Oracle Linux Security Advisory ELSA-2024-3837

http://linux.oracle.com/errata/ELSA-2024-3837.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
389-ds-base-2.4.5-8.el9_4.x86_64.rpm
389-ds-base-libs-2.4.5-8.el9_4.x86_64.rpm
python3-lib389-2.4.5-8.el9_4.noarch.rpm
389-ds-base-devel-2.4.5-8.el9_4.x86_64.rpm

aarch64:
389-ds-base-2.4.5-8.el9_4.aarch64.rpm
389-ds-base-libs-2.4.5-8.el9_4.aarch64.rpm
python3-lib389-2.4.5-8.el9_4.noarch.rpm
389-ds-base-devel-2.4.5-8.el9_4.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates//389-ds-base-2.4.5-8.el9_4.src.rpm

Related CVEs:

CVE-2024-2199
CVE-2024-3657




Description of changes:

[2.4.5-8]
- Bump version to 2.4.5-8
- Fix License tag

[2.4.5-7]
- Bump version to 2.4.5-7
- Resolves: RHEL-34819 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
- Resolves: RHEL-34825 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata