ELSA-2024-3047

ELSA-2024-3047 - 389-ds:1.4 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-05-24

Description

[1.4.3.39-3]
- Bump version to 1.4.3.39-3
- Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix

[1.4.3.39-2]
- Bump version to 1.4.3.39-2
- Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
- Resolves: RHEL-5390 - schema-compat-plugin expensive with automember rebuild
- Resolves: RHEL-5135 - crash in sync_update_persist_op() of content sync plugin

[1.4.3.39-1]
- Bump version to 1.4.3.39-1
- Resolves: RHEL-19028 - Rebase 389-ds-base in RHEL 8.10 to 1.4.3.39
- Resolves: RHEL-19240 - [RFE] Add PROXY protocol support to 389-ds-base
- Resolves: RHEL-5143 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG.
- Resolves: RHEL-5107 - bdb_start - Detected Disorderly Shutdown directory server is not starting
- Resolves: RHEL-16338 - ns-slapd crash in slapi_attr_basetype
- Resolves: RHEL-14025 - After an upgrade the LDAP server won't start if nsslapd-conntablesize is present in the dse.ldif file.

[1.4.3.38-1]
- Bump version to 1.4.3.38-1
- Resolves: RHEL-19028 - Rebase 389-ds-base in RHEL 8.10 to 1.4.3.38

[1.4.3.37-1]
- Bump versionto 1.4.3.37-1
- Resolves: rhbz#2224505 - Paged search impacts performance
- Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme
- Resolves: rhbz#2218235 - python3-lib389: Python tarfile extraction needs change to avoid a warning
- Resolves: rhbz#2210491 - dtablesize being set to soft maxfiledescriptor limit causing massive slowdown in large enviroments.
- Resolves: rhbz#2149967 - SELinux labeling for dirsrv files seen during ipa install/uninstall should be moved to DEBUG

[1.4.3.36-2]
- Bump version to 1.4.3.36-2
- Resolves: rhbz#2220890 - healthcheck tool needs to be updates for new default password storage scheme

[1.4.3.36-1]
- Bump version to 1.4.3.36-1
- Resolves: rhbz#2188628 - Rebase 389-ds-base in RHEL 8.9 to 1.4.3.36

[1.4.3.35-1]
- Bump version to 1.4.3.35-1
- Resolves: rhbz#2188628 - Rebase 389-ds-base in RHEL 8.9 to 1.4.3.35

[1.4.3.32-1]
- Bump version to 1.4.3.32-1
- Resolves: Bug 2098138 - broken nsslapd-subtree-rename-switch option in rhds11
- Resolves: Bug 2119063 - entryuuid fixup tasks fails because entryUUID is not mutable
- Resolves: Bug 2136610 - [RFE] Add 'cn' attribute to IPA audit logs
- Resolves: Bug 2142638 - pam mutex lock causing high etimes, affecting red hat internal sso
- Resolves: Bug 2096795 - [RFE] Support ECDSA private keys for TLS

Related CVEs

CVE-2024-1062

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	389-ds-base-1.4.3.39-3.module+el8.10.0+90328+4f014c15.src.rpm	727042e2b8ee9f778495c5b520c11837a80fa443b1eee16159a6a0649cdc5b6a	-	ol8_aarch64_appstream
	389-ds-base-1.4.3.39-3.module+el8.10.0+90328+4f014c15.aarch64.rpm	e3b2fa1ca068feb104d9d63fac32e0a2f2370e49ea242fcde2f097d031ab87d5	-	ol8_aarch64_appstream
	389-ds-base-devel-1.4.3.39-3.module+el8.10.0+90328+4f014c15.aarch64.rpm	e0d479f2b9794469fa5208bca3e643ae9c7dc7ff4db6abc14ed92853b43052bd	-	ol8_aarch64_appstream
	389-ds-base-legacy-tools-1.4.3.39-3.module+el8.10.0+90328+4f014c15.aarch64.rpm	95282ebf812d1e15635a287fae581ab4345a7f2283e9512011b386876839c6a8	-	ol8_aarch64_appstream
	389-ds-base-libs-1.4.3.39-3.module+el8.10.0+90328+4f014c15.aarch64.rpm	db05a2dc88cafdff717bb10c144a2efc1037a9ccd0a584984bb466b0fac08f8b	-	ol8_aarch64_appstream
	389-ds-base-snmp-1.4.3.39-3.module+el8.10.0+90328+4f014c15.aarch64.rpm	b1fddfff9e79fee798b032bbac63e995f5bd5f566f16f6233fc74629aea26623	-	ol8_aarch64_appstream
	python3-lib389-1.4.3.39-3.module+el8.10.0+90328+4f014c15.noarch.rpm	5baeb7432de1d497e0d59cd545fde965843cb568c9754f3d1c8058f34d0e19dc	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	389-ds-base-1.4.3.39-3.module+el8.10.0+90328+4f014c15.src.rpm	727042e2b8ee9f778495c5b520c11837a80fa443b1eee16159a6a0649cdc5b6a	-	ol8_x86_64_appstream
	389-ds-base-1.4.3.39-3.module+el8.10.0+90328+4f014c15.x86_64.rpm	6b6ddf5bc5865750e0c32909eb9af2160103986a3dd41b01efb6d699c3e77df2	-	ol8_x86_64_appstream
	389-ds-base-devel-1.4.3.39-3.module+el8.10.0+90328+4f014c15.x86_64.rpm	9f8abcf432f6ba0dabb924312b8c22bfa7c85c5bca91ba73bb5e1822f94ca70f	-	ol8_x86_64_appstream
	389-ds-base-legacy-tools-1.4.3.39-3.module+el8.10.0+90328+4f014c15.x86_64.rpm	2fb26c723b226bfce038fc6ce5091ca6090caf4879138e6bf33f2930a82ac0fe	-	ol8_x86_64_appstream
	389-ds-base-libs-1.4.3.39-3.module+el8.10.0+90328+4f014c15.x86_64.rpm	4a5c6816b8662939e2903cce4786f0eeeb2b7b65e503720062135047eae082b4	-	ol8_x86_64_appstream
	389-ds-base-snmp-1.4.3.39-3.module+el8.10.0+90328+4f014c15.x86_64.rpm	872712a08409ae718dd3a057f5f0207bf5691ba87746c2c9db9c05ffc3a2584b	-	ol8_x86_64_appstream
	python3-lib389-1.4.3.39-3.module+el8.10.0+90328+4f014c15.noarch.rpm	5baeb7432de1d497e0d59cd545fde965843cb568c9754f3d1c8058f34d0e19dc	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team