RHBA-2025:17014 - Bug Fix Advisory

Topic

An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 EUS for RHEL 9.

Description

Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.

Bug Fix(es) and Enhancement(s):

• Can't rename users member of automember rule [dirsrv-12.4.z] (JIRA:DIRSRV-348)
• dsconf backend replication monitor fails if replica id starts with 0 [dirsrv-12.4.z] (JIRA:DIRSRV-433)
• Memory leak in roles_cache_create_object_from_entry [dirsrv-12.4.z] (JIRA:DIRSRV-469)
• Crash if repl keep alive entry can not be created [dirsrv-12.4.z] (JIRA:DIRSRV-499)
• Failure to get Server monitoring data when NDN cache is disabled. [dirsrv-12.4.z] (JIRA:DIRSRV-500)
• CWE-284 dirsrv log rotation creates files with world readable permission [dirsrv-12.4.z] (JIRA:DIRSRV-502)
• CWE-778 Log doesn't show what user gets password changed by administrator [dirsrv-12.4.z] (JIRA:DIRSRV-503)
• CWE-532 Created user password hash available to see in audit log [dirsrv-12.4.z] (JIRA:DIRSRV-504)
• Statistics about index lookup report a wrong duration [dirsrv-12.4.z] (JIRA:DIRSRV-505)
• Exception thrown by dsconf instance repl get_ruv [dirsrv-12.4.z] (JIRA:DIRSRV-506)
• AddressSanitizer: memory leak in memberof_add_memberof_attr [dirsrv-12.4.z] (JIRA:DIRSRV-509)
• AddressSanitizer: leak in do_search [dirsrv-12.4.z] (JIRA:DIRSRV-501)
• lib389/replica.py is using unexisting datetime.UTC in python3.9 [dirsrv-12.4.z] (JIRA:DIRSRV-510)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Directory Server - Extended Update Support 12 for RHEL 9.4 x86_64

Fixes

CVEs

(none)

References

(none)