RHBA-2015:2640 - Bug Fix Advisory

Topic

Updated 389-ds-base packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

The 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The
base packages include the Lightweight Directory Access Protocol (LDAP) server
and command-line utilities for server administration.

This update fixes the following bugs:

• When multiple replica update vector (RUV) updates were skipped in fractional

replication, RUV was not updated at the end of the session. The next session
then restarted evaluating the same skipped updates. To fix the problem, a system
subentry has been added, which is occasionally updated even when no applicable
changes can be replicated at the time of the update. This prevents the
unnecessary replays. (BZ#1273132)

• Previously, Directory Server did not correctly handle requesting searches for

simple paged results asynchronously in a persistent connection. As a
consequence, if one of the requests was abandoned, the ns-slapd service
sometimes terminated unexpectedly. A patch has been applied to fix the problem,
and ns-slapd no longer crashes in the described situation. (BZ#1278696)

• Directory Server previously did not properly handle the freeing of search

result objects. A delay occurred between freeing an object and providing the
freed information to the paged results handle. If the handle was released
because of a timeout during the delay, a double free error occurred, which
caused the ns-slapd service to terminate unexpectedly. This update eliminates
the mentioned delay, thus preventing the double free error. As a result,
ns-slapd no longer crashes in this situation. (BZ#1279564)

• Previously, after the cleanAllRUV task finished, the change log still

contained entries from the cleaned Replica ID. As a consequence, the replica
update vector (RUV) could contain undesirable data, and the RUV element could be
missing the replica URL. Now, cleanAllRUV cleans the change log completely as
expected. (BZ#1272327)

Users of 389-ds-base are advised to upgrade to these updated packages, which fix
these bugs. After installing this update, the 389 server service will be
restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux for SAP Solutions for x86_64 - Extended Update Support 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7 i386
• Red Hat Enterprise Linux EUS Compute Node 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386

Fixes

• BZ - 1272327 - cleanallruv should completely clean changelog
• BZ - 1273132 - many attrlist_replace errors in connection with cleanallruv
• BZ - 1279564 - deadlock in mep delete post op

CVEs

(none)

References

(none)