389-ds:1.4 security update

エラータID: AXSA:2024-8806:01

Release date: 
Thursday, September 12, 2024 - 20:18
Subject: 
389-ds:1.4 security update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-5953
A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

Modularity name: "389-ds"
Stream name: "1.4"

Solution: 

Update packages.

CVEs: 
CVE-2024-5953
A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.
Additional Info: 

N/A

Download: 

SRPMS
  1. 389-ds-base-1.4.3.39-8.module+el8+1806+91bb3236.src.rpm
    MD5: bd5c4a9b90ce2209dbb94c32fb3f35a5
    SHA-256: 039ba6bf2a772f90bd9239c44dfe0f5f78a3737a39b41f43c41e0fcaa035250d
    Size: 45.72 MB

Asianux Server 8 for x86_64
  1. 389-ds-base-1.4.3.39-8.module+el8+1806+91bb3236.x86_64.rpm
    MD5: 0e3091ffec6f076a43f7b6e221708b45
    SHA-256: d5b9eb3d405c82c43e27019188040c55f39b4c013861551c2302527aee34da50
    Size: 2.94 MB
  2. 389-ds-base-debugsource-1.4.3.39-8.module+el8+1806+91bb3236.x86_64.rpm
    MD5: a23a3e2e2fc9686012c8a3e8d71b6d1a
    SHA-256: 67fe552126847c13e82e829865f66ade3dc42017d16c98c3e8a129d181db0810
    Size: 2.76 MB
  3. 389-ds-base-devel-1.4.3.39-8.module+el8+1806+91bb3236.x86_64.rpm
    MD5: 5d609d2404d8d69d9acddb56877c47a1
    SHA-256: 03bb15d6eeac486ed4e0c5ba7cc74b51f6a8d70a426612cdc06e406b35732797
    Size: 126.59 kB
  4. 389-ds-base-legacy-tools-1.4.3.39-8.module+el8+1806+91bb3236.x86_64.rpm
    MD5: a02e2a2d4aae82d33897138a158e5056
    SHA-256: b1def804f0ebb7d3a3fb846ce723222c335baab6497ef69ddf67a275f444033d
    Size: 278.36 kB
  5. 389-ds-base-libs-1.4.3.39-8.module+el8+1806+91bb3236.x86_64.rpm
    MD5: 4d5e9558596c1305ab36518176e5e4f3
    SHA-256: 2d6cbb87877a7d9a34c33177ab2651aa2514c95bba5736595fe6ed07e110674b
    Size: 1.47 MB
  6. 389-ds-base-snmp-1.4.3.39-8.module+el8+1806+91bb3236.x86_64.rpm
    MD5: 910764d168eccb8493d022c300b57ede
    SHA-256: fbdf8454246aa0ef93dc7ce658ba786972e3d9512be311202b3c00ce3f8bf4f1
    Size: 39.56 kB
  7. python3-lib389-1.4.3.39-8.module+el8+1806+91bb3236.noarch.rpm
    MD5: af88d2c0d72f1b5fe610feee2b905dc5
    SHA-256: 59a755b03f0245c81fd0665ac9d4bdffb8d5762bf7176bee852173800f91785b
    Size: 0.95 MB