CVE-2022-2850

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

• 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)

Security Fix(es):

• 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)

• 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)

• 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

• 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)

Security Fix(es):

• 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)
• 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)
• 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated ttacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514. (CVE-2022-2850)

This update for 389-ds fixes the following issues:

• CVE-2022-2850: Fixed an application crash when running a sync_repl client that could be triggered via a malformed cookie (bsc#1202470).

Non-security fixes:

• Update to version 1.4.4.19~git46.c900a28c8:
  • CI - makes replication/acceptance_test.py::test_modify_entry more robust
  • UI - LDAP Editor is not updated when we switch instances
• Improvements to openldap import with password policy present (bsc#1199908)
• Update to version 1.4.4.19~git43.8ba2ea21f:
  • fix covscan
  • BUG - pid file handling
  • Memory leak in slapi_ldap_get_lderrno
  • Need a compatibility option about sub suffix handling
  • Release tarballs don't contain cockpit webapp
  • Replication broken after password change
  • Harden ReplicationManager.wait_for_replication
  • dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  • CLI - dsconf backend export breaks with multiple backends
  • CLI - improve task handling

This update for 389-ds fixes the following issues:

• CVE-2022-2850: Fixed an application crash when running a sync_repl client that could be triggered via a malformed cookie (bsc#1202470).

Non-security fixes:

• Update to version 2.0.16~git20.219f047ae:
  • Fix missing 'not' in description
  • CI - makes replication/acceptance_test.py::test_modify_entry more robust
  • fix repl keep alive event interval
  • Sync_repl may crash while managing invalid cookie
  • Hostname when set to localhost causing failures in other tests
  • lib389 - do not set backend name to lowercase
  • keep alive update event starts too soon
  • Fix various memory leaks
  • UI - LDAP Editor is not updated when we switch instances
  • Supplier should do periodic updates
• Update sudoers schema to support UTF-8 (bsc#1197998)
• Update to version 2.0.16~git9.e2a858a86:
  • UI - Various fixes and RFE's for UI
  • Remove problematic language from source code
  • CI - disable TLS hostname checking
  • Update npm and cargo packages
  • Support ECDSA private keys for TLS