ELBA-2026-0834

ELBA-2026-0834 - 389-ds:1.4 bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-01-20

Description

[1.4.3.39-20]
- Resolves: RHEL-140086 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-8.10.z]

[1.4.3.39-19]
- Resolves: RHEL-117759 - Replication online reinitialization of a large database gets stalled. [rhel-8.10.z]

[1.4.3.39-18]
- Reverts: RHEL-123241 - Attribute uniqueness is not enforced upon modrdn operation [rhel-8.10.z]

[1.4.3.39-17]
- Resolves: RHEL-80491 - Can't rename users member of automember rule [rhel-8.10.z]
- Resolves: RHEL-87191 - Some replication status data are reset upon a restart. [rhel-8.10.z]
- Resolves: RHEL-89785 - Extend log of operations statistics in access log
- Resolves: RHEL-111226 - Error showing local password policy on web UI [rhel-8.10.z]
- Resolves: RHEL-113976 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-8.10.z]
- Resolves: RHEL-117457 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups
- Resolves: RHEL-117752 - Crash if repl keep alive entry can not be created [rhel-8.10.z]
- Resolves: RHEL-117759 - Replication online reinitialization of a large database gets stalled. [rhel-8.10.z]
- Resolves: RHEL-117765 - Statistics about index lookup report a wrong duration [rhel-8.10.z]
- Resolves: RHEL-123228 - Improve the way to detect asynchronous operations in the access logs [rhel-8.10.z]
- Resolves: RHEL-123241 - Attribute uniqueness is not enforced upon modrdn operation [rhel-8.10.z]
- Resolves: RHEL-123254 - Typo in errors log after a Memberof fixup task. [rhel-8.10.z]
- Resolves: RHEL-123269 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-8.10.z]
- Resolves: RHEL-123276 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-8.10.z]
- Resolves: RHEL-123363 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default [rhel-8.10.z]
- Resolves: RHEL-123365 - IPA health check up script shows time skew is over 24 hours [rhel-8.10.z]
- Resolves: RHEL-123920 - Changelog trimming - add number of scanned entries to the log [rhel-8.10.z]
- Resolves: RHEL-126512 - Created user password hash available to see in audit log [rhel-8.10.z]
- Resolves: RHEL-129578 - Fix paged result search locking [rhel-8.10.z]
- Resolves: RHEL-130900 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-8.10.z]

[1.4.3.39-15]
- Resolves: RHEL-109028 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-8.10.z]

[1.4.3.39-14]
- Reverts: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
- Resolves: RHEL-95442 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-8.10.z]

[1.4.3.39-13]
- Resolves: RHEL-89749 - Nested group does not receive memberOf attribute [rhel-8.10.z]
- Resolves: RHEL-89758 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-8.10.z]
- Resolves: RHEL-89765 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-8.10.z]
- Resolves: RHEL-89778 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-8.10.z]

[1.4.3.39-12]
- Resolves: RHEL-85499 - [RFE] defer memberof nested updates [rhel-8.10.z]
- Resolves: RHEL-65663 - dsconf incorrectly setting up Pass-Through Authentication
- Resolves: RHEL-80704 - Increased memory consumption caused by NDN cache [rhel-8.10.z]
- Resolves: RHEL-81127 - nsslapd-idletimeout is ignored [rhel-8.10.z]
- Resolves: RHEL-81136 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-8.10.z]
- Resolves: RHEL-81143 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-8.10.z]
- Resolves: RHEL-81152 - AddressSanitizer: double-free [rhel-8.10.z]
- Resolves: RHEL-81176 - Verbose option for dsctl is not shown in help of actions [rhel-8.10.z]

[1.4.3.39-11]
- Resolves: RHEL-72487 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-8.10.z]

[1.4.3.39-10]
- Resolves: RHEL-69822 - 'Duplicated DN detected' errors when creating indexes or importing entries. [rhel-8.10.z]
- Resolves: RHEL-71215 - Sub suffix causes 'id2entry - Could not open id2entry err 0' error when the Directory Server starts [rhel-8.10.z]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	389-ds-base-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.src.rpm	ab18132ab9f4a2ad71d5138b145217a86a0bf81b2ef395114a3b87f542a9f219	-	ol8_aarch64_appstream
	389-ds-base-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.aarch64.rpm	53b3774d961dba0e605cdafeb24a902b2ea650270a84875e579395e0d7fe9f36	-	ol8_aarch64_appstream
	389-ds-base-devel-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.aarch64.rpm	88289f6c50a471790809f81732091d487c8e43a4e600e5761406eeffcb23aef4	-	ol8_aarch64_appstream
	389-ds-base-legacy-tools-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.aarch64.rpm	13771ddd876987042acd6ad78e5549c591269c8a7a721e34f524c75f4f186662	-	ol8_aarch64_appstream
	389-ds-base-libs-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.aarch64.rpm	12cdc3477bdcdd9c83b1883d3119c78adecfcb48ff38fa530447de9fb4139892	-	ol8_aarch64_appstream
	389-ds-base-snmp-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.aarch64.rpm	3fe970b6ed38d76a0d3c12331d498ee0a4d8c914eef3c2e9b5a47a4833779d07	-	ol8_aarch64_appstream
	python3-lib389-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.noarch.rpm	5f71cd1ebe79afe212dd1efc7956a936f58434c7cebf0ef5642ba18b087d73a7	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	389-ds-base-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.src.rpm	ab18132ab9f4a2ad71d5138b145217a86a0bf81b2ef395114a3b87f542a9f219	-	ol8_x86_64_appstream
	389-ds-base-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.x86_64.rpm	2260fbc0bb31f07b45e5e53cbc8a6bcaec6d4715f8a22a2f33e247bea4d63a52	-	ol8_x86_64_appstream
	389-ds-base-devel-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.x86_64.rpm	db5c4a62cf2a0d59baf435b381c78e217d76695d879b3bfe3a182c41f22062b3	-	ol8_x86_64_appstream
	389-ds-base-legacy-tools-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.x86_64.rpm	32b96c2ca47d410ec925303278f8b7de6c11a125d0569b5944f9f2506bd3852b	-	ol8_x86_64_appstream
	389-ds-base-libs-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.x86_64.rpm	bafe834172c43aa88fb15063102fae80d8416fb456cc4b883b5d9372008b4246	-	ol8_x86_64_appstream
	389-ds-base-snmp-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.x86_64.rpm	553d0d7e95c0eba149ad78d2c96e124f12d4604ee42aae0aa9d1b54bba7d57e1	-	ol8_x86_64_appstream
	python3-lib389-1.4.3.39-20.module+el8.10.0+90771+b7e7eb39.noarch.rpm	5f71cd1ebe79afe212dd1efc7956a936f58434c7cebf0ef5642ba18b087d73a7	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team