patches 0030 and 0031 remove and add back the file configure
- this is necessary because the merge commit to "rebase" RHEL-6 to 1.2.9.6
- seriously messed up configure - so in order to add the patch for 743979
- which also touched configure, the file had to be removed and added back
- also note that the commit for the RHEL-6 branch to remove configure does
- not work - the way patch works, it has to match every line exactly in
- order to remove the file, and because the merge commit messed things
- up, it doesn't work
- So, DO NOT TOUCH 0030-remove-configure-to-get-rid-of-merge-conflict.patch
- BECAUSE IT IS HAND CRAFTED and not generated by git format-patch
- if you must regenerate this file,
- git format-patch ...args... to generate a file in patch format
- remove all of the patch matches (all the lines beginning with -)
- get the 1.2.9.6 version of configure from the source tarball
- wc -l configure to get the number of lines in the file
- sed 's/^/-/' configure >> thefile.patch
- edit thefile.patch to have the right number of lines and have the
- patch commands in the correct place
- PROFIT!!!

- Bug 752155 - Use restorecon after creating init script lock file

- Resolves: Bug 705837 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
- Add ExclusiveArch for x86 and x86_64 only

- 389-ds-base-1.2.8.2
- Bug 696407 - If an entry with a mixed case RDN is turned to be
-    a tombstone, it fails to assemble DN from entryrdn