This update for 389-ds fixes the following issues:
Security fixes:
- CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242666)
Other fixes:
- Enable memory accounting as SUSE disables it by default (bsc#1241016).
- Fix dsidm service get_dn option failing (bsc#1241988)
- Version update 2.2.10~git99.aa5d0ecbf
Various fixes and solved issues from github repository
This update for 389-ds fixes the following issues:
- Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)
- Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)
- Update to version 2.2.10~git18.20ce9289:
* RFE: Use previously extracted key path
* Update dsidm to prioritize basedn from .dsrc over interactive input
* UI: Instance fails to load when DB backup directory doesn't exist
* Improve online import robustness when the server is under load
* Ensure all slapi_log_err calls end format strings with newline character \n
* RFE: when memberof is enabled, defer updates of members from t
This update for 389-ds fixes the following issues:
Security issues fixed:
- CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)
- CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277)
- CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507)
Non-security issues fixed:
- crash when user does change password using iso-8859-1 encoding (bsc#1228912)
- Update to version 2.2.10:
Issue 2324 - Add a CI test (#6289)
Issue 6284 - BUG - freelist ordering causes high wtime
Issue 5327 - Fix test metadata
Issu
This update for 389-ds fixes the following issues:
- Update to version 2.2.8~git65.347aae6:
- CVE-2024-1062: Resolved possible denial of service when audit logging is enabled. (bsc#1219836)