FEDORA-2024-c8290315df — security update for 389-ds-base

stable

389-ds-base-2.4.6-1.fc39

FEDORA-2024-c8290315df created by vashirov 9 months ago for Fedora 39

Changelog

* Tue Jul 30 2024 Viktor Ashirov <vashirov@redhat.com> - 2.4.6-1
- Update to 2.4.6
- Resolves: CVE-2024-1062 (rhbz#2261884)
- Resolves: CVE-2024-2199 (rhbz#2283632)
- Resolves: CVE-2024-3657 (rhbz#2283631)
- Resolves: CVE-2024-5953 (rhbz#2292109)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-c8290315df

This update has been submitted for testing by vashirov.

9 months ago

This update's test gating status has been changed to 'waiting'.

9 months ago

This update's test gating status has been changed to 'waiting'.

9 months ago

This update's test gating status has been changed to 'passed'.

9 months ago

This update has been pushed to testing.

9 months ago

This update has been submitted for stable by bodhi.

8 months ago

This update has been pushed to stable.

8 months ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

9 months ago

in testing

9 months ago

in stable

8 months ago

approved

8 months ago

Builds

389-ds-base-2.4.6-1.fc39

BZ#2261879 CVE-2024-1062 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

BZ#2261884 CVE-2024-1062 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) [fedora-all]

BZ#2267976 CVE-2024-2199 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c

BZ#2274401 CVE-2024-3657 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request

BZ#2283631 CVE-2024-3657 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request [fedora-all]

BZ#2283632 CVE-2024-2199 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c [fedora-all]

BZ#2292104 CVE-2024-5953 389-ds-base: Malformed userPassword hash may cause Denial of Service

BZ#2292109 CVE-2024-5953 389-ds-base: Malformed userPassword hash may cause Denial of Service [fedora-all]

389-ds-base-2.4.6-1.fc39

Automated Test Results

passed

Test Cases


0	0	Test Case 389 Directory Server instance setup