389-ds-base-2.9.0-4.el9 RPM for ppc64le

From CentOS Stream 9 AppStream for ppc64le

389 Directory Server is an LDAPv3 compliant server.  The base package includes
the LDAP server and command line utilities for server administration.

Provides

• 389-ds-base
• 389-ds-base(ppc-64)
• bundled(crate(allocator-api2))
• bundled(crate(anyhow))
• bundled(crate(atty))
• bundled(crate(autocfg))
• bundled(crate(base64))
• bundled(crate(bitflags))
• bundled(crate(byteorder))
• bundled(crate(cbindgen))
• bundled(crate(cc))
• bundled(crate(cfg-if))
• bundled(crate(clap))
• bundled(crate(clap_lex))
• bundled(crate(concread))
• bundled(crate(crossbeam-epoch))
• bundled(crate(crossbeam-queue))
• bundled(crate(crossbeam-utils))
• bundled(crate(equivalent))
• bundled(crate(errno))
• bundled(crate(fastrand))
• bundled(crate(fernet))
• bundled(crate(find-msvc-tools))
• bundled(crate(foldhash))
• bundled(crate(foreign-types))
• bundled(crate(foreign-types-shared))
• bundled(crate(getrandom))
• bundled(crate(hashbrown))
• bundled(crate(heck))
• bundled(crate(hermit-abi))
• bundled(crate(id-arena))
• bundled(crate(indexmap))
• bundled(crate(itoa))
• bundled(crate(jobserver))
• bundled(crate(leb128fmt))
• bundled(crate(libc))
• bundled(crate(linux-raw-sys))
• bundled(crate(log))
• bundled(crate(lru))
• bundled(crate(memchr))
• bundled(crate(once_cell))
• bundled(crate(openssl))
• bundled(crate(openssl-macros))
• bundled(crate(openssl-sys))
• bundled(crate(os_str_bytes))
• bundled(crate(paste))
• bundled(crate(paste-impl))
• bundled(crate(pin-project-lite))
• bundled(crate(pkg-config))
• bundled(crate(prettyplease))
• bundled(crate(proc-macro-hack))
• bundled(crate(proc-macro2))
• bundled(crate(quote))
• bundled(crate(r-efi))
• bundled(crate(rustix))
• bundled(crate(semver))
• bundled(crate(serde))
• bundled(crate(serde_core))
• bundled(crate(serde_derive))
• bundled(crate(serde_json))
• bundled(crate(shlex))
• bundled(crate(smallvec))
• bundled(crate(sptr))
• bundled(crate(strsim))
• bundled(crate(syn))
• bundled(crate(tempfile))
• bundled(crate(termcolor))
• bundled(crate(textwrap))
• bundled(crate(tokio))
• bundled(crate(toml))
• bundled(crate(tracing))
• bundled(crate(tracing-attributes))
• bundled(crate(tracing-core))
• bundled(crate(unicode-ident))
• bundled(crate(unicode-xid))
• bundled(crate(uuid))
• bundled(crate(vcpkg))
• bundled(crate(wasi))
• bundled(crate(wasip2))
• bundled(crate(wasip3))
• bundled(crate(wasm-encoder))
• bundled(crate(wasm-metadata))
• bundled(crate(wasmparser))
• bundled(crate(winapi))
• bundled(crate(winapi-i686-pc-windows-gnu))
• bundled(crate(winapi-util))
• bundled(crate(winapi-x86_64-pc-windows-gnu))
• bundled(crate(windows-link))
• bundled(crate(windows-sys))
• bundled(crate(wit-bindgen))
• bundled(crate(wit-bindgen-core))
• bundled(crate(wit-bindgen-rust))
• bundled(crate(wit-bindgen-rust-macro))
• bundled(crate(wit-component))
• bundled(crate(wit-parser))
• bundled(crate(zeroize))
• bundled(crate(zeroize_derive))
• bundled(crate(zmij))
• config(389-ds-base)
• group(dirsrv)
• ldif2ldbm
• libacctpolicy-plugin.so()(64bit)
• libacctusability-plugin.so()(64bit)
• libacl-plugin.so()(64bit)
• libaddn-plugin.so()(64bit)
• libalias-entries-plugin.so()(64bit)
• libattr-unique-plugin.so()(64bit)
• libautomember-plugin.so()(64bit)
• libback-ldbm.so()(64bit)
• libbitwise-plugin.so()(64bit)
• libchainingdb-plugin.so()(64bit)
• libcollation-plugin.so()(64bit)
• libcontentsync-plugin.so()(64bit)
• libcos-plugin.so()(64bit)
• libderef-plugin.so()(64bit)
• libdistrib-plugin.so()(64bit)
• libdna-plugin.so()(64bit)
• libentryuuid-plugin.so()(64bit)
• libentryuuid-syntax-plugin.so()(64bit)
• liblinkedattrs-plugin.so()(64bit)
• libmanagedentries-plugin.so()(64bit)
• libmemberof-plugin.so()(64bit)
• libpam-passthru-plugin.so()(64bit)
• libpassthru-plugin.so()(64bit)
• libpbe-plugin.so()(64bit)
• libposix-winsync-plugin.so()(64bit)
• libpwdchan-plugin.so()(64bit)
• libpwdstorage-plugin.so()(64bit)
• libreferint-plugin.so()(64bit)
• libreplication-plugin.so()(64bit)
• libretrocl-plugin.so()(64bit)
• libroles-plugin.so()(64bit)
• librootdn-access-plugin.so()(64bit)
• libschemareload-plugin.so()(64bit)
• libstatechange-plugin.so()(64bit)
• libsyntax-plugin.so()(64bit)
• libusn-plugin.so()(64bit)
• libviews-plugin.so()(64bit)
• libwhoami-plugin.so()(64bit)
• user(dirsrv)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /usr/bin/c_rehash
• /usr/bin/perl
• /usr/bin/python3
• /usr/bin/sh
• /usr/sbin/semanage
• 389-ds-base-libs = 2.9.0-4.el9
• acl
• config(389-ds-base) = 2.9.0-4.el9
• cracklib-dicts
• cyrus-sasl-gssapi
• cyrus-sasl-md5
• cyrus-sasl-plain
• json-c
• ld64.so.2()(64bit)
• ld64.so.2(GLIBC_2.22)(64bit)
• libback-ldbm.so()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.18)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.27)(64bit)
• libc.so.6(GLIBC_2.28)(64bit)
• libc.so.6(GLIBC_2.29)(64bit)
• libc.so.6(GLIBC_2.30)(64bit)
• libc.so.6(GLIBC_2.32)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libcom_err.so.2()(64bit)
• libcrack.so.2()(64bit)
• libcrypt.so.2()(64bit)
• libcrypt.so.2(XCRYPT_2.0)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcrypto.so.3(OPENSSL_3.2.0)(64bit)
• libcrypto.so.3(OPENSSL_3.3.0)(64bit)
• libdb-5.3.so()(64bit)
• libdb-utils
• libgcc_s.so.1()(64bit)
• libgcc_s.so.1(GCC_3.0)(64bit)
• libgcc_s.so.1(GCC_3.3)(64bit)
• libgcc_s.so.1(GCC_3.4.4)(64bit)
• libgcc_s.so.1(GCC_4.2.0)(64bit)
• libicudata.so.67()(64bit)
• libicui18n.so.67()(64bit)
• libicuuc.so.67()(64bit)
• libjson-c.so.5()(64bit)
• libk5crypto.so.3()(64bit)
• libkrb5.so.3()(64bit)
• liblber.so.2()(64bit)
• liblber.so.2(OPENLDAP_2.200)(64bit)
• libldap.so.2()(64bit)
• libldap.so.2(OPENLDAP_2.200)(64bit)
• libldaputil.so.0()(64bit)
• liblmdb.so.0.0.0()(64bit)
• libm.so.6()(64bit)
• libm.so.6(GLIBC_2.29)(64bit)
• libns-dshttpd.so.0()(64bit)
• libnspr4.so()(64bit)
• libnss3.so()(64bit)
• libnss3.so(NSS_3.12)(64bit)
• libnss3.so(NSS_3.15)(64bit)
• libnss3.so(NSS_3.2)(64bit)
• libnss3.so(NSS_3.4)(64bit)
• libnss3.so(NSS_3.9.2)(64bit)
• libnssutil3.so()(64bit)
• libpam.so.0()(64bit)
• libpam.so.0(LIBPAM_1.0)(64bit)
• libpcre2-8.so.0()(64bit)
• libplc4.so()(64bit)
• libplds4.so()(64bit)
• libsasl2.so.3()(64bit)
• libsemanage-python3
• libslapd.so.0()(64bit)
• libsmime3.so()(64bit)
• libssl.so.3()(64bit)
• libssl.so.3(OPENSSL_3.0.0)(64bit)
• libssl.so.3(OPENSSL_3.3.0)(64bit)
• libssl3.so()(64bit)
• libssl3.so(NSS_3.14)(64bit)
• libssl3.so(NSS_3.2)(64bit)
• libssl3.so(NSS_3.7.4)(64bit)
• libstdc++.so.6()(64bit)
• libstdc++.so.6(CXXABI_1.3)(64bit)
• libstdc++.so.6(GLIBCXX_3.4)(64bit)
• libstdc++.so.6(GLIBCXX_3.4.11)(64bit)
• libsvrcore.so.0()(64bit)
• libsystemd.so.0()(64bit)
• libsystemd.so.0(LIBSYSTEMD_209)(64bit)
• libz.so.1()(64bit)
• lmdb-libs
• nspr >= 4.32
• nss >= 3.67.0-7
• nss >= 3.67.0-7
• nss-tools
• openldap-clients
• perl-Archive-Tar
• perl-DB_File
• perl-debugger
• perl-sigtrap
• policycoreutils-python-utils
• python3-ldap
• python3-lib389 = 2.9.0-4.el9
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)
• selinux-policy >= 3.14.1-29
• shadow-utils
• systemd
• systemd
• systemd
• zlib

License

GPL-3.0-or-later WITH GPL-3.0-389-ds-base-exception AND (Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT) AND (Apache-2.0 OR LGPL-2.1-or-later OR MIT) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0) AND Unicode-3.0 AND (MIT OR Unlicense) AND Apache-2.0 AND MIT AND MPL-2.0 AND Zlib

Changelog

* Fri Sep 11 2026 Viktor Ashirov <vashirov@redhat.com> - 2.9.0-4
  - Resolves: RHEL-173699 - ns-slapd freezes when deleting large group with deferred memberof updates enabled
  - Resolves: RHEL-183080 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.9]
  - Resolves: RHEL-183896 - Server shutdown during online reindex may lead to data loss [rhel-9]
  - Resolves: RHEL-191338 - lib389 is missing helper functions for reading ASAN files [rhel-9]
  - Resolves: RHEL-210881 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.9]
  - Resolves: RHEL-216717 - ERR - idl_new_range_fetch - Failed to build range candidate list on entryusn index
  - Resolves: RHEL-216936 - Replication performance degradation during total init on high-latency storage [rhel-9]
  - Resolves: RHEL-220509 - CVE-2026-18355 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.9]
  - Resolves: RHEL-228260 - LMDB backend in 389-ds-base is now fully supported
  - Resolves: RHEL-232845 - [Minor Incident] CVE-2026-18922 389-ds-base: 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.9]
  - Resolves: RHEL-245971 - MOD_REPLACE on groups/link attributes modifies overlap targets
  - Resolves: RHEL-245971 - MOD_REPLACE on groups/link attributes modifies overlap targets
* Tue Aug 18 2026 Simon Pichugin <spichugi@redhat.com> - 2.9.0-3
  - Bump version to 2.9.0-3
  - Resolves: RHEL-243052 - IPA - segfault with libjemalloc.so.2 [rhel-9]
  - Resolves: RHEL-221410 - large IdM host group, missing memberof host group, authentication failures, high traffic and contention
  - Resolves: RHEL-243050 - repl-agmt create doesn't set some parameters [rhel-9]
  - Resolves: RHEL-243053 - 389-ds accountpolicy.py attribute name typo in help message [rhel-9]
  - Resolves: RHEL-244870 - Local password policies can be created with unallowed values [rhel-9]
  - Resolves: RHEL-238566 - lib389: join_supplier() sets nsDS5ReplicaBindDNGroup after ensure_agreement(), causing replication auth race [rhel-9]
  - Resolves: RHEL-182153 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.9]
* Fri Jul 17 2026 Simon Pichugin <spichugi@redhat.com> - 2.9.0-2
  - Bump version to 2.9.0-2
  - Resolves: RHEL-88942 - LDAP healthcheck and ignoring entrydn index and associated config
  - Resolves: RHEL-168964 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-212097 - Online reinitialization is failing with the supplier being busy calling idrange_add_id()
  - Resolves: RHEL-212816 - import_monitor_threads and average rate 214748364.8/sec rate calculation issue [rhel-9]
  - Resolves: RHEL-190777 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.9]
  - Resolves: RHEL-183108 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.9]
* Fri Jun 05 2026 Viktor Ashirov <vashirov@redhat.com> - 2.9.0-1
  - Bump version to 2.9.0
  - Resolves: RHEL-165978 - Replication halt caused by an incorrect setting of "nsslapd-changelogmaxage"
  - Resolves: RHEL-166003 - Crash in replica_config_add when manually configuring a replica with an incorrect nsds5ReplicaRoot.
  - Resolves: RHEL-166004 - Possible memory leak when using the Retro Changelog plugin.
  - Resolves: RHEL-168908 - ns-slapd fails to shutdown when deferred memberof update is in progress
  - Resolves: RHEL-168964 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9]
  - Resolves: RHEL-168972 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED [rhel-9]
  - Resolves: RHEL-169530 - Rebase 389-ds-base to 2.9.x
  - Resolves: RHEL-170270 - DS 12 does not handle escape char in bind user [rhel-9]
  - Resolves: RHEL-170275 - dnaSharedConfig: "dnaPortNum: 0" [rhel-9]
  - Resolves: RHEL-170280 - Memory leaks in syncrepl plugin during persistent search operations [rhel-9]
  - Resolves: RHEL-170287 - access log - suspicious wtime  optime negative and large values in internal op [rhel-9]
  - Resolves: RHEL-170477 - An online reinitialization with LMDB is terminating the receiving server [rhel-9]
  - Resolves: RHEL-170480 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-9]
  - Resolves: RHEL-170651 - passwordbadwords attribute of the local password policy is not functioning [rhel-9]
  - Resolves: RHEL-170732 - Memory leaks in IPA context on server restart [rhel-9]
  - Resolves: RHEL-174525 - [RFE] Add OS-level thread names to all server threads [rhel-9]
  - Resolves: RHEL-180717 - Online export is failing when using the option "-s" [rhel-9]
* Thu Mar 05 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-6
  - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
* Fri Feb 27 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-5
  - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
  - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
  - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]
* Fri Feb 20 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-4
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
  - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]
* Thu Feb 12 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-3
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
* Mon Jan 12 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-2
  - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]
* Fri Jan 09 2026 Viktor Ashirov <vashirov@redhat.com> - 2.8.0-1
  - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
  - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
  - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
  - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
  - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
  - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
  - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
  - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
  - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
  - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
  - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
  - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
  - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
  - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
  - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
  - Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]
* Tue Sep 16 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]
* Tue Aug 05 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]
* Mon Jul 21 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU
* Tue Jul 01 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9
* Mon Jun 30 2025 Viktor Ashirov <vashirov@redhat.com> - 2.7.0-1
  - Resolves: RHEL-80163 - Rebase 389-ds-base to 2.7.x
* Fri Mar 14 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-6
  - Resolves: RHEL-82271 - ipa-restore is failing with "Failed to start Directory Service"
* Fri Mar 14 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-5
  - Resolves: RHEL-82271 - ipa-restore is failing with "Failed to start Directory Service"
* Wed Feb 19 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3
* Wed Feb 12 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]
* Sat Feb 01 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-2
  - Resolves: RHEL-76748: ns-slapd crashes with data directory ≥ 2 days old
* Tue Jan 28 2025 Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]
* Mon Dec 16 2024 Viktor Ashirov <vashirov@redhat.com> - 2.6.0-2
  - Fix License tag
* Mon Dec 16 2024 Viktor Ashirov <vashirov@redhat.com> - 2.6.0-1
  - Update to 2.6.0
  - Resolves: RHEL-67195 - Rebase 389-ds-base to 2.6.0
* Mon Sep 16 2024 Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend

Files

/etc/dirsrv
/etc/dirsrv/config
/etc/dirsrv/config/certmap.conf
/etc/dirsrv/config/slapd-collations.conf
/etc/dirsrv/schema
/etc/dirsrv/schema/99user.ldif
/etc/systemd/system/dirsrv.target.wants
/usr/bin/dbscan
/usr/bin/ds-logpipe.py
/usr/bin/ds-replcheck
/usr/bin/ldclt
/usr/bin/logconv.pl
/usr/bin/pwdhash
/usr/lib/.build-id
/usr/lib/.build-id/00
/usr/lib/.build-id/00/8a95e87ffc6aaa4958ed55dff50418a20559c0
/usr/lib/.build-id/0f
/usr/lib/.build-id/0f/e7b5bed5cd4d04c8274bf33438aab2dac3b1f1
/usr/lib/.build-id/19
/usr/lib/.build-id/19/9cf0372b55f6b7e0c773a63bbc1cb84a2565ba
/usr/lib/.build-id/1c
/usr/lib/.build-id/1c/1fd2bab7efb618ad0d0e6cb2977a59b17ebdc0
/usr/lib/.build-id/1f
/usr/lib/.build-id/1f/314c8a255ee592d9562f754ffb468987aa883b
/usr/lib/.build-id/26
/usr/lib/.build-id/26/0c2540828b30a2c680f9627f3ad59c4a6c8d55
/usr/lib/.build-id/27
/usr/lib/.build-id/27/fd707555fc0c7a6b00f743a4b7b97d493e8352
/usr/lib/.build-id/2a
/usr/lib/.build-id/2a/dbf58ad79acbde3720c0533097d79a03176e3b
/usr/lib/.build-id/2b
/usr/lib/.build-id/2b/4b72ea0d904a576894f40721f292d423537ef8
/usr/lib/.build-id/2b/ec5344dbccf1b8003b7fe9dde410e0a11e89eb
/usr/lib/.build-id/34
/usr/lib/.build-id/34/5a677c8aa3138588be35a2ff84898a55e8df6d
/usr/lib/.build-id/45
/usr/lib/.build-id/45/d3384c516dab2c2a4292e30cd42c7cd20a7780
/usr/lib/.build-id/5c
/usr/lib/.build-id/5c/8b83ca52290787dc25524ec7b333c123abf177
/usr/lib/.build-id/65
/usr/lib/.build-id/65/f29767e7045cfe65ed5dabfa68d05a91952a3f
/usr/lib/.build-id/66
/usr/lib/.build-id/66/cf8ba0c6f9c1934beee93b4e54094a81826585
/usr/lib/.build-id/67
/usr/lib/.build-id/67/b7884a04d4dee7cce3166211c63a4d553ea22a
/usr/lib/.build-id/6a
/usr/lib/.build-id/6a/df93d5b8b39c24e7b03bd82cf1734eb612adf7
/usr/lib/.build-id/6f
/usr/lib/.build-id/6f/d95c59e6d15b03c4a276badb747ce85a818cf9
/usr/lib/.build-id/75
/usr/lib/.build-id/75/413d11ee51ab158c75883cc4697162037c1ba2
/usr/lib/.build-id/79
/usr/lib/.build-id/79/66853d38b02beb4e1e9e22f030227c9806385b
/usr/lib/.build-id/7a
/usr/lib/.build-id/7a/88d9081e287a1ac94c53b591c09d887bbd9a33
/usr/lib/.build-id/80
/usr/lib/.build-id/80/9c6c377bd34cf0e8d296807ed2a447e78bde1e
/usr/lib/.build-id/87
/usr/lib/.build-id/87/bd6492ab429904636f03b34b2a5378c78b8623
/usr/lib/.build-id/8a
/usr/lib/.build-id/8a/1a1fae561cc51d132f1fda57bb2d3d3fa8f8ba
/usr/lib/.build-id/8a/aa14280949a485356f0af7bf17eacce2a37074
/usr/lib/.build-id/8c
/usr/lib/.build-id/8c/1d3630b10d2f898120c4f629fb4fe843d28620
/usr/lib/.build-id/8c/f92bb520712436dd295705e6116241a5d738ca
/usr/lib/.build-id/9b
/usr/lib/.build-id/9b/3bbfa2ddd52e8e066d86b1bb28b07e4bbb5649
/usr/lib/.build-id/9f
/usr/lib/.build-id/9f/493cef601462828d1f20d664cf46d75782a6c4
/usr/lib/.build-id/a0
/usr/lib/.build-id/a0/d9179ed1c8ccdb22df4206dbfdc30de8d89b9f
/usr/lib/.build-id/a1
/usr/lib/.build-id/a1/38e8689e793d93ac6733e3a21cf7b51b68fa15
/usr/lib/.build-id/c1
/usr/lib/.build-id/c1/33355bdc48c595384da2d90a9c944af42c503b
/usr/lib/.build-id/c6
/usr/lib/.build-id/c6/b287cf3192ce5da594a642e5ea9930f572d998
/usr/lib/.build-id/cb
/usr/lib/.build-id/cb/8b188cf80eb1c920a104977dd071eb9fc8bc05
/usr/lib/.build-id/ce
/usr/lib/.build-id/ce/32e4b164445c6f0e173f24d1da42667ae6ca01
/usr/lib/.build-id/cf
/usr/lib/.build-id/cf/2388055a55de74c9ed3b8cea02909f45dea4d8
/usr/lib/.build-id/d6
/usr/lib/.build-id/d6/f5691f4a5bbb035fff595be773b5e55be30be2
/usr/lib/.build-id/da
/usr/lib/.build-id/da/60fbf47174c55a9e1fdab6e06b78ec9ca9165f
/usr/lib/.build-id/ec
/usr/lib/.build-id/ec/c54bcf434cffc1d3f00cb58125bd0eb413e772
/usr/lib/.build-id/f0
/usr/lib/.build-id/f0/d71a8196405e66358b9f2d33498c5bb2f51489
/usr/lib/.build-id/f2
/usr/lib/.build-id/f2/a0614569ba0f2906007bc04366114c02615360
/usr/lib/.build-id/f8
/usr/lib/.build-id/f8/bc2c7535ab88bc79f37685a552f0213d909243
/usr/lib/.build-id/f9
/usr/lib/.build-id/f9/83850630b2d4f56640fd8cc523d371520ddf20
/usr/lib/.build-id/fa
/usr/lib/.build-id/fa/92ff3793ca2170156825f29201d5b601a0272f
/usr/lib/sysctl.d/70-dirsrv.conf
/usr/lib/systemd/system
/usr/lib/systemd/system/dirsrv.target
/usr/lib/systemd/system/dirsrv@.service
/usr/lib/systemd/system/dirsrv@.service.d
/usr/lib/systemd/system/dirsrv@.service.d/custom.conf
/usr/lib/sysusers.d/389-ds-base.conf
/usr/lib64/dirsrv/bin
/usr/lib64/dirsrv/bin/jeprof
/usr/lib64/dirsrv/lib
/usr/lib64/dirsrv/lib/libjemalloc.so.2
/usr/lib64/dirsrv/plugins
/usr/lib64/dirsrv/plugins/libacctpolicy-plugin.so
/usr/lib64/dirsrv/plugins/libacctusability-plugin.so
/usr/lib64/dirsrv/plugins/libacl-plugin.so
/usr/lib64/dirsrv/plugins/libaddn-plugin.so
/usr/lib64/dirsrv/plugins/libalias-entries-plugin.so
/usr/lib64/dirsrv/plugins/libattr-unique-plugin.so
/usr/lib64/dirsrv/plugins/libautomember-plugin.so
/usr/lib64/dirsrv/plugins/libback-ldbm.so
/usr/lib64/dirsrv/plugins/libbitwise-plugin.so
/usr/lib64/dirsrv/plugins/libchainingdb-plugin.so
/usr/lib64/dirsrv/plugins/libcollation-plugin.so
/usr/lib64/dirsrv/plugins/libcontentsync-plugin.so
/usr/lib64/dirsrv/plugins/libcos-plugin.so
/usr/lib64/dirsrv/plugins/libderef-plugin.so
/usr/lib64/dirsrv/plugins/libdistrib-plugin.so
/usr/lib64/dirsrv/plugins/libdna-plugin.so
/usr/lib64/dirsrv/plugins/libentryuuid-plugin.so
/usr/lib64/dirsrv/plugins/libentryuuid-syntax-plugin.so
/usr/lib64/dirsrv/plugins/liblinkedattrs-plugin.so
/usr/lib64/dirsrv/plugins/libmanagedentries-plugin.so
/usr/lib64/dirsrv/plugins/libmemberof-plugin.so
/usr/lib64/dirsrv/plugins/libpam-passthru-plugin.so
/usr/lib64/dirsrv/plugins/libpassthru-plugin.so
/usr/lib64/dirsrv/plugins/libpbe-plugin.so
/usr/lib64/dirsrv/plugins/libposix-winsync-plugin.so
/usr/lib64/dirsrv/plugins/libpwdchan-plugin.so
/usr/lib64/dirsrv/plugins/libpwdstorage-plugin.so
/usr/lib64/dirsrv/plugins/libreferint-plugin.so
/usr/lib64/dirsrv/plugins/libreplication-plugin.so
/usr/lib64/dirsrv/plugins/libretrocl-plugin.so
/usr/lib64/dirsrv/plugins/libroles-plugin.so
/usr/lib64/dirsrv/plugins/librootdn-access-plugin.so
/usr/lib64/dirsrv/plugins/libschemareload-plugin.so
/usr/lib64/dirsrv/plugins/libstatechange-plugin.so
/usr/lib64/dirsrv/plugins/libsyntax-plugin.so
/usr/lib64/dirsrv/plugins/libusn-plugin.so
/usr/lib64/dirsrv/plugins/libviews-plugin.so
/usr/lib64/dirsrv/plugins/libwhoami-plugin.so
/usr/lib64/dirsrv/python
/usr/lib64/dirsrv/python/failedbinds.py
/usr/lib64/dirsrv/python/logregex.py
/usr/libexec/dirsrv/ds_selinux_restorecon.sh
/usr/libexec/dirsrv/ds_systemd_ask_password_acl
/usr/sbin/ns-slapd
/usr/sbin/openldap_to_ds
/usr/share/dirsrv
/usr/share/dirsrv/data
/usr/share/dirsrv/data/10rfc2307bis.ldif
/usr/share/dirsrv/data/10rfc2307compat.ldif
/usr/share/dirsrv/data/60changelog.ldif
/usr/share/dirsrv/data/60inetmail.ldif
/usr/share/dirsrv/data/60kerberos.ldif
/usr/share/dirsrv/data/60krb5kdc.ldif
/usr/share/dirsrv/data/60nis.ldif
/usr/share/dirsrv/data/60qmail.ldif
/usr/share/dirsrv/data/60radius.ldif
/usr/share/dirsrv/data/60rfc4876.ldif
/usr/share/dirsrv/data/60samba.ldif
/usr/share/dirsrv/data/60sendmail.ldif
/usr/share/dirsrv/data/Ace.ldif
/usr/share/dirsrv/data/European.ldif
/usr/share/dirsrv/data/Eurosuffix.ldif
/usr/share/dirsrv/data/Example-roles.ldif
/usr/share/dirsrv/data/Example-views.ldif
/usr/share/dirsrv/data/Example.ldif
/usr/share/dirsrv/data/dbgen-FamilyNames
/usr/share/dirsrv/data/dbgen-GivenNames
/usr/share/dirsrv/data/dbgen-OrgUnits
/usr/share/dirsrv/data/dsee.schema
/usr/share/dirsrv/data/template-baseacis.ldif
/usr/share/dirsrv/data/template-country.ldif
/usr/share/dirsrv/data/template-domain.ldif
/usr/share/dirsrv/data/template-dse-minimal.ldif
/usr/share/dirsrv/data/template-dse.ldif
/usr/share/dirsrv/data/template-ldapi-autobind.ldif
/usr/share/dirsrv/data/template-ldapi-default.ldif
/usr/share/dirsrv/data/template-ldapi.ldif
/usr/share/dirsrv/data/template-locality.ldif
/usr/share/dirsrv/data/template-org.ldif
/usr/share/dirsrv/data/template-orgunit.ldif
/usr/share/dirsrv/data/template-sasl.ldif
/usr/share/dirsrv/data/template-state.ldif
/usr/share/dirsrv/data/template-suffix-db.ldif
/usr/share/dirsrv/data/template.ldif
/usr/share/dirsrv/inf
/usr/share/dirsrv/inf/defaults.inf
/usr/share/dirsrv/inf/slapd.inf
/usr/share/dirsrv/mibs
/usr/share/dirsrv/mibs/redhat-directory.mib
/usr/share/dirsrv/schema
/usr/share/dirsrv/schema/00core.ldif
/usr/share/dirsrv/schema/01core389.ldif
/usr/share/dirsrv/schema/02common.ldif
/usr/share/dirsrv/schema/03entryuuid.ldif
/usr/share/dirsrv/schema/05rfc2927.ldif
/usr/share/dirsrv/schema/05rfc4523.ldif
/usr/share/dirsrv/schema/05rfc4524.ldif
/usr/share/dirsrv/schema/06inetorgperson.ldif
/usr/share/dirsrv/schema/10automember-plugin.ldif
/usr/share/dirsrv/schema/10dna-plugin.ldif
/usr/share/dirsrv/schema/10mep-plugin.ldif
/usr/share/dirsrv/schema/10rfc2307compat.ldif
/usr/share/dirsrv/schema/20subscriber.ldif
/usr/share/dirsrv/schema/25java-object.ldif
/usr/share/dirsrv/schema/28pilot.ldif
/usr/share/dirsrv/schema/30ns-common.ldif
/usr/share/dirsrv/schema/50ns-admin.ldif
/usr/share/dirsrv/schema/50ns-certificate.ldif
/usr/share/dirsrv/schema/50ns-directory.ldif
/usr/share/dirsrv/schema/50ns-mail.ldif
/usr/share/dirsrv/schema/50ns-value.ldif
/usr/share/dirsrv/schema/50ns-web.ldif
/usr/share/dirsrv/schema/60acctpolicy.ldif
/usr/share/dirsrv/schema/60autofs.ldif
/usr/share/dirsrv/schema/60eduperson.ldif
/usr/share/dirsrv/schema/60mozilla.ldif
/usr/share/dirsrv/schema/60nss-ldap.ldif
/usr/share/dirsrv/schema/60pam-plugin.ldif
/usr/share/dirsrv/schema/60posix-winsync-plugin.ldif
/usr/share/dirsrv/schema/60pureftpd.ldif
/usr/share/dirsrv/schema/60rfc2739.ldif
/usr/share/dirsrv/schema/60rfc3712.ldif
/usr/share/dirsrv/schema/60sabayon.ldif
/usr/share/dirsrv/schema/60samba3.ldif
/usr/share/dirsrv/schema/60sudo.ldif
/usr/share/dirsrv/schema/60trust.ldif
/usr/share/doc/389-ds-base
/usr/share/doc/389-ds-base/LICENSE
/usr/share/doc/389-ds-base/LICENSE.GPLv3+
/usr/share/doc/389-ds-base/LICENSE.openssl
/usr/share/doc/389-ds-base/README.jemalloc
/usr/share/gdb/auto-load/usr
/usr/share/gdb/auto-load/usr/sbin
/usr/share/gdb/auto-load/usr/sbin/ns-slapd-gdb.py
/usr/share/licenses/389-ds-base
/usr/share/licenses/389-ds-base/COPYING.jemalloc
/usr/share/man/man1/dbscan.1.gz
/usr/share/man/man1/ds-logpipe.py.1.gz
/usr/share/man/man1/ds-replcheck.1.gz
/usr/share/man/man1/ldclt.1.gz
/usr/share/man/man1/logconv.pl.1.gz
/usr/share/man/man1/pwdhash.1.gz
/usr/share/man/man5/99user.ldif.5.gz
/usr/share/man/man5/certmap.conf.5.gz
/usr/share/man/man5/dirsrv.5.gz
/usr/share/man/man5/dirsrv.systemd.5.gz
/usr/share/man/man5/slapd-collations.conf.5.gz
/usr/share/man/man8/ns-slapd.8.gz
/usr/share/man/man8/openldap_to_ds.8.gz
/var/lib/dirsrv
/var/lock/dirsrv
/var/log/dirsrv

Generated by rpm2html 1.8.1

Fabrice Bellet, Wed Sep 23 05:37:49 2026