RHBA-2015:2572 - Bug Fix Advisory

Topic

Updated 389-ds-base packages that fix several bugs are now available for Red Hat Enterprise Linux 7.

Description

The 389 Directory Server is an LDAPv3 compliant server. The base packages include the LDAP server and command-line utilities for server administration.

This update fixes the following bugs:

• Previously, when nunc-stans was enabled, the default thread number was 3, and the thread number was controlled by the MAX_THREADS environment variable. With this update, the value of the nsslapd-threadnumber configuration parameter is used instead of obtaining the thread number from MAX_THREADS. (BZ#1278729)
• Prior to this update, the Directory Server could receive an abandon request for a SimplePagedResults request in the source code between the abandon check and the part of source code that sends the search results. Consequently, the abandon request freed the search results that the result-sending code still referred to, and the Directory Server terminated unexpectedly. Now, the source code that sends the search result is protected by a lock, which prevents the abandon request from occurring. As a result, the Directory Server no longer crashes in the described situation. (BZ#1278730)
• Previously, when promoting a consumer to a master, the new Replica Update Vector (RUV) element was appended to the RUV. However, when trying to replicate from the newly promoted replica, the remote replica checked the first element in the RUV, which had the same replica ID, and aborted the replication session. As a consequence, the replication between the two servers failed, and other RUVs on other replicas could become corrupted. Now, when promoting a replica to a master, the RUV is reordered to be the first in the list, and replication no longer fails in the described scenario. (BZ#1279572)
• Previously, the function acquiring a connection was called in an assert call. As a consequence, the function acquiring a connection was not called if the build was not a debugging build, which caused the connection reference count to become out of sequence. Now, the function acquiring a connection is called regardless of the build type, and connection reference count mismatching no longer occurs. (BZ#1279573)
• In the back end deletion, a transaction info was not passed to one of the database helper functions. Consequently, if a plug-in attempted to access data in the area locked by the transaction, a deadlock situation could occur. Now, the transaction info is passed to all the necessary database helper functions, and a deadlock no longer occurs in the described situation. (BZ#1280210)
• Previously, in access control evaluation, retrieving a matched value for a macro failed to remove a trailing comma. As a consequence, if the Access Control List (ACL) contained a macro, the correct permission was not provided. To fix this bug, if a trailing comma is found in the matched value, the comma is properly removed. As a result, if the ACL contains a macro, the correct permission is provided. (BZ#1281522)

Users of 389-ds-base are advised to upgrade to these updated packages, which fix these bugs. After installing this update, the 389 server service will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.2 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.2 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.3 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.2 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - TUS 7.2 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.2 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.3 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.2 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1278729 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well.
• BZ - 1278730 - SimplePagedResults -- abandon could happen between the abandon check and sending results
• BZ - 1279572 - Cannot upgrade a consumer to supplier in a multimaster environment
• BZ - 1279573 - nunc-stans: Attempt to release connection that is not acquired
• BZ - 1280210 - deadlock in mep delete post op
• BZ - 1281522 - acl - regression - trailing ', (comma)' in macro matched value is not removed.

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal