RHBA-2025:15534 - Bug Fix Advisory

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Bug Fix(es) and Enhancement(s):

• Failure to gather database statistics with LMDB. (JIRA:RHEL-106582)
• LDAP healthcheck complains about needed parameters when using LMDB. (JIRA:RHEL-106793)
• Failure to get Server monitoring data when NDN cache is disabled. [rhel-9.6.z] (JIRA:RHEL-107004)
• Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9.6.z] (JIRA:RHEL-109033)
• Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9.6.z] (JIRA:RHEL-109884)
• RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9.6.z] (JIRA:RHEL-109888)
• On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9.6.z] (JIRA:RHEL-109891)
• AddressSanitizer: leak in do_search [rhel-9.6.z] (JIRA:RHEL-109896)
• ns-slapd crashed when we add nsslapd-referral [rhel-9.6.z] (JIRA:RHEL-109904)
• CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9.6.z] (JIRA:RHEL-109945)
• CWE-532 Created user password hash available to see in audit log [rhel-9.6.z] (JIRA:RHEL-109954)
• CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9.6.z] (JIRA:RHEL-109957)
• Can't rename users member of automember rule [rhel-9.6.z] (JIRA:RHEL-18333)
• Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9.6.z] (JIRA:RHEL-81140)
• Memory leak in roles_cache_create_object_from_entry [rhel-9.6.z] (JIRA:RHEL-92052)
• Getting error messages while migration to LMDB. (JIRA:RHEL-95384)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
• Red Hat Enterprise Linux Server - AUS 9.6 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
• Red Hat CodeReady Linux Builder for x86_64 9 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x
• Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
• Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
• Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x

Fixes

• RHEL-106582 - Failure to gather database statistics with LMDB.
• RHEL-106793 - LDAP healthcheck complains about needed parameters when using LMDB.
• RHEL-95384 - Getting error messages while migration to LMDB.

CVEs

(none)

References

(none)