The 389 Directory Server project has released version 1.4.2.4. Changes in this release include:

• A fix for a security vulnerability that could potentially allow inappropriate access to certain attribute values (CVE-2019-14824).
• A fix for an issue that could potentially cause a crash when closing a database.
• A fix for an issue in the restore task that could prevent it from reporting an error if the restore failed.
• A fix for an issue in the restore task that could prevent it from reporting an error if the restore failed.
• A fix for an issue that caused the server version string to be repeatedly written to the audit log after it is rotated.
• Add disk monitoring support.
• Update the default ACIs to allow users to change their own passwords.
• Improve handling of X.509 certificates in the dsctl tool.
• Address UI-related issues.