ELSA-2017-0920

ELSA-2017-0920 - 389-ds-base security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2017-04-12

Description

[1.3.5.10-20]
- Bump version to 1.3.5.10-20
- Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages

[1.3.5.10-19]
- Release 1.3.5.10-19
- Resolves: bug 1429495 - ns-slapd dies under heavy load
- Resolves: bug 1429498 - A filtered nsrole that specifies an empty nsrole in its nsRoleFilter will result in a segfault

Related CVEs

CVE-2017-2668

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	389-ds-base-1.3.5.10-20.el7_3.src.rpm	03fe52d20e0ce4a2d96840bd3d2e59dcd35c42c38dfc942fc91c639d9f25f2fc	ELSA-2024-7434	ol7_x86_64_latest_archive
	389-ds-base-1.3.5.10-20.el7_3.src.rpm	03fe52d20e0ce4a2d96840bd3d2e59dcd35c42c38dfc942fc91c639d9f25f2fc	ELSA-2024-7434	ol7_x86_64_optional_archive
	389-ds-base-1.3.5.10-20.el7_3.src.rpm	03fe52d20e0ce4a2d96840bd3d2e59dcd35c42c38dfc942fc91c639d9f25f2fc	ELSA-2024-7434	ol7_x86_64_u3_patch
	389-ds-base-1.3.5.10-20.el7_3.x86_64.rpm	878e7ed098118c8fead3c846c94c88a21aba03356edb9b347754ae0454f7c582	ELSA-2024-7434	ol7_x86_64_latest_archive
	389-ds-base-1.3.5.10-20.el7_3.x86_64.rpm	878e7ed098118c8fead3c846c94c88a21aba03356edb9b347754ae0454f7c582	ELSA-2024-7434	ol7_x86_64_u3_patch
	389-ds-base-devel-1.3.5.10-20.el7_3.x86_64.rpm	557bf261fa27dbe0301b7c35ab4af8cac5f6b7d93f4f7af31d89751a4d175c51	ELSA-2024-7434	ol7_x86_64_optional_archive
	389-ds-base-libs-1.3.5.10-20.el7_3.x86_64.rpm	253668f917b4761d366d99bb70a88bdb9140328ec7b081f38d7c9b09319b77ad	ELSA-2024-7434	ol7_x86_64_latest_archive
	389-ds-base-libs-1.3.5.10-20.el7_3.x86_64.rpm	253668f917b4761d366d99bb70a88bdb9140328ec7b081f38d7c9b09319b77ad	ELSA-2024-7434	ol7_x86_64_u3_patch
	389-ds-base-snmp-1.3.5.10-20.el7_3.x86_64.rpm	a2a86944c36f694a7f12746c787d628dd9d51f2f31792c1867b79265a8b3bdf3	ELSA-2024-7434	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team