Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 40: 389-ds-base Advisory 2024-ac07913be8 Critical Denial Of Service

fedora
Calendar Grey August 15, 2024
Dist Fedora Esm H88
Important Fedora 40 update for 389-ds-base correcting several denial of service vulnerabilities and required patches.
Changelog * Tue Jul 30 2024 Viktor Ashirov - 3.0.4-2 - Replace lmdb with lmdb-libs in Requires * Tue Jul 30 2024 Viktor Ashirov - 3.0.4-...

Summary

389 Directory Server is an LDAPv3 compliant server. The base package includes

the LDAP server and command line utilities for server administration.

Update Information:

Changelog * Tue Jul 30 2024 Viktor Ashirov - 3.0.4-2 - Replace lmdb with lmdb-libs in Requires * Tue Jul 30 2024 Viktor Ashirov - 3.0.4-1 - Update to 3.0.4 - Resolves: CVE-2024-1062 (rhbz#2261884) - Resolves: CVE-2024-2199 (rhbz#2283632) - Resolves: CVE-2024-3657 (rhbz#2283631) - Resolves: CVE-2024-5953 (rhbz#2292109)

Topics%20covered

Topics Covered

security advisory denial of service critical software update Fedora 389-ds-base

Change Log

* Tue Jul 30 2024 Viktor Ashirov - 3.0.4-2 - Replace lmdb with lmdb-libs in Requires * Tue Jul 30 2024 Viktor Ashirov - 3.0.4-1 - Update to 3.0.4 - Resolves: CVE-2024-1062 (rhbz#2261884) - Resolves: CVE-2024-2199 (rhbz#2283632) - Resolves: CVE-2024-3657 (rhbz#2283631) - Resolves: CVE-2024-5953 (rhbz#2292109)

References


[ 1 ] Bug #2261879 - CVE-2024-1062 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) https://bugzilla.redhat.com/show_bug.cgi?id=2261879 [ 2 ] Bug #2267976 - CVE-2024-2199 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c https://bugzilla.redhat.com/show_bug.cgi?id=2267976 [ 3 ] Bug #2274401 - CVE-2024-3657 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request https://bugzilla.redhat.com/show_bug.cgi?id=2274401 [ 4 ] Bug #2292104 - CVE-2024-5953 389-ds-base: Malformed userPassword hash may cause Denial of Service https://bugzilla.redhat.com/show_bug.cgi?id=2292104

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-ac07913be8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: 389-ds-base
Product: Fedora 40
Version: 3.0.4
Release: 2.fc40
URL: https://www.port389.org
Summary: 389 Directory Server (base)

Topics%20covered

Topics Covered

security advisory denial of service critical software update Fedora 389-ds-base

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here