RHBA-2025:20435 - Bug Fix Advisory

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 10 x86_64
• Red Hat Enterprise Linux for IBM z Systems 10 s390x
• Red Hat Enterprise Linux for Power, little endian 10 ppc64le
• Red Hat Enterprise Linux for ARM 64 10 aarch64
• Red Hat CodeReady Linux Builder for x86_64 10 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

Fixes

• RHEL-80162 - Rebase 389-ds-base to 3.1.x
• RHEL-101926 - ipa-backup failed with error : 'No such file or directory: '/usr/sbin/dsctl'
• RHEL-35241 - ns-slapd crashes in referral mode
• RHEL-5117 - ns-slapd crash in dbmdb_import_prepare_worker_entry()
• RHEL-61327 - Incomplete messages about replication in the errors log.
• RHEL-61353 - dbscan on replication changelog does not display MOD_TYPE
• RHEL-62874 - dsidm: issue when renaming users
• RHEL-65660 - DSIDM: Re-enabling user accounts that reached inactivity limit fails with error
• RHEL-67003 - dsconf backend replication monitor fails if replica id starts with 0
• RHEL-67006 - dsconf utility should let you configure the "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-in
• RHEL-67019 - Crash in __strlen_sse2 when using the nsRole filter rewriter.
• RHEL-67022 - Password modify extended operation should skip password policy checks when executed by root DN
• RHEL-70117 - Unify how group description can be added to a new group in WebUI and CLU
• RHEL-74085 - Increased memory consumption caused by NDN cache
• RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in Directory Server
• RHEL-76837 - dsidm Error: float() argument must be a string or a number, not 'NoneType'
• RHEL-76840 - Monitoring tab should use dsconf monitor
• RHEL-79080 - Json option does not work with "dsidm account get-by-dn" command
• RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS access and error logs
• RHEL-80253 - RHDS hangs when having online backup running together with automember_rebuild task executing
• RHEL-83850 - mdb database statistics don't work
• RHEL-86279 - Cannot create a nested role using "dsidm role create-nested"
• RHEL-86280 - Cannot create a filtered role using "dsidm role create-filtered"
• RHEL-86313 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address"
• RHEL-86314 - dsidm failing with error "argument must be a string or a number"
• RHEL-86315 - Dsidm get_dn option fails for organizational unit, service and posixgroup
• RHEL-86316 - Dsidm uniquegroup members option does not work
• RHEL-86321 - dsidm role rename-by-dn does not rename a role
• RHEL-86322 - dsidm role subtree-status doesn't work
• RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j option
• RHEL-86324 - Deleting a role with dsidm results in proper deletion message, but role is still present
• RHEL-86785 - dscontainer: support loading custom schema
• RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp 00007fed321fe100 error 6 in liblmdb.so.0.0.0
• RHEL-89748 - Nested group does not receive memberOf attribute
• RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000]
• RHEL-95761 - Improve error message when bulk import connection is closed
• RHEL-97565 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.
• RHEL-79079 - Failure to get Server monitoring data when NDN cache is disabled.
• RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
• RHEL-109487 - AddressSanitizer: leak in do_search
• RHEL-101727 - The numSubordinates value is not matching the number of direct children.
• RHEL-112675 - Statistics about index lookup report a wrong duration
• RHEL-112689 - Crash if repl keep alive entry can not be created
• RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
• RHEL-113969 - AddressSanitizer: memory leak in memberof_add_memberof_attr

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.1_release_notes/index