Summary
[2.8.0-7]
- Resolves: RHEL-152356 - Getting 'build_candidate_list - Database error 11' messages after migrating to LMDB. [rhel-9.8.z]
- Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z]
- Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z]
- Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z]
- Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8]
- Resolves: RHEL-180716 - Online export is failing when using the option '-s' [rhel-9.8.z]
- Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z]
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | 389-ds-base | 0:2.8.0-7.el9_8 |
| Oracle Linux · 9 | 389-ds-base-devel | 0:2.8.0-7.el9_8 |
| Oracle Linux · 9 | 389-ds-base-libs | 0:2.8.0-7.el9_8 |
| Oracle Linux · 9 | 389-ds-base-snmp | 0:2.8.0-7.el9_8 |
| Oracle Linux · 9 | python3-lib389 | 0:2.8.0-7.el9_8 |
Vulnerabilities 1
-
High 7.5
389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)
A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing…