ELSA-2018-0515

ELSA-2018-0515 - 389-ds-base security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-03-13

Description

[1.2.11-15-94]
- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)

[1.2.11-15-93]
- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c

[1.2.11-15-92]
- Release 1.2.11.15-92
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c

Related CVEs

CVE-2018-1054

CVE-2017-15135

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	389-ds-base-1.2.11.15-94.el6_9.src.rpm	8e15a37968956f8bf2d176151b177322eea68b32a382567ca5b7c20fa35f7128	ELBA-2018-2407	ol6_i386_latest
	389-ds-base-1.2.11.15-94.el6_9.src.rpm	8e15a37968956f8bf2d176151b177322eea68b32a382567ca5b7c20fa35f7128	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-1.2.11.15-94.el6_9.src.rpm	8e15a37968956f8bf2d176151b177322eea68b32a382567ca5b7c20fa35f7128	ELBA-2018-2407	ol6_u9_i386_patch
	389-ds-base-1.2.11.15-94.el6_9.i686.rpm	525dfac1351639109556686f287491f7de2f3b26dfcb8e2cfece44bb24d2cede	ELBA-2018-2407	ol6_i386_latest
	389-ds-base-1.2.11.15-94.el6_9.i686.rpm	525dfac1351639109556686f287491f7de2f3b26dfcb8e2cfece44bb24d2cede	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-1.2.11.15-94.el6_9.i686.rpm	525dfac1351639109556686f287491f7de2f3b26dfcb8e2cfece44bb24d2cede	ELBA-2018-2407	ol6_u9_i386_patch
	389-ds-base-devel-1.2.11.15-94.el6_9.i686.rpm	8406b94c993a6e220da6e4167467be9d8e6da04bbcd5b32c0efa18c6586fd719	ELBA-2018-2407	ol6_i386_latest
	389-ds-base-devel-1.2.11.15-94.el6_9.i686.rpm	8406b94c993a6e220da6e4167467be9d8e6da04bbcd5b32c0efa18c6586fd719	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-devel-1.2.11.15-94.el6_9.i686.rpm	8406b94c993a6e220da6e4167467be9d8e6da04bbcd5b32c0efa18c6586fd719	ELBA-2018-2407	ol6_u9_i386_patch
	389-ds-base-libs-1.2.11.15-94.el6_9.i686.rpm	4cb9c4efa228add24a492b78746f49a5a7959b65327153c86da0d4f64b24cd55	ELBA-2018-2407	ol6_i386_latest
	389-ds-base-libs-1.2.11.15-94.el6_9.i686.rpm	4cb9c4efa228add24a492b78746f49a5a7959b65327153c86da0d4f64b24cd55	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-libs-1.2.11.15-94.el6_9.i686.rpm	4cb9c4efa228add24a492b78746f49a5a7959b65327153c86da0d4f64b24cd55	ELBA-2018-2407	ol6_u9_i386_patch
Oracle Linux 6 (x86_64)	389-ds-base-1.2.11.15-94.el6_9.src.rpm	8e15a37968956f8bf2d176151b177322eea68b32a382567ca5b7c20fa35f7128	ELBA-2018-2407	ol6_u9_x86_64_patch
	389-ds-base-1.2.11.15-94.el6_9.src.rpm	8e15a37968956f8bf2d176151b177322eea68b32a382567ca5b7c20fa35f7128	ELBA-2018-2407	ol6_x86_64_latest
	389-ds-base-1.2.11.15-94.el6_9.x86_64.rpm	5e789eaf59a135904ccebded58c96ae84ec3510458a74ae51d8e585f18871cec	ELBA-2018-2407	ol6_u9_x86_64_patch
	389-ds-base-1.2.11.15-94.el6_9.x86_64.rpm	5e789eaf59a135904ccebded58c96ae84ec3510458a74ae51d8e585f18871cec	ELBA-2018-2407	ol6_x86_64_latest
	389-ds-base-devel-1.2.11.15-94.el6_9.i686.rpm	8406b94c993a6e220da6e4167467be9d8e6da04bbcd5b32c0efa18c6586fd719	ELBA-2018-2407	ol6_u9_x86_64_patch
	389-ds-base-devel-1.2.11.15-94.el6_9.i686.rpm	8406b94c993a6e220da6e4167467be9d8e6da04bbcd5b32c0efa18c6586fd719	ELBA-2018-2407	ol6_x86_64_latest
	389-ds-base-devel-1.2.11.15-94.el6_9.x86_64.rpm	c126f833e18d4f0d07c40ba4a5b5e32d1e12aaf360085c94a22d6b003237d39b	ELBA-2018-2407	ol6_u9_x86_64_patch
	389-ds-base-devel-1.2.11.15-94.el6_9.x86_64.rpm	c126f833e18d4f0d07c40ba4a5b5e32d1e12aaf360085c94a22d6b003237d39b	ELBA-2018-2407	ol6_x86_64_latest
	389-ds-base-libs-1.2.11.15-94.el6_9.i686.rpm	4cb9c4efa228add24a492b78746f49a5a7959b65327153c86da0d4f64b24cd55	ELBA-2018-2407	ol6_u9_x86_64_patch
	389-ds-base-libs-1.2.11.15-94.el6_9.i686.rpm	4cb9c4efa228add24a492b78746f49a5a7959b65327153c86da0d4f64b24cd55	ELBA-2018-2407	ol6_x86_64_latest
	389-ds-base-libs-1.2.11.15-94.el6_9.x86_64.rpm	57cfa810ee0c54130c704d5b11e04b9daa39041373eeafaa66daca80c719346e	ELBA-2018-2407	ol6_u9_x86_64_patch
	389-ds-base-libs-1.2.11.15-94.el6_9.x86_64.rpm	57cfa810ee0c54130c704d5b11e04b9daa39041373eeafaa66daca80c719346e	ELBA-2018-2407	ol6_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team