{"id":"CVE-2024-2199","aliases":["ALSA-2024:3837","ALSA-2024:4235","CLSA-2026-1778892584","DEBIAN-CVE-2024-2199","DLA-4021-1","EUVD-2024-27159","OESA-2024-1724","RHSA-2024:3591","RHSA-2024:3837","RHSA-2024:4092","RHSA-2024:4209","RHSA-2024:4210","RHSA-2024:4235","RHSA-2024:4633","RHSA-2024:5690","RHSA-2025:1632","RLSA-2024:3837","RLSA-2024:4235","SUSE-SU-2024:2910-1","SUSE-SU-2024:3082-1","SUSE-SU-2024:3218-1","SUSE-SU-2024:3257-1","SUSE-SU-2024:3843-1","SUSE-SU-2024:3844-1","UBUNTU-CVE-2024-2199","openSUSE-SU-2024:14227-1"],"status":"published","title":"389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c","description":"A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.","severity":{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00565,"percentile":0.47207,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2024-05-28T12:04:07Z","modified":"2026-11-05T21:15:59Z","fixes":[{"ecosystem":"Debian:12","package":"389-ds-base","fixed_in":["2.3.1+dfsg1-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["3.1.1+dfsg1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-7.module_el8.10.0+3864+d8eec553"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-7.module_el8.10.0+3864+d8eec553"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-7.module_el8.10.0+3864+d8eec553"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-7.module_el8.10.0+3864+d8eec553"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-7.module_el8.10.0+3864+d8eec553"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.39-7.module_el8.10.0+3864+d8eec553"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-5.el9_2.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-5.el9_2.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-5.el9_2.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-5.el9_2.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-5.el9_2.tuxcare.els4"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1+dfsg1-1+deb12u1"}]}],"versions":["2.3.1+dfsg1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.11-2+deb11u1"}]}],"versions":["1.4.4.11-2"],"bundled":9},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-5.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-6.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-1.4.3.36-6.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"three-eight-nine-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"389-ds-base-2.3.2-7.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.11.1-5.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:12.4::el9","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-4.module+el9dsrv+21964+c7e95493"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.8::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.37-10.module+el8dsrv+21971+f7435891"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.9::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-4.module+el8dsrv+21965+9ff26197"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-9.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.35-5.module+el8.8.0+22193+5f98570a"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:directory_server_e4s:11.5::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.5-8.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.39-7.module+el8.10.0+1832+2f5a9255"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git2.345056d3-150600.8.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git2.345056d3-150600.8.7.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git2.345056d3-150500.3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git2.345056d3-150500.3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.20~git9.5e2d637c-150400.3.42.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.20~git3.e7ac6d87-150300.3.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.20~git3.e7ac6d87-150300.3.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.20~git3.e7ac6d87-150300.3.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.20~git3.e7ac6d87-150300.3.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git18.20ce9289-150500.3.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git18.20ce9289-150500.3.24.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git18.20ce9289-150600.8.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.10~git18.20ce9289-150600.8.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.3.12-1build1","1.3.3.13-1","1.3.4.5-2","1.3.4.8-1","1.3.4.8-3","1.3.4.8-3ubuntu1","1.3.4.8-4","1.3.4.9-1","1.3.4.9-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.7.5-1","1.3.7.5-1build1","1.3.7.5-1build2","1.3.7.9-1","1.3.7.10-1","1.3.7.10-1ubuntu1","1.3.7.10-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2","1.4.3.6-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.4.11-2build1","1.4.4.11-2build2","1.4.4.17-1","2.0.11-2","2.0.14-1","2.0.15-1","2.0.15-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.4+dfsg1-1","2.4.4+dfsg1-1ubuntu1","2.4.4+dfsg1-1ubuntu4","2.4.4+dfsg1-3","2.4.5+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+vendor1-2","3.1.2+vendor1-2build1","3.3.1-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1","3.1.2+vendor1-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1~git0.aef1668-1.1"}]}],"bundled":4}],"products":[{"vendor":"red hat","product":"red hat directory server 11.5 e4s for rhel 8"},{"vendor":"red hat","product":"red hat directory server 11.8 for rhel 8"},{"vendor":"red hat","product":"red hat directory server 11.9 for rhel 8"},{"vendor":"red hat","product":"red hat directory server 12.4 for rhel 9"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:3591","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3837","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4092","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4209","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4210","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4235","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4633","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5690","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:1632","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-2199","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267976","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","report"]},{"url":"https://www.port389.org/docs/389ds/releases/release-3-1-1.html","tags":["web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html","tags":["web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3657","tags":["report"]},{"url":"https://bugzilla.redhat.com/2267976","tags":["report"]},{"url":"https://bugzilla.redhat.com/2274401","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-3837.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-4235.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778892584.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2199.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2199","tags":["advisory"]},{"url":"https://github.com/389ds/389-ds-base","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-2199","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3657","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274401","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3591.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-2199","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3657","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3837.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293001","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4092.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274367","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4209.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1062","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1062","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1062","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256711","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4210.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-16277","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4235.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2292104","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4633.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-5953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-5953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5953","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5690.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1632.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3837","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:4235","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242910-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225507","tags":["report"]},{"url":"https://bugzilla.suse.com/1225512","tags":["report"]},{"url":"https://bugzilla.suse.com/1226277","tags":["report"]},{"url":"https://bugzilla.suse.com/1228912","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5953","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243082-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243218-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219836","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1062","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243257-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243843-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230852","tags":["report"]},{"url":"https://bugzilla.suse.com/1231462","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243844-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-2199","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6237","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-2199","title":"389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c","description":"A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.","status":"published","published":"2024-05-28T12:04:07.401Z","modified":"2026-11-05T11:44:21.417Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-05T13:18:22.408512Z"}],"euvd":[{"id":"EUVD-2024-27159","description":"A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.","status":"published","published":"2024-05-28T12:04:07Z","modified":"2026-11-05T11:44:21Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T13:14:14.11293Z"}],"nvd":[{"id":"CVE-2024-2199","description":"A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.","status":"published","published":"2024-05-28T12:15:08.95Z","modified":"2026-11-05T12:17:48.667Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-05T16:36:40.983114Z"}],"osv":[{"id":"CVE-2024-2199","title":"389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c","description":"A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.","status":"published","published":"2024-05-28T12:04:07.401Z","modified":"2026-11-07T02:30:49.640687136Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-07T03:07:52.369902Z"},{"id":"DEBIAN-CVE-2024-2199","description":"A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.","status":"published","published":"2024-05-28T12:15:08.95Z","modified":"2026-11-02T12:00:32.783874235Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2024-1724","title":"three-eight-nine-ds-base security update","description":"389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.\r\n\r\nSecurity Fix(es):\r\n\r\nA denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.(CVE-2024-2199)\r\n\r\nA flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service(CVE-2024-3657)","status":"published","published":"2024-06-14T11:07:11Z","modified":"2026-08-18T01:17:24.473709155Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2024:3591","title":"Red Hat Security Advisory: 389-ds-base security update","status":"published","published":"2024-10-01T17:14:15Z","modified":"2026-09-09T10:03:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3837","title":"Red Hat Security Advisory: 389-ds-base security update","status":"published","published":"2024-10-01T17:14:25Z","modified":"2026-09-09T10:03:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4092","title":"Red Hat Security Advisory: redhat-ds:12 security, bug fix update","status":"published","published":"2024-10-01T17:13:13Z","modified":"2026-09-09T10:03:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4209","title":"Red Hat Security Advisory: redhat-ds:11 security and bug fix update","status":"published","published":"2024-10-01T17:13:24Z","modified":"2026-09-09T10:03:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4210","title":"Red Hat Security Advisory: redhat-ds:11 security update","status":"published","published":"2024-10-01T17:13:57Z","modified":"2026-09-09T10:03:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4235","title":"Red Hat Security Advisory: 389-ds security update","status":"published","published":"2024-10-01T17:14:06Z","modified":"2026-09-09T10:03:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4633","title":"Red Hat Security Advisory: 389-ds-base security update","status":"published","published":"2024-10-01T17:14:16Z","modified":"2026-09-09T10:03:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:5690","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-10-01T17:14:47Z","modified":"2026-09-09T10:03:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2025:1632","title":"Red Hat Security Advisory: redhat-ds:11 security update","status":"published","published":"2025-02-19T10:03:28Z","modified":"2026-09-09T10:05:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.096024Z"},{"id":"RLSA-2024:4235","title":"Important: 389-ds security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-15T12:17:49.133583Z","modified":"2026-02-04T10:30:04.313779Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2024-2199","description":"A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.","status":"published","published":"2024-05-28T12:15:00Z","modified":"2026-10-17T12:56:29.591648441Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"ALSA-2024:3837","title":"Important: 389-ds-base security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base\npackages include the Lightweight Directory Access Protocol (LDAP) server and\ncommand-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-06-11T00:00:00Z","modified":"2026-10-29T11:32:09.24372831Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:4235","title":"Important: 389-ds security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-02T00:00:00Z","modified":"2026-10-29T11:02:21.416592706Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2026-1778892584","title":"389-ds-base: Fix of 3 CVEs","description":"- CVE-2024-5953: fix DoS via malformed password hash on bind\n- CVE-2024-2199: fix DoS via malformed userPassword modify\n- CVE-2025-2487: fix NULL pointer deref on failed MODDN operations","status":"published","published":"2026-05-16T00:49:49Z","modified":"2026-10-21T10:46:47.024599426Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-4021-1","title":"389-ds-base - security update","status":"published","published":"2025-01-19T00:00:00Z","modified":"2026-03-09T01:19:06.435503Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2024:14227-1","title":"389-ds-3.1.1~git0.aef1668-1.1 on GA media","description":"These are all security issues fixed in the 389-ds-3.1.1~git0.aef1668-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-31T00:00:00Z","modified":"2026-02-04T02:55:51.029937Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:3837","title":"Important: 389-ds-base security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base\npackages include the Lightweight Directory Access Protocol (LDAP) server and\ncommand-line utilities for server administration.\n\nSecurity Fix(es):\n\n* 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)\n\n* 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-06-14T14:00:35.848917Z","modified":"2026-02-04T12:30:06.886582Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:2910-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)\n- CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277)\n- CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507)\n  \nNon-security issues fixed:\n\n- crash when user does change password using iso-8859-1 encoding (bsc#1228912)\n\n- Update to version 2.2.10:\n\n  Issue 2324 - Add a CI test (#6289)\n  Issue 6284 - BUG - freelist ordering causes high wtime\n  Issue 5327 - Fix test metadata\n  Issue 5853 - Update Cargo.lock\n  Issue 5962 - Rearrange includes for 32-bit support logic\n  Issue 5973 - Fix fedora cop RawHide builds (#5974)\n  Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console\n  Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)\n  Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)\n  Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)\n  Issue 6170 - audit log buffering doesn't handle large updates\n  Issue 6193 - Test failure: test_tls_command_returns_error_text\n  Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`\n  Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)\n  Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)\n  Issue 6080 - ns-slapd crash in referint_get_config (#6081)\n  Issue 6117 - Fix the UTC offset print (#6118)\n  Issue 5305 - OpenLDAP version autodetection doesn't work\n  Issue 6112 - RFE - add new operation note for MFA authentications\n  Issue 5842 - Add log buffering to audit log\n  Issue 6103 - New connection timeout error breaks errormap (#6104)\n  Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)\n  Issue 6096 - Improve connection timeout error logging (#6097)\n  Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)\n  Issue 5487 - Fix various isses with logconv.pl (#6085)\n  Issue 6052 - Paged results test sets hostname to `localhost` on test collection\n  Issue 6061 - Certificate lifetime displayed as NaN\n  Issue 6043, 6044 - Enhance Rust and JS bundling and add SPDX licenses for both (#6045)\n  Issue 3555 - Remove audit-ci from dependencies (#6056)\n  Issue 5647 - Fix unused variable warning from previous commit (#5670)\n  issue 5647 - covscan: memory leak in audit log when adding entries (#5650)\n  Issue 6047 - Add a check for tagged commits\n  Issue 6041 - dscreate ds-root - accepts relative path (#6042)\n  Issue 6034 - Change replica_id from str to int\n  Issue 5938 - Attribute Names changed to lowercase after adding the Attributes (#5940)\n  Issue 5870 - ns-slapd crashes at startup if a backend has no suffix (#5871)\n  Issue 5939 - During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it (#6007)\n  Issue 5944 - Reversion of the entry cache should be limited to BETXN plugin failures (#5994)\n  Issue 5954 - Disable Transparent Huge Pages\n","status":"published","published":"2024-08-14T14:17:45Z","modified":"2026-02-04T03:28:19.466718Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:3082-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)\n- CVE-2024-5953: Fixed a denial of service caused by malformed userPassword hashes (bsc#1226277)\n- CVE-2024-2199: Fixed a crash caused by malformed userPassword in do_modify() (bsc#1225507)\n\nNon-security issues fixed:\n\n- crash when user does change password using iso-8859-1 encoding (bsc#1228912)\n\n- Update to version 2.2.10~git2.345056d3:\n  * Issue 2324 - Add a CI test (#6289)\n  * Issue 6284 - BUG - freelist ordering causes high wtime\n\n- Update to version 2.2.10~git0.4d7218b7:\n  * Bump version to 2.2.10\n  * Issue 5327 - Fix test metadata\n  * Issue 5853 - Update Cargo.lock\n  * Issue 5962 - Rearrange includes for 32-bit support logic\n  * Issue 5973 - Fix fedora cop RawHide builds (#5974)\n  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console\n  * Issue 6254 - Enabling replication for a sub suffix crashes browser (#6255)\n  * Issue 6224 - d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes (#6225)\n  * Issue 6183 - Slow ldif2db import on a newly created BDB backend (#6208)\n  * Issue 6170 - audit log buffering doesn't handle large updates\n  * Issue 6193 - Test failure: test_tls_command_returns_error_text\n  * Issue 6189 - CI tests fail with `[Errno 2] No such file or directory: '/var/cache/dnf/metadata_lock.pid'`\n  * Issue 6172 - RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members) (#6173)\n  * Issue 6092 - passwordHistory is not updated with a pre-hashed password (#6093)\n  * Issue 6080 - ns-slapd crash in referint_get_config (#6081)\n  * Issue 6117 - Fix the UTC offset print (#6118)\n  * Issue 5305 - OpenLDAP version autodetection doesn't work\n  * Issue 6112 - RFE - add new operation note for MFA authentications\n  * Issue 5842 - Add log buffering to audit log\n  * Issue 6103 - New connection timeout error breaks errormap (#6104)\n  * Issue 6067 - Improve dsidm CLI No Such Entry handling (#6079)\n  * Issue 6096 - Improve connection timeout error logging (#6097)\n  * Issue 6067 - Add hidden -v and -j options to each CLI subcommand (#6088)\n  * Issue 5487 - Fix various isses with logconv.pl (#6085)\n","status":"published","published":"2024-09-02T14:44:56Z","modified":"2026-02-04T02:32:49.448023Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:3218-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Update to version 2.0.20\n- CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512)\n- CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277)\n- CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507)\n- CVE-2024-1062: Fixed a heap overflow leading to denail-of-servce while writing a value larger than 256 chars in log_entry_attr. (bsc#1219836)\n","status":"published","published":"2024-09-12T11:16:05Z","modified":"2026-02-04T04:29:02.748762Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3257-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Update to version 1.4.4.20~git3.e7ac6d87:\n- CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512)\n- CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277)\n- CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507)\n","status":"published","published":"2024-09-16T12:39:40Z","modified":"2026-02-04T03:20:11.639064Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3843-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)\n- Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)\n- Update to version 2.2.10~git18.20ce9289:\n  * RFE: Use previously extracted key path\n  * Update dsidm to prioritize basedn from .dsrc over interactive input\n  * UI: Instance fails to load when DB backup directory doesn't exist\n  * Improve online import robustness when the server is under load\n  * Ensure all slapi_log_err calls end format strings with newline character \\n\n  * RFE: when memberof is enabled, defer updates of members from the update of the group\n  * Provide more information in the error message during setup_ol_tls_conn()\n  * Wrong set of entries returned for some search filters\n  * Schema lib389 object is not keeping custom schema data upon editing\n  * UI: Fix audit issue with npm - micromatch\n  * Fix long delay when setting replication agreement with dsconf\n  * Changelog trims updates from a given RID even if a consumer has not received any of them\n  * test_password_modify_non_utf8 should set default password storage scheme\n  * Update Cargo.lock\n  * Rearrange includes for 32-bit support logic\n  * Fix fedora cop RawHide builds\n  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console\n  * Enabling replication for a sub suffix crashes browser\n  * d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes\n  * Slow ldif2db import on a newly created BDB backend\n  * Audit log buffering doesn't handle large updates\n  * RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members)\n  * passwordHistory is not updated with a pre-hashed password\n  * ns-slapd crash in referint_get_config\n  * Fix the UTC offset print\n  * Fix OpenLDAP version autodetection\n  * RFE: add new operation note for MFA authentications\n  * Add log buffering to audit log\n  * Fix connection timeout error breaking errormap\n  * Improve dsidm CLI No Such Entry handling\n  * Improve connection timeout error logging\n  * Add hidden -v and -j options to each CLI subcommand\n  * Fix various issues with logconv.pl\n  * Fix certificate lifetime displayed as NaN\n  * Enhance Rust and JS bundling and add SPDX licenses for both\n  * Remove audit-ci from dependencies\n  * Fix unused variable warning from previous commit\n  * covscan: fix memory leak in audit log when adding entries\n  * Add a check for tagged commits\n  * dscreate ds-root - accepts relative path\n  * Change replica_id from str to int\n  * Attribute Names changed to lowercase after adding the Attributes\n  * ns-slapd crashes at startup if a backend has no suffix\n  * During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it\n  * Reversion of the entry cache should be limited to BETXN plugin failures\n  * Disable Transparent Huge Pages\n  * Freelist ordering causes high wtime\n  * Security fix for CVE-2024-2199\n- VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)\n- VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277)\n- 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912)\n","status":"published","published":"2024-10-31T08:50:06Z","modified":"2026-02-04T02:23:12.871506Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3844-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)\n- Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)\n- Update to version 2.2.10~git18.20ce9289:\n  * RFE: Use previously extracted key path\n  * Update dsidm to prioritize basedn from .dsrc over interactive input\n  * UI: Instance fails to load when DB backup directory doesn't exist\n  * Improve online import robustness when the server is under load\n  * Ensure all slapi_log_err calls end format strings with newline character \\n\n  * RFE: when memberof is enabled, defer updates of members from the update of the group\n  * Provide more information in the error message during setup_ol_tls_conn()\n  * Wrong set of entries returned for some search filters\n  * Schema lib389 object is not keeping custom schema data upon editing\n  * UI: Fix audit issue with npm - micromatch\n  * Fix long delay when setting replication agreement with dsconf\n  * Changelog trims updates from a given RID even if a consumer has not received any of them\n  * test_password_modify_non_utf8 should set default password storage scheme\n  * Update Cargo.lock\n  * Rearrange includes for 32-bit support logic\n  * Fix fedora cop RawHide builds\n  * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console\n  * Enabling replication for a sub suffix crashes browser\n  * d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes\n  * Slow ldif2db import on a newly created BDB backend\n  * Audit log buffering doesn't handle large updates\n  * RFE: improve the performance of evaluation of filter component when tested against a large valueset (like group members)\n  * passwordHistory is not updated with a pre-hashed password\n  * ns-slapd crash in referint_get_config\n  * Fix the UTC offset print\n  * Fix OpenLDAP version autodetection\n  * RFE: add new operation note for MFA authentications\n  * Add log buffering to audit log\n  * Fix connection timeout error breaking errormap\n  * Improve dsidm CLI No Such Entry handling\n  * Improve connection timeout error logging\n  * Add hidden -v and -j options to each CLI subcommand\n  * Fix various issues with logconv.pl\n  * Fix certificate lifetime displayed as NaN\n  * Enhance Rust and JS bundling and add SPDX licenses for both\n  * Remove audit-ci from dependencies\n  * Fix unused variable warning from previous commit\n  * covscan: fix memory leak in audit log when adding entries\n  * Add a check for tagged commits\n  * dscreate ds-root - accepts relative path\n  * Change replica_id from str to int\n  * Attribute Names changed to lowercase after adding the Attributes\n  * ns-slapd crashes at startup if a backend has no suffix\n  * During an update, if the target entry is reverted in the entry cache, the server should not retry to lock it\n  * Reversion of the entry cache should be limited to BETXN plugin failures\n  * Disable Transparent Huge Pages\n  * Freelist ordering causes high wtime\n  * Security fix for CVE-2024-2199\n- VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512)\n- VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277)\n- 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912)\n","status":"published","published":"2024-10-31T08:50:21Z","modified":"2026-02-04T02:41:29.316117Z","updated_at":"2026-11-02T15:53:55.639015Z"}]}}