ELSA-2012-0997

ELSA-2012-0997 - 389-ds-base security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2012-06-29

Description

[1.2.10.2-18]
- Resolves: Bug 830001 - unhashed#user#password visible after changing password
-- patch 0020 disallows users' direct modify on unhashed#user#password

[1.2.10.2-17]
- Resolves: Bug 830001 - unhashed#user#password visible after changing password
-- patch 0019 fixes deref issue.

[1.2.10.2-16]
- Resolves: Bug 830001 - unhashed#user#password visible after changing password
- Resolves: Bug 830256 - Audit log - clear text password in user changes

Related CVEs

CVE-2012-2678

CVE-2012-2746

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	389-ds-base-1.2.10.2-18.el6_3.src.rpm	386ce4e26f9287711c287bb4d31270c880b4128cc4a4f0d58f1980c473ae1c9f	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-1.2.10.2-18.el6_3.src.rpm	386ce4e26f9287711c287bb4d31270c880b4128cc4a4f0d58f1980c473ae1c9f	ELBA-2018-2407	ol6_u3_i386_patch
	389-ds-base-1.2.10.2-18.el6_3.i686.rpm	0e5457c513ed636616d8427e7aca7bac7db1d5197c4bbb36f8efe6254549276c	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-1.2.10.2-18.el6_3.i686.rpm	0e5457c513ed636616d8427e7aca7bac7db1d5197c4bbb36f8efe6254549276c	ELBA-2018-2407	ol6_u3_i386_patch
	389-ds-base-devel-1.2.10.2-18.el6_3.i686.rpm	203c5e1c0f2a864a968ce35ba8bcb722b5647a653c34decf4229e7844fae8463	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-devel-1.2.10.2-18.el6_3.i686.rpm	203c5e1c0f2a864a968ce35ba8bcb722b5647a653c34decf4229e7844fae8463	ELBA-2018-2407	ol6_u3_i386_patch
	389-ds-base-libs-1.2.10.2-18.el6_3.i686.rpm	d2b685884f4ff8bc4edf5838e7bb19e803d7d711891d30fd9c72351fffed18ef	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-libs-1.2.10.2-18.el6_3.i686.rpm	d2b685884f4ff8bc4edf5838e7bb19e803d7d711891d30fd9c72351fffed18ef	ELBA-2018-2407	ol6_u3_i386_patch
Oracle Linux 6 (x86_64)	389-ds-base-1.2.10.2-18.el6_3.src.rpm	386ce4e26f9287711c287bb4d31270c880b4128cc4a4f0d58f1980c473ae1c9f	ELBA-2018-2407	ol6_u3_x86_64_patch
	389-ds-base-1.2.10.2-18.el6_3.src.rpm	386ce4e26f9287711c287bb4d31270c880b4128cc4a4f0d58f1980c473ae1c9f	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-1.2.10.2-18.el6_3.x86_64.rpm	dfe09944f4bfd40fb7d44ae5322172ef5dc6e7419742e32860ff4400fdd4b1cc	ELBA-2018-2407	ol6_u3_x86_64_patch
	389-ds-base-1.2.10.2-18.el6_3.x86_64.rpm	dfe09944f4bfd40fb7d44ae5322172ef5dc6e7419742e32860ff4400fdd4b1cc	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-devel-1.2.10.2-18.el6_3.i686.rpm	203c5e1c0f2a864a968ce35ba8bcb722b5647a653c34decf4229e7844fae8463	ELBA-2018-2407	ol6_u3_x86_64_patch
	389-ds-base-devel-1.2.10.2-18.el6_3.i686.rpm	203c5e1c0f2a864a968ce35ba8bcb722b5647a653c34decf4229e7844fae8463	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-devel-1.2.10.2-18.el6_3.x86_64.rpm	c2538d451d571f3c2a87e835729263a95324d6d636284f71cb48ef1f6d9970d4	ELBA-2018-2407	ol6_u3_x86_64_patch
	389-ds-base-devel-1.2.10.2-18.el6_3.x86_64.rpm	c2538d451d571f3c2a87e835729263a95324d6d636284f71cb48ef1f6d9970d4	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-libs-1.2.10.2-18.el6_3.i686.rpm	d2b685884f4ff8bc4edf5838e7bb19e803d7d711891d30fd9c72351fffed18ef	ELBA-2018-2407	ol6_u3_x86_64_patch
	389-ds-base-libs-1.2.10.2-18.el6_3.i686.rpm	d2b685884f4ff8bc4edf5838e7bb19e803d7d711891d30fd9c72351fffed18ef	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-libs-1.2.10.2-18.el6_3.x86_64.rpm	869decee8067fc2e9d12e9578dc4519ca8e34e0d0a35d6f18f22b3ab49bfd4f3	ELBA-2018-2407	ol6_u3_x86_64_patch
	389-ds-base-libs-1.2.10.2-18.el6_3.x86_64.rpm	869decee8067fc2e9d12e9578dc4519ca8e34e0d0a35d6f18f22b3ab49bfd4f3	ELBA-2018-2407	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team