PatchFirst · Свежие уязвимости
За последние 30 дней в 389-ds опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 5
This update for 389-ds fixes the following issues: - CVE-2025-14905: Fixed heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` callback (bsc#1258727).
This update for 389-ds fixes the following issues: Security fixes: - CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242666) Other fixes: - Enable memory accounting as SUSE disables it by default (bsc#1241016). - Fix dsidm service get_dn option failing (bsc#1241988) - Version update 2.2.10~git99.aa5d0ecbf Various fixes and solved issues from github repository
This update for 389-ds fixes the following issues: - Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852) - Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462) - Update to version 2.2.10~git18.20ce9289: * RFE: Use previously extracted key path * Update dsidm to prioritize basedn from .dsrc over interactive input * UI: Instance fails to load when DB backup directory doesn't exist * Improve online import robustness when the server is under load * Ensure all slapi_log_err calls end format strings with newline character \n * RFE: when memberof is enabled, defer updates of members from t
This update for 389-ds fixes the following issues: Security issues fixed: - CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512) - CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277) - CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507) Non-security issues fixed: - crash when user does change password using iso-8859-1 encoding (bsc#1228912) - Update to version 2.2.10: Issue 2324 - Add a CI test (#6289) Issue 6284 - BUG - freelist ordering causes high wtime Issue 5327 - Fix test metadata Issu
This update for 389-ds fixes the following issues: - Update to version 2.2.8~git65.347aae6: - CVE-2024-1062: Resolved possible denial of service when audit logging is enabled. (bsc#1219836)
Сопоставьте установленный стек и версии со свежими базами уязвимостей.