RHBA-2016:0737 - Bug Fix Advisory

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 6.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.8 Release Notes and Red Hat Enterprise Linux 6.8 Technical Notes linked from the References section.

Users of 389-ds-base are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386

Fixes

• BZ - 1234431 - Man pages and help for remove-ds.pl doesn't display "-a" option
• BZ - 1236148 - Slow replication when deleting large quantities of multi-valued attributes
• BZ - 1236156 - Avoid using regex in ACL if possible.
• BZ - 1236656 - reindex off-line twice could provoke index corruption
• BZ - 1240451 - Individual abandoned simple paged results request has no chance to be cleaned up
• BZ - 1244970 - Crash while triming the retro changelog
• BZ - 1246165 - verify_db.pl doesn't verify DB specified by -a option.
• BZ - 1247812 - logconv autobind handling regression caused by 47446
• BZ - 1251288 - Replication not working for "delete: attr"
• BZ - 1253406 - wrong password check if passwordInHistory is decreased.
• BZ - 1255290 - db2index creates index entry from deleted records
• BZ - 1259546 - regression -- COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes
• BZ - 1259959 - perl module conditional test is not conditional when checking SELinux policies
• BZ - 1265851 - Double free while adding entries
• BZ - 1267296 - ns-slapd crash double free in pagedresults_cleanup
• BZ - 1267405 - many attrlist_replace errors in connection with cleanallruv
• BZ - 1270002 - cleanallruv should completely clean changelog
• BZ - 1273552 - Deadlock between two MODs on the same entry between entry cache and backend lock
• BZ - 1278585 - deadlock in mep delete post op
• BZ - 1284791 - 389-ds-base: ldclt -e randomauthid Segmentation fault.
• BZ - 1290243 - SimplePagedResults -- in the search error case, simple paged results slot was not released.
• BZ - 1292649 - DSUtil.pm - allow users to specify to relax the FQDN constraint
• BZ - 1294770 - Supplier can skip a failing update, although it should retry.
• BZ - 1296694 - 1.2.11.15-68.el6_7 ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks
• BZ - 1297385 - [RFE] Interpret IPV6 addresses for ACIs, replication, and chaining
• BZ - 1307152 - keep alive entries can break replication
• BZ - 1313258 - change severity of some messages related to "keep alive" entries

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal