RHBA-2013:1653 - Bug Fix Advisory

Topic

Updated 389-ds-base packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

The 389 Directory Server is an LDAPv3 compliant server. The base packages
include the Lightweight Directory Access Protocol (LDAP) server and command-line
utilities for server administration.

The updated 389-ds-base packages include numerous bug fixes. Space precludes
documenting all of these changes in this advisory. Users are directed to the Red
Hat Enterprise Linux 6.5 Technical Notes for information on the most significant
of these changes:

https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/pkg-389-ds-base.html

Users of 389-ds-base are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386

Fixes

• BZ - 830334 - Invalid chaining config triggers a disk full error and shutdown
• BZ - 905825 - PamConfig schema not updated during upgrade
• BZ - 906005 - Valgrind reports memleak in modify_update_last_modified_attr
• BZ - 907985 - DNA plugin acceptance tests failed with "DB_LOCK_DEADLOCK" error.
• BZ - 908861 - Error messages encountered when using POSIX winsync
• BZ - 910581 - dse.ldif is 0 length after server kill or machine kill
• BZ - 913215 - ns-slapd segfaults while trying to delete a tombstone entry
• BZ - 923502 - Crash in MODRDN
• BZ - 923503 - cleanAllRUV task fails to cleanup config upon completion
• BZ - 923504 - crash in aci evaluation
• BZ - 923909 - 389-ds-base cannot handle Kerberos tickets with PAC
• BZ - 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry
• BZ - 957305 - DS instance crashes under a high load
• BZ - 957864 - Simple paged results should support async search
• BZ - 958522 - loading an entry from the database should use str2entry_fast
• BZ - 962885 - RHEL 6.2 to 6.4 ipa upgrade selinuxusermap data not replicating
• BZ - 966781 - new ldap connections can block ldaps and ldapi connections
• BZ - 968503 - flush_ber error sending back start_tls response will deadlock
• BZ - 969210 - make listen backlog size configurable
• BZ - 971033 - connections attribute in cn=snmp,cn=monitor is counted twice
• BZ - 972976 - ldbm errors when adding/modifying/deleting entries
• BZ - 974719 - rhds90 crash on tombstone modrdn
• BZ - 975250 - Changelog deadlock replication failures with DNA
• BZ - 979169 - allow setting db deadlock rejection policy
• BZ - 982325 - Overflow in nsslapd-disk-monitoring-threshold
• BZ - 983091 - Memory leak in 389-ds-base 1.2.11.15
• BZ - 986424 - fix recent compiler warnings
• BZ - 986857 - Disk Monitoring not checking filesystem with logs
• BZ - 987703 - memleaks in set_krb5_creds
• BZ - 988562 - deadlock after adding and deleting entries
• BZ - 989692 - Sorting with attributes in ldapsearch gives incorrect result
• BZ - 1002260 - server fails to start after upgrade(schema error)
• BZ - 1006846 - 2Master replication with SASL/GSSAPI auth broken
• BZ - 1007452 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing
• BZ - 1013735 - CLEANALLRUV doesnt run across all replicas
• BZ - 1016038 - Users from AD sub OU does not sync to IPA

CVEs

(none)

References

• https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/pkg-389-ds-base.html