Summary
[2.5.2-9]
- Resolves: RHEL-83874 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.5.z]
- Resolves: RHEL-80712 - Increased memory consumption caused by NDN cache [rhel-9.5.z]
- Resolves: RHEL-87194 - Some replication status data are reset upon a restart. [rhel-9.5.z]
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | 389-ds-base | 0:2.5.2-9.el9_5 |
| Oracle Linux · 9 | 389-ds-base-devel | 0:2.5.2-9.el9_5 |
| Oracle Linux · 9 | 389-ds-base-libs | 0:2.5.2-9.el9_5 |
| Oracle Linux · 9 | 389-ds-base-snmp | 0:2.5.2-9.el9_5 |
| Oracle Linux · 9 | python3-lib389 | 0:2.5.2-9.el9_5 |
Vulnerabilities 1
-
Medium 4.9
389-ds-base: null pointer dereference leads to denial of service
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN o…