ELSA-2024-5192

ELSA-2024-5192 - 389-ds-base security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-08-11

Description

[2.4.5-9]
- Bump version to 2.4.5-9
- Resolves: RHEL-44323 - unauthenticated user can trigger a DoS by sending a specific extended search request
- Resolves: RHEL-40945 - Malformed userPassword hash may cause Denial of Service
- Resolves: RHEL-49457 - perf search result investigation for many large static groups and members
- Resolves: RHEL-49459 - subsuffix are not returned in one level scoped search

Related CVEs

CVE-2024-6237

CVE-2024-5953

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	389-ds-base-2.4.5-9.el9_4.src.rpm	83199714e20b30642514cf0e5155ad5e651168ce617695ad3d3dd716bf181713	-	ol9_aarch64_appstream
	389-ds-base-2.4.5-9.el9_4.src.rpm	83199714e20b30642514cf0e5155ad5e651168ce617695ad3d3dd716bf181713	-	ol9_aarch64_codeready_builder
	389-ds-base-2.4.5-9.el9_4.aarch64.rpm	68319a358b8bfcc4a7e26d4a614df53b65bfceacf4d31ecf16d2f343884a61d7	-	ol9_aarch64_appstream
	389-ds-base-devel-2.4.5-9.el9_4.aarch64.rpm	9fe9f733b89f9e6ec0b5ef4da696cd27035051768ac16fce5f56a99361b44cf3	-	ol9_aarch64_codeready_builder
	389-ds-base-libs-2.4.5-9.el9_4.aarch64.rpm	35ecbb8e7b0c10917bb81eb3ed51648fa33c87c934a072356cb313b285cb0b0e	-	ol9_aarch64_appstream
	python3-lib389-2.4.5-9.el9_4.noarch.rpm	8f510abc02f263b1d5cab88c68c294d1aa0537f70987a79f50ddde83687552da	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	389-ds-base-2.4.5-9.el9_4.src.rpm	83199714e20b30642514cf0e5155ad5e651168ce617695ad3d3dd716bf181713	-	ol9_x86_64_appstream
	389-ds-base-2.4.5-9.el9_4.src.rpm	83199714e20b30642514cf0e5155ad5e651168ce617695ad3d3dd716bf181713	-	ol9_x86_64_codeready_builder
	389-ds-base-2.4.5-9.el9_4.x86_64.rpm	25c1984aaf77da66c60c0d8dd32d93c7e030ea44b02d58353b60f15d938f7558	-	ol9_x86_64_appstream
	389-ds-base-devel-2.4.5-9.el9_4.x86_64.rpm	5023dd5f6161d67dd35df26d282f4e767f3721e09313b7675b8a5c66508cc4ab	-	ol9_x86_64_codeready_builder
	389-ds-base-libs-2.4.5-9.el9_4.x86_64.rpm	eaf8306af9ad6304d9349a14a4e493c8f5ed05610393ddf2477dd573e32bb760	-	ol9_x86_64_appstream
	python3-lib389-2.4.5-9.el9_4.noarch.rpm	8f510abc02f263b1d5cab88c68c294d1aa0537f70987a79f50ddde83687552da	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team