ELSA-2016-2765

ELSA-2016-2765 - 389-ds-base security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2016-11-15

Description

[1.2.11.15-84]
- Release 1.2.11.15-84
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)

[1.2.11.15-83]
- Release 1.2.11.15-83
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)

[1.2.11.15-82]
- Release 1.2.11.15-82
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)

[1.2.11.15-81]
- Release 1.2.11.15-81
- Resolves: #Bug 1381153 - Crash in import_wait_for_space_in_fifo(). (DS 48960)

[1.2.11.15-80]
- Release 1.2.11.15-80
- Resolves: #1379599 - ns-slapd general protection ip:7f570c56afd5 sp:7f56dc7edce0 error:0 in libc-2.12.so (DS 48944)

[1.2.11.15-79]
- Release 1.2.11.15-79
- Resolves: #1358559 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462, 48862, 48243, 48777)
- Resolves: #1354331 - Replication changelog can incorrectly skip over updates
- Resolves: #1374588 - EASY FIX : dereferencing a NULL sr_candidates pointer in ldbm_back_next_search_entry_ext resulted a segfault (DS 47858)

[1.2.11.15-78]
- Release 1.2.11.15-78
- Resolves: #1354331 - Replication changelog can incorrectly skip over updates (DS 48954)
- Resolves: #1361421 - CVE-2016-5416 389-ds-base: ACI readable by anonymous user (DS 48354)
- Resolves: #1360974 - CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack

[1.2.11.15-77]
- Release 1.2.11.15-77
- Resolves: #1358390 - replication delay when server is configured with multiple replication agreements. (DS 48636)
fixing a backport error

[1.2.11.15-76]
- Release 1.2.11.15-76
- Resolves: #1354331 - Replication changelog can incorrectly skip over updates (DS 48766)
- Resolves: #1358390 - replication delay when server is configured with multiple replication agreements. (DS 48636)

Related CVEs

CVE-2016-5416

CVE-2016-5405

CVE-2016-4992

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	389-ds-base-1.2.11.15-84.el6_8.src.rpm	73ed5c86b42882b046b17d91232c87cf92c7f926984bdf9461d3ab2ca380d498	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-1.2.11.15-84.el6_8.src.rpm	73ed5c86b42882b046b17d91232c87cf92c7f926984bdf9461d3ab2ca380d498	ELBA-2018-2407	ol6_u8_i386_patch
	389-ds-base-1.2.11.15-84.el6_8.i686.rpm	5021dcbf935c371866df532707484b3d85f33f60ff2e05f9712c0257ea7d7215	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-1.2.11.15-84.el6_8.i686.rpm	5021dcbf935c371866df532707484b3d85f33f60ff2e05f9712c0257ea7d7215	ELBA-2018-2407	ol6_u8_i386_patch
	389-ds-base-devel-1.2.11.15-84.el6_8.i686.rpm	f296f14d45579ee62ecc84c427f7d44e358db5ae82a8a51c43e52936150abf35	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-devel-1.2.11.15-84.el6_8.i686.rpm	f296f14d45579ee62ecc84c427f7d44e358db5ae82a8a51c43e52936150abf35	ELBA-2018-2407	ol6_u8_i386_patch
	389-ds-base-libs-1.2.11.15-84.el6_8.i686.rpm	2ae2c088e833768b7e4433bbcb752757ef6a10740238f87d1ab42d04c761ba23	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-libs-1.2.11.15-84.el6_8.i686.rpm	2ae2c088e833768b7e4433bbcb752757ef6a10740238f87d1ab42d04c761ba23	ELBA-2018-2407	ol6_u8_i386_patch
Oracle Linux 6 (x86_64)	389-ds-base-1.2.11.15-84.el6_8.src.rpm	73ed5c86b42882b046b17d91232c87cf92c7f926984bdf9461d3ab2ca380d498	ELBA-2018-2407	ol6_u8_x86_64_patch
	389-ds-base-1.2.11.15-84.el6_8.src.rpm	73ed5c86b42882b046b17d91232c87cf92c7f926984bdf9461d3ab2ca380d498	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-1.2.11.15-84.el6_8.x86_64.rpm	d83e91cc5e207ac515b6f7d3741fbb737aad590eb8507562063abc3192148d43	ELBA-2018-2407	ol6_u8_x86_64_patch
	389-ds-base-1.2.11.15-84.el6_8.x86_64.rpm	d83e91cc5e207ac515b6f7d3741fbb737aad590eb8507562063abc3192148d43	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-devel-1.2.11.15-84.el6_8.i686.rpm	f296f14d45579ee62ecc84c427f7d44e358db5ae82a8a51c43e52936150abf35	ELBA-2018-2407	ol6_u8_x86_64_patch
	389-ds-base-devel-1.2.11.15-84.el6_8.i686.rpm	f296f14d45579ee62ecc84c427f7d44e358db5ae82a8a51c43e52936150abf35	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-devel-1.2.11.15-84.el6_8.x86_64.rpm	112a4293d20334aaa1db23d60b8affbd90c9b52b703161783b55eead2085324a	ELBA-2018-2407	ol6_u8_x86_64_patch
	389-ds-base-devel-1.2.11.15-84.el6_8.x86_64.rpm	112a4293d20334aaa1db23d60b8affbd90c9b52b703161783b55eead2085324a	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-libs-1.2.11.15-84.el6_8.i686.rpm	2ae2c088e833768b7e4433bbcb752757ef6a10740238f87d1ab42d04c761ba23	ELBA-2018-2407	ol6_u8_x86_64_patch
	389-ds-base-libs-1.2.11.15-84.el6_8.i686.rpm	2ae2c088e833768b7e4433bbcb752757ef6a10740238f87d1ab42d04c761ba23	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-libs-1.2.11.15-84.el6_8.x86_64.rpm	c961553c6da9e0cc2ed8778709479b04c812be9e64569b234cf4de477650ec0d	ELBA-2018-2407	ol6_u8_x86_64_patch
	389-ds-base-libs-1.2.11.15-84.el6_8.x86_64.rpm	c961553c6da9e0cc2ed8778709479b04c812be9e64569b234cf4de477650ec0d	ELBA-2018-2407	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team