ELSA-2018-0414

ELSA-2018-0414 - 389-ds-base security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-03-07

Description

[1.3.6.1-28]
- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8

[1.3.6.1-27]
- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8

Related CVEs

CVE-2018-1054

CVE-2017-15135

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	389-ds-base-1.3.6.1-28.el7_4.src.rpm	a7cd9388b1371b4ae0c0eedd58de0014c3150f5bb35fc5fac1bd6fd8e522bb7a	ELSA-2024-7434	ol7_x86_64_latest_archive
	389-ds-base-1.3.6.1-28.el7_4.src.rpm	a7cd9388b1371b4ae0c0eedd58de0014c3150f5bb35fc5fac1bd6fd8e522bb7a	ELSA-2024-7434	ol7_x86_64_optional_archive
	389-ds-base-1.3.6.1-28.el7_4.src.rpm	a7cd9388b1371b4ae0c0eedd58de0014c3150f5bb35fc5fac1bd6fd8e522bb7a	ELSA-2024-7434	ol7_x86_64_u4_patch
	389-ds-base-1.3.6.1-28.el7_4.x86_64.rpm	8141094b0b6abbd4ec1afc20837a5891bbfb6800b5795ccd3e249a8aede58e5f	ELSA-2024-7434	ol7_x86_64_latest_archive
	389-ds-base-1.3.6.1-28.el7_4.x86_64.rpm	8141094b0b6abbd4ec1afc20837a5891bbfb6800b5795ccd3e249a8aede58e5f	ELSA-2024-7434	ol7_x86_64_u4_patch
	389-ds-base-devel-1.3.6.1-28.el7_4.x86_64.rpm	c428033a23fc146311e9e71efb714bfbc16ca701716af8a5369e4e72b84f71fd	ELSA-2024-7434	ol7_x86_64_optional_archive
	389-ds-base-libs-1.3.6.1-28.el7_4.x86_64.rpm	a7093dc13e1afd7044c921a40b9f2b875d5c8ddb852f82afb5ed24ffb808e776	ELSA-2024-7434	ol7_x86_64_latest_archive
	389-ds-base-libs-1.3.6.1-28.el7_4.x86_64.rpm	a7093dc13e1afd7044c921a40b9f2b875d5c8ddb852f82afb5ed24ffb808e776	ELSA-2024-7434	ol7_x86_64_u4_patch
	389-ds-base-snmp-1.3.6.1-28.el7_4.x86_64.rpm	78964f330c622744bfe118a38493d6847cedbd627a7fb3c22eb42db4e7940b88	ELSA-2024-7434	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team