Summary
[1.3.9.1-12]
- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced
[1.3.9.1-11]
- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | 389-ds-base | 0:1.3.9.1-12.el7_7 |
| Oracle Linux · 7 | 389-ds-base-devel | 0:1.3.9.1-12.el7_7 |
| Oracle Linux · 7 | 389-ds-base-libs | 0:1.3.9.1-12.el7_7 |
| Oracle Linux · 7 | 389-ds-base-snmp | 0:1.3.9.1-12.el7_7 |
Vulnerabilities 1
-
Medium 6.5
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute v…