RHBA-2026:18575 - Bug Fix Advisory

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 10 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64
• Red Hat Enterprise Linux for IBM z Systems 10 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x
• Red Hat Enterprise Linux for Power, little endian 10 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le
• Red Hat Enterprise Linux for ARM 64 10 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64
• Red Hat CodeReady Linux Builder for x86_64 10 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x
• Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le
• Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x
• Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x
• Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le
• Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64
• Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le
• Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x

Fixes

• RHEL-106502 - Ignore the memberOfDeferredUpdate setting when LMDB is used.
• RHEL-106559 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
• RHEL-106849 - Abort the offline import if the root entry cannot be added.
• RHEL-107003 - Improve output dsctl dbverify when backend does not exist
• RHEL-110192 - ns-slapd doesn't support PQC keys
• RHEL-111219 - Attribute uniqueness is not enforced upon modrdn operation
• RHEL-113965 - RetroCL plugin generates invalid LDIF
• RHEL-116060 - Fix paged result search locking
• RHEL-117124 - Missing access JSON logging for TLS/CLient auth
• RHEL-117140 - Changelog trimming - add number of scanned entries to the log
• RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept whole subnets
• RHEL-121981 - Setting password history count to 0 does not flush history
• RHEL-122625 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes.
• RHEL-122674 - [WebUI] Replication tab crashes after enabling replication as a consumer
• RHEL-123220 - Improve the way to detect asynchronous operations in the access logs
• RHEL-123275 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
• RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
• RHEL-124694 - Access logs are not getting deleted as configured.
• RHEL-128906 - Scalability issue of replication online initialization with large database
• RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on 389-ds-base-2.6.1-11
• RHEL-133085 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
• RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12
• RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication
• RHEL-138729 - Crash ( Segmentation fault ) in atomic_compare_exchange()
• RHEL-139826 - Rebase 389-ds-base to 3.2.x
• RHEL-18041 - [RFE] When there are multiple backends cache auto-tune should adapt its tuning
• RHEL-64019 - Units for changing MDB max size are not consistent across different tools
• RHEL-76835 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com.
• RHEL-83274 - Replication online reinitialization of a large database gets stalled.
• RHEL-83852 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX
• RHEL-86312 - Crash in trim_changelog() during the Retro Changelog trimming.
• RHEL-86320 - [RFE] Support updating/renewing TLS certificate without restarting slapd
• RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
• RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
• RHEL-94025 - PAM Pass Through Authentication Plugin processes requests for accounts that do not meet the criteria specified in the `pamFilter` option.
• RHEL-95395 - Getting "build_candidate_list - Database error 11" messages

CVEs

(none)

References

• https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index