ELSA-2018-2757

ELSA-2018-2757 - 389-ds-base security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2018-09-25

Description

[1.3.7.5-28]
- Bump version to 1.3.7.5-28
- Resolves: Bug 1628676 - 389-ds-base: race condition on reference counter leads to DoS using persistent search
- Resolves: Bug 1628677 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly

[1.3.7.5-27]
- Bump version to 1.3.7.5-27
- Resolves: Bug 1623247 - Crash in vslapd_log_emergency_error

[1.3.7.5-26]
- Bump version to 1.3.7.5-26
- Resolves: Bug 1615924 - Fine grained password policy can impact search performance
- Resolves: Bug 1614836 - Disable nunc-stans by default
- Resolves: Bug 1614861 - ldapsearch with server side sort crashes the ldap server

Related CVEs

CVE-2018-10935

CVE-2018-14638

CVE-2018-10850

CVE-2018-14624

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	389-ds-base-1.3.7.5-28.el7_5.src.rpm	b334c480dc4bc527061e8562a34fd84e6568ebaaea1d33d33053dcd18a4b52b4	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-1.3.7.5-28.el7_5.src.rpm	b334c480dc4bc527061e8562a34fd84e6568ebaaea1d33d33053dcd18a4b52b4	ELSA-2024-7434	ol7_aarch64_optional_latest
	389-ds-base-1.3.7.5-28.el7_5.aarch64.rpm	34ea2fd9bec09db25a66f670ab01158c6a53a4488b0cc41dc225b161fed06997	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-devel-1.3.7.5-28.el7_5.aarch64.rpm	066ac8ac2abc433e5fa0f659c9a9f1e0d002bb9de3a106eea1055d50caf0dc2f	ELSA-2024-7434	ol7_aarch64_optional_latest
	389-ds-base-libs-1.3.7.5-28.el7_5.aarch64.rpm	b47c4c23deaa15e00c95469417c68ed4bad24e29f9dbfbfe63ec2c4d211123fa	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-snmp-1.3.7.5-28.el7_5.aarch64.rpm	2dac2121549e6eeedfa26efabdfe6e59dee1af209ad82d0c058785378e57d96c	ELSA-2024-7434	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	389-ds-base-1.3.7.5-28.el7_5.src.rpm	b334c480dc4bc527061e8562a34fd84e6568ebaaea1d33d33053dcd18a4b52b4	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-1.3.7.5-28.el7_5.src.rpm	b334c480dc4bc527061e8562a34fd84e6568ebaaea1d33d33053dcd18a4b52b4	ELSA-2024-7434	ol7_x86_64_optional_latest
	389-ds-base-1.3.7.5-28.el7_5.src.rpm	b334c480dc4bc527061e8562a34fd84e6568ebaaea1d33d33053dcd18a4b52b4	ELSA-2024-7434	ol7_x86_64_u5_patch
	389-ds-base-1.3.7.5-28.el7_5.x86_64.rpm	b00283a7b49bd21367554e6632e94a7466a4a8f93155e83a93892a5086b2b187	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-1.3.7.5-28.el7_5.x86_64.rpm	b00283a7b49bd21367554e6632e94a7466a4a8f93155e83a93892a5086b2b187	ELSA-2024-7434	ol7_x86_64_u5_patch
	389-ds-base-devel-1.3.7.5-28.el7_5.x86_64.rpm	35871c5d14f87af9eec7173273984e45fdf293d5c30e11364e95af29071a5b23	ELSA-2024-7434	ol7_x86_64_optional_latest
	389-ds-base-libs-1.3.7.5-28.el7_5.x86_64.rpm	dddc53450cd3dcf6b31d6e539a9d2567a91faeee3e40eb46d23cb1420518c24e	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-libs-1.3.7.5-28.el7_5.x86_64.rpm	dddc53450cd3dcf6b31d6e539a9d2567a91faeee3e40eb46d23cb1420518c24e	ELSA-2024-7434	ol7_x86_64_u5_patch
	389-ds-base-snmp-1.3.7.5-28.el7_5.x86_64.rpm	3716de7a8e3ca10cf845495e733246799751fd4e50ce73b9b189e3e6f23f14ce	ELSA-2024-7434	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team