Summary
[1.3.8.4-25.1]
- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)
[1.3.8.4-25]
- Bump version to 1.3.8.4-25
- Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
- Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
[1.3.8.4-24]
- Bump version to 1.3.8.4-24
- Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | 389-ds-base | 0:1.3.8.4-25.1.el7_6 |
| Oracle Linux · 7 | 389-ds-base-devel | 0:1.3.8.4-25.1.el7_6 |
| Oracle Linux · 7 | 389-ds-base-libs | 0:1.3.8.4-25.1.el7_6 |
| Oracle Linux · 7 | 389-ds-base-snmp | 0:1.3.8.4-25.1.el7_6 |
Vulnerabilities 1
-
Medium 5.3
In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worke…