RHBA-2016:0468 - Bug Fix Advisory

Topic

Updated 389-ds-base packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

The 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The
base packages include the Lightweight Directory Access Protocol (LDAP) server
and command-line utilities for server administration.

This update fixes the following bugs:

• Prior to this update, fixing a deadlock in the asynchronous simple paged

results requests caused another self deadlock due to a regression. To address
this problem, a simple PR_Lock on a connection object has been replaced with a
re-entrant PR_Monitor. As a result, the self deadlock no longer occurs.
(BZ#1298095)

• When a replace operation for a nonexisting attribute was performed without

providing new values, the entry was stored with incorrect metadata: an empty
deleted value without an attribute deletion change state number (CSN). This
entry could then result in memory corruption and cause the server to terminate
unexpectedly. To fix this bug, additional space to store metadata is now
allocated and the server no longer crashes in this scenario. (BZ#1306572)

• Previously, a keep alive entry was being created at too many opportunities

during replication, potentially causing a race condition when adding the entry
to the replica changelog and resulting in operations being dropped from the
replication. With this update, unnecessary keep alive entry creation has been
eliminated, and missing replication no longer occurs. (BZ#1309962)

• When a callback at BE_TXN in the backend add function failed on a cached

entry, the function was attempting to free the entry twice instead of removing
it from the cache and then freeing it. This update adds remove and free code to
the backend add function and the function no longer attempts to free cached
entries twice. (BZ#1314241)

• Keep alive entries are used to prevent skipped updates from being evaluated

several times in a fractional replication. If a large number of updates is
skipped, these entries can be updated very frequently. Before the keep alive
entries are updated, it is tested that they exist. Previously, the test was
being logged at a "Fatal" log level, so it was always logged no matter which log
level had been set. As a consequence, error logs were filled with unnecessary
messages. With this update, the log level for keep alive entry creation has been
changed from "Fatal" to "Replication debugging" (8192), and the error log file
is no longer filled with "Fatal" messages. (BZ#1314729)

Users of 389-ds-base are advised to upgrade to these updated packages, which fix
these bugs. After installing this update, the 389 server service will be
restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.7 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux for SAP Solutions for x86_64 - Extended Update Support 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.7 i386
• Red Hat Enterprise Linux EUS Compute Node 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386

Fixes

• BZ - 1298095 - 1.2.11.15-68.el6_7 ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks
• BZ - 1309962 - keep alive entries can break replication
• BZ - 1314241 - Double free while adding entries
• BZ - 1314729 - change severity of some messages related to "keep alive" entries

CVEs

(none)

References

(none)