ELSA-2012-0997

ELSA-2012-0997 - 389-ds-base security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2012-06-29

Description

[1.2.10.2-18]
- Resolves: Bug 830001 - unhashed#user#password visible after changing password
-- patch 0020 disallows users' direct modify on unhashed#user#password

[1.2.10.2-17]
- Resolves: Bug 830001 - unhashed#user#password visible after changing password
-- patch 0019 fixes deref issue.

[1.2.10.2-16]
- Resolves: Bug 830001 - unhashed#user#password visible after changing password
- Resolves: Bug 830256 - Audit log - clear text password in user changes

Related CVEs

CVE-2012-2678

CVE-2012-2746

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	389-ds-base-1.2.10.2-18.el6_3.src.rpm	bcc7f59faf2ff523f130d9a4e92f4f37	ELBA-2018-2407
	389-ds-base-1.2.10.2-18.el6_3.i686.rpm	f6a7ec126feed97aad9508fa59f6977d	ELBA-2018-2407
	389-ds-base-devel-1.2.10.2-18.el6_3.i686.rpm	9e41cb4a22ac86a36aedeca3857f5578	ELBA-2018-2407
	389-ds-base-libs-1.2.10.2-18.el6_3.i686.rpm	15f9e283266a77fcae1521b7a0074e7f	ELBA-2018-2407
Oracle Linux 6 (x86_64)	389-ds-base-1.2.10.2-18.el6_3.src.rpm	bcc7f59faf2ff523f130d9a4e92f4f37	ELBA-2018-2407
	389-ds-base-1.2.10.2-18.el6_3.x86_64.rpm	9ed0a5ed3aa5d12c5b82e81c21183617	ELBA-2018-2407
	389-ds-base-devel-1.2.10.2-18.el6_3.i686.rpm	9e41cb4a22ac86a36aedeca3857f5578	ELBA-2018-2407
	389-ds-base-devel-1.2.10.2-18.el6_3.x86_64.rpm	7f313d77b1e69876ffffa9d7b2422f35	ELBA-2018-2407
	389-ds-base-libs-1.2.10.2-18.el6_3.i686.rpm	15f9e283266a77fcae1521b7a0074e7f	ELBA-2018-2407
	389-ds-base-libs-1.2.10.2-18.el6_3.x86_64.rpm	a34ec72678e05ad5d2742f30a5d82cee	ELBA-2018-2407

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team