ELSA-2021-3807

ELSA-2021-3807 - 389-ds-base security and bug fix update

Type:	SECURITY
Impact:	LOW
Release Date:	2021-10-13

Description

[1.3.10.2-13]
- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule

Related CVEs

CVE-2021-3652

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	389-ds-base-1.3.10.2-13.el7_9.src.rpm	7c33c4a1765bafaef1031d59147b48f58fe0c37877b09a02e4ebf5f2260ce269	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-1.3.10.2-13.el7_9.src.rpm	7c33c4a1765bafaef1031d59147b48f58fe0c37877b09a02e4ebf5f2260ce269	ELSA-2024-7434	ol7_aarch64_optional_latest
	389-ds-base-1.3.10.2-13.el7_9.src.rpm	7c33c4a1765bafaef1031d59147b48f58fe0c37877b09a02e4ebf5f2260ce269	ELSA-2024-7434	ol7_aarch64_u9_patch
	389-ds-base-1.3.10.2-13.el7_9.aarch64.rpm	e133fdaa14bd6225c919ddd7bfc5359b8a829ccecdd002c410018e85d210bea4	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-1.3.10.2-13.el7_9.aarch64.rpm	e133fdaa14bd6225c919ddd7bfc5359b8a829ccecdd002c410018e85d210bea4	ELSA-2024-7434	ol7_aarch64_u9_patch
	389-ds-base-devel-1.3.10.2-13.el7_9.aarch64.rpm	4a07704138c1b55b27867e30fe72a39737c20f1c4dd8525f3f8ae5b14818107d	ELSA-2024-7434	ol7_aarch64_optional_latest
	389-ds-base-libs-1.3.10.2-13.el7_9.aarch64.rpm	2b3b5a4bb74b2baccaecac89fd8dd8b2c60f837e9eecc96bc228e5e707566e06	ELSA-2024-7434	ol7_aarch64_latest
	389-ds-base-libs-1.3.10.2-13.el7_9.aarch64.rpm	2b3b5a4bb74b2baccaecac89fd8dd8b2c60f837e9eecc96bc228e5e707566e06	ELSA-2024-7434	ol7_aarch64_u9_patch
	389-ds-base-snmp-1.3.10.2-13.el7_9.aarch64.rpm	907331d0bf7ada4f541f89b5f41adeb54c0d37352b45499c03e4bd11e46bda0f	ELSA-2024-7434	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	389-ds-base-1.3.10.2-13.el7_9.src.rpm	7c33c4a1765bafaef1031d59147b48f58fe0c37877b09a02e4ebf5f2260ce269	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-1.3.10.2-13.el7_9.src.rpm	7c33c4a1765bafaef1031d59147b48f58fe0c37877b09a02e4ebf5f2260ce269	ELSA-2024-7434	ol7_x86_64_optional_latest
	389-ds-base-1.3.10.2-13.el7_9.src.rpm	7c33c4a1765bafaef1031d59147b48f58fe0c37877b09a02e4ebf5f2260ce269	ELSA-2024-7434	ol7_x86_64_u9_patch
	389-ds-base-1.3.10.2-13.el7_9.x86_64.rpm	c7bc8d9734ee0acd82ad0c26d08cd4930e09f7d2c375af8036cc5e30baf55b4b	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-1.3.10.2-13.el7_9.x86_64.rpm	c7bc8d9734ee0acd82ad0c26d08cd4930e09f7d2c375af8036cc5e30baf55b4b	ELSA-2024-7434	ol7_x86_64_u9_patch
	389-ds-base-devel-1.3.10.2-13.el7_9.x86_64.rpm	c24a6b9d2fa78022e43af0858989828d06ec1024371a94ec9e5d74f7e7784a44	ELSA-2024-7434	ol7_x86_64_optional_latest
	389-ds-base-libs-1.3.10.2-13.el7_9.x86_64.rpm	cc98f76d85baa54d4e9d8c0e70c0965c7be93e6fddc7f13cfad23cb03a66e0a6	ELSA-2024-7434	ol7_x86_64_latest
	389-ds-base-libs-1.3.10.2-13.el7_9.x86_64.rpm	cc98f76d85baa54d4e9d8c0e70c0965c7be93e6fddc7f13cfad23cb03a66e0a6	ELSA-2024-7434	ol7_x86_64_u9_patch
	389-ds-base-snmp-1.3.10.2-13.el7_9.x86_64.rpm	660839752333567cb8b829729e63f4304b77770cff93c4b1b4d9f336b2795bab	ELSA-2024-7434	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team