RHBA-2025:2985 - Bug Fix Advisory

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Bug Fix(es):

• "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9.5.z] (JIRA:RHEL-69825)
• Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9.5.z] (JIRA:RHEL-70126)
• backup/restore broken [rhel-9.5.z] (JIRA:RHEL-74152)
• If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9.5.z] (JIRA:RHEL-74157)
• On replica consumer, account policy plugin fails to manage the last login history [rhel-9.5.z] (JIRA:RHEL-74167)
• During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9.5.z] (JIRA:RHEL-78343)
• Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3 [rhel-9.5.z] (JIRA:RHEL-79497)
• After an initial failure, subsequent online backups will not work. [rhel-9.5.z] (JIRA:RHEL-81102)
• Online backup hangs sporadically. [rhel-9.5.z] (JIRA:RHEL-81107)
• IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9.5.z] (JIRA:RHEL-81113)
• Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9.5.z] (JIRA:RHEL-81139)
• 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-9.5.z] (JIRA:RHEL-81146)
• AddressSanitizer: double-free [rhel-9.5.z] (JIRA:RHEL-81157)
• leaked_storage: Variable "childelems" going out of scope leaks the storage it points to. [rhel-9.5.z] (JIRA:RHEL-81171)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the 389 server service will be restarted automatically.

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat CodeReady Linux Builder for x86_64 9 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x

Fixes

CVEs

(none)

References

(none)