| 389-ds-base-1.3.11.1-5.el7_9.x86_64
[2.2 MiB] |
Changelog
by James Chapman (2024-04-24):
- Bump version to 1.3.11.1-5
- Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
- Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
|
| 389-ds-base-1.3.10.2-17.el7_9.x86_64
[1.6 MiB] |
Changelog
by Mark Reynolds (2022-09-30):
- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl
|
| 389-ds-base-1.3.10.2-16.el7_9.x86_64
[1.6 MiB] |
Changelog
by Thierry Bordaz (2022-06-07):
- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database
|
| 389-ds-base-1.3.10.2-15.el7_9.x86_64
[1.6 MiB] |
Changelog
by Thierry Bordaz (2022-02-03):
- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search
|
| 389-ds-base-1.3.10.2-13.el7_9.x86_64
[1.6 MiB] |
Changelog
by Thierry Bordaz (2021-09-20):
- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
|
| 389-ds-base-1.3.10.2-12.el7_9.x86_64
[1.6 MiB] |
Changelog
by Thierry Bordaz (2021-05-07):
- Bump version to 1.3.10.2-12
|
| 389-ds-base-1.3.9.1-12.el7_7.x86_64
[1.6 MiB] |
Changelog
by Mark Reynolds (2019-11-01):
- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced
|
| 389-ds-base-1.3.8.4-25.1.el7_6.x86_64
[1.6 MiB] |
Changelog
by Mark Reynolds (2019-07-03):
- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)
|
| 389-ds-base-1.3.8.4-15.el7.x86_64
[1.6 MiB] |
Changelog
by Mark Reynolds (2018-09-19):
- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch
|
| 389-ds-base-1.3.7.5-28.el7_5.x86_64
[1.6 MiB] |
Changelog
by Mark Reynolds (2018-09-13):
- Bump version to 1.3.7.5-28
- Resolves: Bug 1628676 - 389-ds-base: race condition on reference counter leads to DoS using persistent search
- Resolves: Bug 1628677 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly
|
| 389-ds-base-1.3.7.5-21.el7_5.x86_64
[1.6 MiB] |
Changelog
by Mark Reynolds (2018-04-05):
- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch
|
| 389-ds-base-1.3.6.1-28.el7_4.x86_64
[1.7 MiB] |
Changelog
by Mark Reynolds (2018-02-26):
- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8
|
| 389-ds-base-1.3.6.1-26.el7_4.x86_64
[1.6 MiB] |
Changelog
by Mark Reynolds (2018-01-16):
- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf
|
| 389-ds-base-1.3.6.1-19.el7_4.x86_64
[1.7 MiB] |
Changelog
by Mark Reynolds (2017-08-21):
- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init
|