{"update": {"autokarma": true, "autotime": true, "stable_karma": 1, "stable_days": 7, "unstable_karma": -1, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Bump version to 2.0.14-1\n\n----\n\nSecurity fix for CVE-2021-45720", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2022-01-27 21:57:49", "date_modified": null, "date_approved": null, "date_testing": null, "date_stable": "2022-02-04 01:19:29", "alias": "FEDORA-2022-5aee32fbab", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2022-02-04 01:19:29", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2022-5aee32fbab", "title": "389-ds-base-2.0.14-1.fc35", "version_hash": "2ba9293d137c6e99e08436492d6dc3e93bd06304", "release": {"name": "F35", "long_name": "Fedora 35", "version": "35", "id_prefix": "FEDORA", "branch": "f35", "dist_tag": "f35", "stable_tag": "f35-updates", "testing_tag": "f35-updates-testing", "candidate_tag": "f35-updates-candidate", "pending_signing_tag": "f35-signing-pending", "pending_testing_tag": "f35-updates-testing-pending", "pending_stable_tag": "f35-updates-pending", "override_tag": "f35-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "mreynolds", "email": "mreynolds@redhat.com", "id": 1553, "avatar": "https://seccdn.libravatar.org/avatar/c9d8b945aebf33f6f600a4860cda68778f787b7e769ec8f8b7cb81adc0ef7a94?s=24&d=retro", "openid": "mreynolds.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "git389"}, {"name": "git389test"}, {"name": "gitrest389"}, {"name": "pagure_contributor"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by mreynolds. ", "timestamp": "2022-01-27 21:57:49", "update_id": 374646, "user_id": 91, "id": 2383056, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2022-01-27 21:57:50", "update_id": 374646, "user_id": 91, "id": 2383057, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [389-ds-base-2.0.13-1.fc35](https://bodhi.fedoraproject.org/updates/FEDORA-2022-7f62add497), and has inherited its bugs and notes.", "timestamp": "2022-01-27 21:57:51", "update_id": 374646, "user_id": 91, "id": 2383059, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "FEDORA-2022-5aee32fbab ejected from the push because \"Cannot find relevant tag for 389-ds-base-2.0.14-1.fc35.  None of ['f35-updates-testing', 'f35-updates-testing-pending'] are in ['epel9-next-testing-candidate', 'epel7-testing-candidate', 'dist-5E-epel-testing-candidate', 'f27-modular-updates-candidate', 'f34-container-updates-candidate', 'eln-updates-candidate', 'f30-modular-updates-candidate', 'f28-modular-updates-candidate', 'f28-container-updates-candidate', 'f30-container-updates-candidate', 'epel8-testing-candidate', 'f30-flatpak-updates-candidate', 'f35-container-updates-candidate', 'f32-modular-updates-candidate', 'f29-modular-updates-candidate', 'f29-container-updates-candidate', 'f29-flatpak-updates-candidate', 'f22-updates-candidate', 'f21-updates-candidate', 'f25-updates-candidate', 'f24-updates-candidate', 'f23-updates-candidate', 'f26-updates-candidate', 'f31-modular-updates-candidate', 'dist-6E-epel-testing-candidate', 'f32-flatpak-updates-candidate', 'f35-flatpak-updates-candidate', 'f27-updates-candidate', 'f28-updates-candidate', 'f30-updates-candidate', 'f29-updates-candidate', 'el8-modular-updates-candidate', 'f32-updates-candidate', 'epel9-testing-candidate', 'f31-updates-candidate', 'f31-container-updates-candidate', 'f31-flatpak-updates-candidate', 'f34-updates-candidate', 'f34-modular-updates-candidate', 'f34-flatpak-updates-candidate', 'f36-container-updates-candidate', 'f32-container-updates-candidate', 'epel8-next-testing-candidate', 'f35-updates-candidate', 'f35-modular-updates-candidate', 'f33-updates-candidate', 'f36-updates-candidate', 'f33-modular-updates-candidate', 'f33-container-updates-candidate', 'f33-flatpak-updates-candidate'].\"", "timestamp": "2022-01-29 01:55:11", "update_id": 374646, "user_id": 91, "id": 2384818, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by mreynolds. ", "timestamp": "2022-02-03 13:59:02", "update_id": 374646, "user_id": 91, "id": 2391905, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "The update properly fixes the winsync issue #[5079](https://github.com/389ds/389-ds-base/issues/5079), as can be seen in IPA's nightly PR #[1481](https://github.com/freeipa-pr-ci2/freeipa/pull/1481): [test report](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/report.html), using the following [packages](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/installed_packages/installed_packages_master.log.gz): 389-ds-base-2.0.14-1.fc35.x86_64", "timestamp": "2022-02-03 19:42:07", "update_id": 374646, "user_id": 3071, "id": 2392277, "bug_feedback": [{"karma": 0, "comment_id": 2392277, "bug_id": 2027730, "bug": {"bug_id": 2027730, "title": "SELinux is preventing ns-slapd access to /dev/shm/slapd-IPA-TEST/DBVERSION", "security": false, "parent": false}}, {"karma": 0, "comment_id": 2392277, "bug_id": 2044429, "bug": {"bug_id": 2044429, "title": "CVE-2021-45720 lru: Use after free in lru crate", "security": true, "parent": true}}, {"karma": 0, "comment_id": 2392277, "bug_id": 2044430, "bug": {"bug_id": 2044430, "title": "CVE-2021-45720 389-ds-base: bundled lru: Use after free in lru crate [fedora-all]", "security": true, "parent": false}}, {"karma": 0, "comment_id": 2392277, "bug_id": 2047323, "bug": {"bug_id": 2047323, "title": "389-ds does not start: restorecon: lstat(/dev/shm/slapd-IPA-FARNZ-ORG-UK) failed", "security": false, "parent": false}}], "testcase_feedback": [{"karma": 0, "comment_id": 2392277, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2022-02-03 19:42:08", "update_id": 374646, "user_id": 91, "id": 2392278, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2022-02-04 01:23:20", "update_id": 374646, "user_id": 91, "id": 2392915, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "389-ds-base-2.0.14-1.fc35", "signed": true, "release_id": 51, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 2027730, "title": "SELinux is preventing ns-slapd access to /dev/shm/slapd-IPA-TEST/DBVERSION", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 2359584, "bug_id": 2027730, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested with ipa-backup/uninstall/ipa-restore, works well", "timestamp": "2022-01-25 16:18:42", "update_id": 369615, "user_id": 3071, "id": 2359584, "testcase_feedback": [{"karma": 0, "comment_id": 2359584, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2359584, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2359584, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2382564, "bug_id": 2027730, "comment": {"karma": -1, "karma_critpath": 0, "text": "So, couple things:\n\n* This was actually pushed stable successfully: it's [right there in the stable updates tree](https://dl.fedoraproject.org/pub/fedora/linux/updates/35/Everything/x86_64/Packages/3/). Bodhi got out of whack somehow.\n* This actually breaks FreeIPA upgrades and should not have been pushed stable at all. I'm investigating why ATM.", "timestamp": "2022-01-27 18:06:54", "update_id": 369615, "user_id": 302, "id": 2382564, "testcase_feedback": [{"karma": 0, "comment_id": 2382564, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2382564, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2382564, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2383012, "bug_id": 2027730, "comment": {"karma": 0, "karma_critpath": 0, "text": "Cause of the problem turns out to be https://bugzilla.redhat.com/show_bug.cgi?id=2047323 , @mreynolds is getting that fixed now.", "timestamp": "2022-01-27 21:22:46", "update_id": 369615, "user_id": 302, "id": 2383012, "testcase_feedback": [{"karma": 0, "comment_id": 2383012, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2383012, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2383012, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2392277, "bug_id": 2027730, "comment": {"karma": 1, "karma_critpath": 0, "text": "The update properly fixes the winsync issue #[5079](https://github.com/389ds/389-ds-base/issues/5079), as can be seen in IPA's nightly PR #[1481](https://github.com/freeipa-pr-ci2/freeipa/pull/1481): [test report](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/report.html), using the following [packages](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/installed_packages/installed_packages_master.log.gz): 389-ds-base-2.0.14-1.fc35.x86_64", "timestamp": "2022-02-03 19:42:07", "update_id": 374646, "user_id": 3071, "id": 2392277, "testcase_feedback": [{"karma": 0, "comment_id": 2392277, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}]}, {"bug_id": 2044429, "title": "CVE-2021-45720 lru: Use after free in lru crate", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 2359584, "bug_id": 2044429, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested with ipa-backup/uninstall/ipa-restore, works well", "timestamp": "2022-01-25 16:18:42", "update_id": 369615, "user_id": 3071, "id": 2359584, "testcase_feedback": [{"karma": 0, "comment_id": 2359584, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2359584, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2359584, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2382564, "bug_id": 2044429, "comment": {"karma": -1, "karma_critpath": 0, "text": "So, couple things:\n\n* This was actually pushed stable successfully: it's [right there in the stable updates tree](https://dl.fedoraproject.org/pub/fedora/linux/updates/35/Everything/x86_64/Packages/3/). Bodhi got out of whack somehow.\n* This actually breaks FreeIPA upgrades and should not have been pushed stable at all. I'm investigating why ATM.", "timestamp": "2022-01-27 18:06:54", "update_id": 369615, "user_id": 302, "id": 2382564, "testcase_feedback": [{"karma": 0, "comment_id": 2382564, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2382564, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2382564, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2383012, "bug_id": 2044429, "comment": {"karma": 0, "karma_critpath": 0, "text": "Cause of the problem turns out to be https://bugzilla.redhat.com/show_bug.cgi?id=2047323 , @mreynolds is getting that fixed now.", "timestamp": "2022-01-27 21:22:46", "update_id": 369615, "user_id": 302, "id": 2383012, "testcase_feedback": [{"karma": 0, "comment_id": 2383012, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2383012, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2383012, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2392277, "bug_id": 2044429, "comment": {"karma": 1, "karma_critpath": 0, "text": "The update properly fixes the winsync issue #[5079](https://github.com/389ds/389-ds-base/issues/5079), as can be seen in IPA's nightly PR #[1481](https://github.com/freeipa-pr-ci2/freeipa/pull/1481): [test report](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/report.html), using the following [packages](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/installed_packages/installed_packages_master.log.gz): 389-ds-base-2.0.14-1.fc35.x86_64", "timestamp": "2022-02-03 19:42:07", "update_id": 374646, "user_id": 3071, "id": 2392277, "testcase_feedback": [{"karma": 0, "comment_id": 2392277, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}]}, {"bug_id": 2044430, "title": "CVE-2021-45720 389-ds-base: bundled lru: Use after free in lru crate [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 2359584, "bug_id": 2044430, "comment": {"karma": 1, "karma_critpath": 0, "text": "Tested with ipa-backup/uninstall/ipa-restore, works well", "timestamp": "2022-01-25 16:18:42", "update_id": 369615, "user_id": 3071, "id": 2359584, "testcase_feedback": [{"karma": 0, "comment_id": 2359584, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2359584, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2359584, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}, {"karma": 0, "comment_id": 2382564, "bug_id": 2044430, "comment": {"karma": -1, "karma_critpath": 0, "text": "So, couple things:\n\n* This was actually pushed stable successfully: it's [right there in the stable updates tree](https://dl.fedoraproject.org/pub/fedora/linux/updates/35/Everything/x86_64/Packages/3/). Bodhi got out of whack somehow.\n* This actually breaks FreeIPA upgrades and should not have been pushed stable at all. I'm investigating why ATM.", "timestamp": "2022-01-27 18:06:54", "update_id": 369615, "user_id": 302, "id": 2382564, "testcase_feedback": [{"karma": 0, "comment_id": 2382564, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2382564, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2382564, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2383012, "bug_id": 2044430, "comment": {"karma": 0, "karma_critpath": 0, "text": "Cause of the problem turns out to be https://bugzilla.redhat.com/show_bug.cgi?id=2047323 , @mreynolds is getting that fixed now.", "timestamp": "2022-01-27 21:22:46", "update_id": 369615, "user_id": 302, "id": 2383012, "testcase_feedback": [{"karma": 0, "comment_id": 2383012, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2383012, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2383012, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 2392277, "bug_id": 2044430, "comment": {"karma": 1, "karma_critpath": 0, "text": "The update properly fixes the winsync issue #[5079](https://github.com/389ds/389-ds-base/issues/5079), as can be seen in IPA's nightly PR #[1481](https://github.com/freeipa-pr-ci2/freeipa/pull/1481): [test report](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/report.html), using the following [packages](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/installed_packages/installed_packages_master.log.gz): 389-ds-base-2.0.14-1.fc35.x86_64", "timestamp": "2022-02-03 19:42:07", "update_id": 374646, "user_id": 3071, "id": 2392277, "testcase_feedback": [{"karma": 0, "comment_id": 2392277, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}]}, {"bug_id": 2047323, "title": "389-ds does not start: restorecon: lstat(/dev/shm/slapd-IPA-FARNZ-ORG-UK) failed", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 2392277, "bug_id": 2047323, "comment": {"karma": 1, "karma_critpath": 0, "text": "The update properly fixes the winsync issue #[5079](https://github.com/389ds/389-ds-base/issues/5079), as can be seen in IPA's nightly PR #[1481](https://github.com/freeipa-pr-ci2/freeipa/pull/1481): [test report](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/report.html), using the following [packages](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/215eeb26-8433-11ec-b3e7-fa163e67bee2/installed_packages/installed_packages_master.log.gz): 389-ds-base-2.0.14-1.fc35.x86_64", "timestamp": "2022-02-03 19:42:07", "update_id": 374646, "user_id": 3071, "id": 2392277, "testcase_feedback": [{"karma": 0, "comment_id": 2392277, "testcase_id": 142, "testcase": {"name": "QA:Testcase 389 ds base setup testcase", "id": 142}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 143, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}}, {"karma": 0, "comment_id": 2392277, "testcase_id": 144, "testcase": {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}}], "user": {"name": "frenaud", "email": "frenaud@redhat.com", "id": 3071, "avatar": "https://seccdn.libravatar.org/avatar/1e52aaae9646f0f890f5f6c771cd060c66898d5fdf78e8a6021eb2b75e27ffe2?s=24&d=retro", "openid": "frenaud.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "gitfreeipa"}]}}}]}], "updateid": "FEDORA-2022-5aee32fbab", "karma": 1, "content_type": "rpm", "test_cases": [{"name": "QA:Testcase 389 ds base setup testcase", "id": 142}, {"name": "QA:Testcase Create normalized dn cache testcase", "id": 143}, {"name": "QA:Testcase Create normalized dn cache testcase2", "id": 144}]}, "can_edit": false, "ci_allowed": false}