RHBA-2017:3317 - Bug Fix Advisory

Topic

Updated 389-ds-base packages that fix several bugs are now available for Red Hat Enterprise Linux 7.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

This update fixes the following bugs:

• After removing a replica server from an existing replication topology without running the "cleanallruv" task, Directory Server previously logged an error about not being able to replace referral entries. This update adds a check for duplicate referrals and removes them. As a result, the error is no longer logged. (BZ#1499668)
• Previously, Directory Server did not respond when shutting down after performing an online import and then removing a back end. To fix the problem, the task cleanup process has been improved. As a result, the service now correctly shuts down in the mentioned scenario. (BZ#1503001)
• Previously, when the memberOf plug-in was enabled and users and groups were stored in separate back ends, a deadlock could occur. An unnecessary global lock has been removed and, as a result, the deadlock no longer occurs in the mentioned scenario. (BZ#1504536)
• Previously, Directory Server incorrectly handled the linked list of values in a valueset after sorting. Consequently, Directory Server could terminate unexpectedly. The valueset list handling has been fixed, and the server no longer terminates unexpectedly after sorting a valueset. (BZ#1506912)
• If you rename two different entries to the same name on two servers, Directory Server creates conflict entries. Previously, due to a bug, the creation of one conflict entry failed. Consequently, the replicated modrdn operation returned an error and replication stopped. This update fixes the problem. As a result, the conflict entry is created correctly and replication works as expected. (BZ#1508978)
• Previously, the cleanAllRUV task did not log any information. As a consequence, troubleshooting the task was difficult. This update enables logging for the cleanAllRUV, and the described problem no longer occurs. (BZ#1509347)
• Previously, if you registered multiple Class of Service (CoS) virtual attributes and shut down Directory Server, the server called the free() function twice when it freed the virtual attribute hash table. As a consequence, the server terminated unexpectedly. With this update, Directory Server registers each CoS virtual attribute separately. As a result, the server no longer terminates unexpectedly in the mentioned scenario. (BZ#1510319)
• Previously, if you configured an attribute to be indexed and imported an entry that contained a large binary value into this attribute, the server terminated unexpectedly due to an buffer overflow. The buffer has been fixed. As a result, the server works as expected in the mentioned scenario. (BZ#1511940)

Users of 389-ds-base are advised to upgrade to these updated packages, which fix these bugs. After installing this update, the 389 server service will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.4 x86_64
• Red Hat Enterprise Linux for ARM 64 7 aarch64
• Red Hat Enterprise Linux for Power 9 7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64

Fixes

• BZ - 1499668 - Errors log filled with attrlist_replace - attr_replace (nsslapd-referral, ldap://<host>:389/o%3Dipaca) failed. [rhel-7.4.z]
• BZ - 1503001 - Adding a database entry fails if the same database was deleted after an import [rhel-7.4.z]
• BZ - 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends [rhel-7.4.z]
• BZ - 1506912 - Improve valueset sort performance during valueset purging [rhel-7.4.z]
• BZ - 1508978 - replicated MODRDN fails breaking replication. [rhel-7.4.z]
• BZ - 1509347 - cleanallruv task is not logging any information [rhel-7.4.z]
• BZ - 1511940 - heap corruption during import. [rhel-7.4.z]

CVEs

(none)

References

(none)