ELBA-2025-17897

ELBA-2025-17897 - 389-ds-base bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2025-10-14

Description

[3.0.6-13]
- Bump version to 3.0.6-13
- Resolves: RHEL-111230 - Error showing local password policy on web UI
[rhel-10.0.z]
- Resolves: RHEL-113982 - AddressSanitizer: memory leak in
memberof_add_memberof_attr [rhel-10.0.z]
- Resolves: RHEL-117749 - The numSubordinates value is not matching the
number of direct children. [rhel-10.0.z]
- Resolves: RHEL-117753 - Crash if repl keep alive entry can not be created
[rhel-10.0.z]
- Resolves: RHEL-117756 - Exception thrown by dsconf instance repl get_ruv
[rhel-10.0.z]
- Resolves: RHEL-117763 - Replication online reinitialization of a large
database gets stalled. [rhel-10.0.z]
- Resolves: RHEL-117766 - Statistics about index lookup report a wrong
duration [rhel-10.0.z]
- Resolves: RHEL-117772 - When the server restarts after a crash, the RFE
assumes memberof should be recomputed. It triggers a memberof fixup task,
dirsrv became unresponsive. [rhel-10.0.z]
- Resolves: RHEL-117784 - Ignore the memberOfDeferredUpdate setting when
LMDB is used. [rhel-10.0.z]

[3.0.6-9]
- Bump version to 3.0.6-9
- Resolves: RHEL-80498 - Can't rename users member of automember rule
[rhel-10.0.z]
- Resolves: RHEL-92053 - Memory leak in
roles_cache_create_object_from_entry [rhel-10.0.z]
- Resolves: RHEL-107006 - Failure to get Server monitoring data when NDN
cache is disabled. [rhel-10.0.z]
- Resolves: RHEL-109020 - Allow Uniqueness plugin to search uniqueness
attributes using custom matching rules [rhel-10.0.z]
- Resolves: RHEL-109886 - Wrong backend database name syntax causes 'Red
Hat Directory Server' => 'Databases' menu blank in Cockpit [rhel-10.0.z]
- Resolves: RHEL-109890 - RootDN Access Control Plugin with wildcards for
IP addresses fails with an error 'Invalid IP address' [rhel-10.0.z]
- Resolves: RHEL-109893 - On RHDS 12.6 The user password policy for a user
was created, but the pwdpolicysubentry attribute for this user
incorrectly points to the People OU password policy instead of the
specific user policy. [rhel-10.0.z]
- Resolves: RHEL-109898 - AddressSanitizer: leak in do_search [rhel-10.0.z]
- Resolves: RHEL-109905 - ns-slapd crashed when we add nsslapd-referral
[rhel-10.0.z]
- Resolves: RHEL-109947 - CWE-284 dirsrv log rotation creates files with
world readable permission [rhel-10.0.z]
- Resolves: RHEL-109956 - CWE-532 Created user password hash available to
see in audit log [rhel-10.0.z]
- Resolves: RHEL-109959 - CWE-778 Log doesn't show what user gets password
changed by administrator [rhel-10.0.z]
- Resolves: RHEL-110405 - RHDS12: Web console doesn't show Server Version
[rhel-10.0.z]

[3.0.6-8]
- Bump version to 3.0.6-8
- Resolves: RHEL-89737 - dsconf backend replication monitor fails if
replica id starts with 0 [rhel-10.0.z]
- Resolves: RHEL-89747 - ns-slapd crash in
dbmdb_import_prepare_worker_entry() [rhel-10.0.z]
- Resolves: RHEL-89754 - Nested group does not receive memberOf attribute
[rhel-10.0.z]
- Resolves: RHEL-89763 - dsidm Error: float() argument must be a string or
a number, not 'NoneType' [rhel-10.0.z]
- Resolves: RHEL-89770 - Crash in __strlen_sse2 when using the nsRole
filter rewriter. [rhel-10.0.z]
- Resolves: RHEL-89775 - Improve the 'result' field of ipa-healthcheck if
replicas are busy [rhel-10.0.z]
- Resolves: RHEL-89783 - RHDS12.2 NSMMReplicationPlugin - release_replica
Unable to parse the response [rhel-10.0.z]
- Resolves: RHEL-95762 - Improve error message when bulk import connection
is closed [rhel-10.0.z]

[3.0.6-7]
- Resolves: RHEL-95445 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
00007ff734050cdb sp 00007ff6de9f1430 error 6 in
libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-10.0.z]

[3.0.6-6]
- Bump version to 3.0.6-6
- Reverts: RHEL-80702 Increased memory consumption caused by NDN cache
[rhel-10.0.z]

[3.0.6-5]
- Restore missing sources file

[3.0.6-4]
- Bump version to 3.0.6-4
- Resolves: RHEL-86063 Backport lib389 fixes required for WebUI
[rhel-10.0.z]
- Resolves: RHEL-80702 Increased memory consumption caused by NDN cache
[rhel-10.0.z]

[3.0.6-3]
- Bump version to 3.0.6-4
- Resolves: RHEL-79498 - Failed to set sslversionmax to TLS1.3 in FIPS mode
with dsconf security set --tls-protocol-max TLS1.3 [rhel-10]

[3.0.6-2]
- Bump version to 3.0.6-3
- Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
identifier to be added in the logs
- Resolves: RHEL-77948 - ns-slapd crashes with data directory >= 2 days old
[rhel-10]
- Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
supplier generates duplicate nsUniqueId (LMDB only)

[3.0.6-1]
- Update to 3.0.6
- Resolves: RHEL-1681 - [RFE] Log buffering for all log types
- Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
identifier to be added in the logs
- Resolves: RHEL-38917 - dscreate interactive install shows a traceback
when mdb is selected
- Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
into configuration options
- Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
- Resolves: RHEL-61253 - Make online import more robust
- Resolves: RHEL-69819 - 'Duplicated DN detected' errors when creating
indexes or importing entries. [rhel-10.0]
- Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
plugin is enabled.
- Resolves: RHEL-74149 - backup/restore broken
- Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
Entryrdn gets broken during a reindex
- Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
have 'alwaysrecordlogin' set
- Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
to manage the last login history
- Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
from a paged search result [rhel-10]
- Resolves: RHEL-76838 - Unlocked and locked users having same error output
- Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
a substring index on membership attribute

[3.0.5-2]
- Fix License tag
- Resolves: RHEL-67196 - Rebase 389-ds-base to 3.0.5

[3.0.5-1]
- Update to 3.0.5
- Resolves: RHEL-67196 - Rebase 389-ds-base to 3.0.5

[3.0.4-4]
- Bump release for October 2024 mass rebuild:

[3.0.4-2]
- Resolves: RHEL-58070 - lmdb reindex is broken if index type is specified

[3.0.4-1]
- Bump version to 3.0.4

[3.0.3-10]
- Bump version to 3.0.3-10

[3.0.3-9]
- Replace lmdb with lmdb-libs in Requires

[3.0.3-8]
- Bump release for June 2024 mass rebuild

[3.0.3-7]
- Drop pytest dependency

[3.0.3-6]
- Remove incorrect Requires and Provides

[3.0.3-4]
- Update dependencies for 389-ds-base-bdb

[3.0.3-3]
- Resolves: RHEL-30640 - Remove libdb requirement from 389-ds-base

[3.0.3-1]
- Bump version to 3.0.3
- Resolves: RHEL-31780 - Rebase 389-ds-base.3.0.3 in RHEL 10

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	389-ds-base-3.0.6-13.el10_0.src.rpm	c4b778c60b22db19a657bfa261432e873c29ce254684ba81baa39fecbd1d1429	-	ol10_aarch64_appstream
	389-ds-base-3.0.6-13.el10_0.src.rpm	c4b778c60b22db19a657bfa261432e873c29ce254684ba81baa39fecbd1d1429	-	ol10_aarch64_codeready_builder
	389-ds-base-3.0.6-13.el10_0.aarch64.rpm	662d03c96833e17e098d9477f0a7934b15cfdc5f940c9c1cc7c892ebacb9f028	-	ol10_aarch64_appstream
	389-ds-base-bdb-3.0.6-13.el10_0.aarch64.rpm	48c7802af89ed1aa7105687b31b7c2212072ea4f5fe5be878217c0817dbb29e0	-	ol10_aarch64_codeready_builder
	389-ds-base-devel-3.0.6-13.el10_0.aarch64.rpm	efe8ed038138881e12624fcf95f6a6ffb3b2d912f7267908467582a387972913	-	ol10_aarch64_codeready_builder
	389-ds-base-libs-3.0.6-13.el10_0.aarch64.rpm	19a3500dfcf385d57ac06d532ae6f552aa7ce32795c4b820be9716ea6baf9ee4	-	ol10_aarch64_appstream
	389-ds-base-snmp-3.0.6-13.el10_0.aarch64.rpm	c241176caa1531dd19b8c8cf1c1658cbb13939ea9b549416b102c9c885ee718e	-	ol10_aarch64_appstream
	python3-lib389-3.0.6-13.el10_0.noarch.rpm	520a23a603caf9e1a42bbd7a4d51212596fdd57f5766203971b23c2095cbf12d	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	389-ds-base-3.0.6-13.el10_0.src.rpm	c4b778c60b22db19a657bfa261432e873c29ce254684ba81baa39fecbd1d1429	-	ol10_x86_64_appstream
	389-ds-base-3.0.6-13.el10_0.src.rpm	c4b778c60b22db19a657bfa261432e873c29ce254684ba81baa39fecbd1d1429	-	ol10_x86_64_codeready_builder
	389-ds-base-3.0.6-13.el10_0.x86_64.rpm	e3ffca7c1ee26129d3c953d43a6ac16e8f5bead22e8aad5814d2c173cc068d4c	-	ol10_x86_64_appstream
	389-ds-base-bdb-3.0.6-13.el10_0.x86_64.rpm	a59adc50b1f4f6bc3e9e09d37e9854b23efd06cdeecf1bcff17537e64d380be5	-	ol10_x86_64_codeready_builder
	389-ds-base-devel-3.0.6-13.el10_0.x86_64.rpm	287971bb8bbeb42af5e16806b1223d841097623a152c5bdf713fa9af6030382e	-	ol10_x86_64_codeready_builder
	389-ds-base-libs-3.0.6-13.el10_0.x86_64.rpm	71091c148f2e1873b7a0dd2a7a5f1ff4910566899ee40eeaf0d2324cb11bd65d	-	ol10_x86_64_appstream
	389-ds-base-snmp-3.0.6-13.el10_0.x86_64.rpm	21de887d6dbc2c6b233de32dffb2b2a38fe28fb6654bc7fbd150a84acc27c934	-	ol10_x86_64_appstream
	python3-lib389-3.0.6-13.el10_0.noarch.rpm	520a23a603caf9e1a42bbd7a4d51212596fdd57f5766203971b23c2095cbf12d	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team