RHBA-2025:23230 - Bug Fix Advisory

Topic

An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Bug Fix(es) and Enhancement(s):

• Error showing local password policy on web UI [rhel-8.10.z] (JIRA:RHEL-111226)
• AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-8.10.z] (JIRA:RHEL-113976)
• subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (JIRA:RHEL-117457)
• Crash if repl keep alive entry can not be created [rhel-8.10.z] (JIRA:RHEL-117752)
• Replication online reinitialization of a large database gets stalled. [rhel-8.10.z] (JIRA:RHEL-117759)
• Statistics about index lookup report a wrong duration [rhel-8.10.z] (JIRA:RHEL-117765)
• Improve the way to detect asynchronous operations in the access logs [rhel-8.10.z] (JIRA:RHEL-123228)
• Typo in errors log after a Memberof fixup task. [rhel-8.10.z] (JIRA:RHEL-123254)
• LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-8.10.z] (JIRA:RHEL-123269)
• The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-8.10.z] (JIRA:RHEL-123276)
• When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default [rhel-8.10.z] (JIRA:RHEL-123363)
• IPA health check up script shows time skew is over 24 hours [rhel-8.10.z] (JIRA:RHEL-123365)
• Changelog trimming - add number of scanned entries to the log [rhel-8.10.z] (JIRA:RHEL-123920)
• CWE-532 Created user password hash available to see in audit log [rhel-8.10.z] (JIRA:RHEL-126512)
• Fix paged result search locking [rhel-8.10.z] (JIRA:RHEL-129578)
• On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-8.10.z] (JIRA:RHEL-130900)
• Can't rename users member of automember rule [rhel-8.10.z] (JIRA:RHEL-80491)
• Some replication status data are reset upon a restart. [rhel-8.10.z] (JIRA:RHEL-87191)
• Extend log of operations statistics in access log (JIRA:RHEL-89785)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

• RHEL-117457 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups
• RHEL-89785 - Extend log of operations statistics in access log

CVEs

(none)

References

(none)