OpenLDAP 2.3.39 Release Advisory: Security Fixes and Bug Patches

Key vulnerability information extracted from the webpage screenshot: Vulnerability Fixes: - This page is a release announcement for OpenLDAP version 2.3.39, which includes fixes for several issues and vulnerabilities. - Specific vulnerabilities and issues fixed: - slapd database/overlay config conflict (ITS#4848): Configuration conflict issue. - slapd password hash config order (ITS#5082): Password hash configuration order issue. - slapd slap mods check bug (ITS#5119): Module check bug. - slapd sets memory handling (ITS#4860, ITS#4873): Memory handling issues. - slapd ordered values add normalization issue (ITS#5136): Ordered values and normalization issue. - slapd-bdb DB_CONFIG conversion bug (ITS#5118): Database configuration conversion bug. - slapd-ldap search control parsing (ITS#5138): Search control parsing issue. - slapd-ldap SASL idassert w/o authcId: SASL authentication issue. - slapd-ldif directory separators in DN (ITS#5172): LDIF directory separator issue. - slapd-meta conn caching on bind failure (ITS#5154): Connection caching issue. - slapd-meta bind timeout assertion (ITS#5185): Bind timeout assertion. - slapd-sql concurrency issue (ITS#5095): Concurrency issue. - slapd-chain double-free (ITS#5137): Double-free issue. - slapd-pcache and -rwm interaction fix (ITS#4991): Cache and rwm interaction fix. - slapd-pcache non-null terminated array crasher (ITS#5163): Non-null terminated array crash. - slapd-rwm modlist handling (ITS#5124): Modlist handling issue. - slapd-rwm UUID in filter (ITS#5168): UUID in filter issue. - sasl SASL SSF EXTERNAL type (ITS#3864): SASL type issue. - liblber Windows x64 portability (ITS#5105): Windows x64 portability issue. - libldap ppolicy control creation (ITS#5103): Ppolicy control creation issue. Release Information: - This version is a maintenance release, and all OpenLDAP users are advised to upgrade. Summary: OpenLDAP 2.3.39 addresses multiple potential vulnerabilities and functional issues. For users of OpenLDAP systems, upgrading to this version promptly is crucial to ensure system stability and security.

Goal Reached Thanks to every supporter — we hit 100%!

OpenLDAP 2.3.39 Release Advisory: Security Fixes and Bug Patches