ELSA-2019-3981

ELSA-2019-3981 - 389-ds-base security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-11-27

Description

[1.3.9.1-12]
- Bump version to 1.3.9.1-12
- Resolves: Bug 1767622 - CleanAllRUV task limit not enforced

[1.3.9.1-11]
- Bump version to 1.3.9.1-11
- Resolves: Bug 1748198 - EMBARGOED CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin
- Resolves: Bug 1754831 - After audit log file is rotated, DS version string is logged after each update
- Resolves: Bug 1763622 - Extremely slow LDIF import with ldif2db
- Resolves: Bug 1763627 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
- Resolves: Bug 1749289 - DB Deadlock on modrdn appears to corrupt database and entry cache

Related CVEs

CVE-2019-14824

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	389-ds-base-1.3.9.1-12.el7_7.src.rpm	d5a305b86e38440f155f99dcd0aeb686ff148b9df6c1c02334551d48f2212ead	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-1.3.9.1-12.el7_7.src.rpm	d5a305b86e38440f155f99dcd0aeb686ff148b9df6c1c02334551d48f2212ead	ELSA-2024-7434	ol7_aarch64_optional_latest
	389-ds-base-1.3.9.1-12.el7_7.src.rpm	d5a305b86e38440f155f99dcd0aeb686ff148b9df6c1c02334551d48f2212ead	ELSA-2024-7434	ol7_aarch64_u7_patch
	389-ds-base-1.3.9.1-12.el7_7.aarch64.rpm	bc9232fb9372dbd2b28490cbb1d09b36769e242ad7646070e3184c70cea94c2b	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-1.3.9.1-12.el7_7.aarch64.rpm	bc9232fb9372dbd2b28490cbb1d09b36769e242ad7646070e3184c70cea94c2b	ELSA-2024-7434	ol7_aarch64_u7_patch
	389-ds-base-devel-1.3.9.1-12.el7_7.aarch64.rpm	f7f3185cd338df3a0757d3e8274e547490a389afb7991dc08e1973ef127f7bd3	ELSA-2024-7434	ol7_aarch64_optional_latest
	389-ds-base-libs-1.3.9.1-12.el7_7.aarch64.rpm	346b4b1c2562cad533978b3b191577f4d12cc4ac76132f90eba67f46b84dd8fe	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-libs-1.3.9.1-12.el7_7.aarch64.rpm	346b4b1c2562cad533978b3b191577f4d12cc4ac76132f90eba67f46b84dd8fe	ELSA-2024-7434	ol7_aarch64_u7_patch
	389-ds-base-snmp-1.3.9.1-12.el7_7.aarch64.rpm	8df428295cb0c0d88d1814afa16ddfbfc6542ab802eed18a217a8bea2f59d044	ELSA-2024-7434	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	389-ds-base-1.3.9.1-12.el7_7.src.rpm	d5a305b86e38440f155f99dcd0aeb686ff148b9df6c1c02334551d48f2212ead	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-1.3.9.1-12.el7_7.src.rpm	d5a305b86e38440f155f99dcd0aeb686ff148b9df6c1c02334551d48f2212ead	ELSA-2024-7434	ol7_x86_64_optional_latest
	389-ds-base-1.3.9.1-12.el7_7.src.rpm	d5a305b86e38440f155f99dcd0aeb686ff148b9df6c1c02334551d48f2212ead	ELSA-2024-7434	ol7_x86_64_u7_patch
	389-ds-base-1.3.9.1-12.el7_7.x86_64.rpm	95eeed7bc7712966d06c216f16e8cee5abfdd44e24a90350ba2031ff57a195cf	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-1.3.9.1-12.el7_7.x86_64.rpm	95eeed7bc7712966d06c216f16e8cee5abfdd44e24a90350ba2031ff57a195cf	ELSA-2024-7434	ol7_x86_64_u7_patch
	389-ds-base-devel-1.3.9.1-12.el7_7.x86_64.rpm	7a12cb8cfbd0e4808b88502b2edf3fbd0b5c66248050cd8638b0bf8ce207f57d	ELSA-2024-7434	ol7_x86_64_optional_latest
	389-ds-base-libs-1.3.9.1-12.el7_7.x86_64.rpm	344084035f5ef516464b3b4ac21b0bb75377100c425349b41b6b8e2d76d25cae	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-libs-1.3.9.1-12.el7_7.x86_64.rpm	344084035f5ef516464b3b4ac21b0bb75377100c425349b41b6b8e2d76d25cae	ELSA-2024-7434	ol7_x86_64_u7_patch
	389-ds-base-snmp-1.3.9.1-12.el7_7.x86_64.rpm	ef9b410b5da317d9affea143019e354451c7f1c43afb976466e9b5857dbead27	ELSA-2024-7434	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team