Skip to content
OpenAdvisories
Medium ELSA-2016-2594 3 CVEs

Moderate: 389-ds-base security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 9, 2016 · Updated Nov 9, 2016

Summary

[1.3.5.10-11]
- Release 1.3.5.10-11
- Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates

[1.3.5.10-10]
- Release 1.3.5.10-10
- Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
- Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)

[1.3.5.10-9]
- Release 1.3.5.10-9
- Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
- Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958)
- Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960)
- Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
- Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967)
- Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
- Resolves: bug 1369425 - ACI behaves erratically (DS 48972)
- Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
- Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)
- Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970)
- Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)

[1.3.5.10-8]
- Release 1.3.5.10-8
- Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954)
- Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
- Resolves: bug 1366561 - ns-accountstatus.pl giving error even 'No such object (32)' (DS 48956)

[1.3.5.10-7]
- Release 1.3.5.10-7
- Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
- Resolves: bug 1360976 - fixing a compiler warning

[1.3.5.10-6]
- Release 1.3.5.10-6
- Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928)
- Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939)
- Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934)
- Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940)
- Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 'hang' (DS 48882)
- Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack
- Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943)
- Resolves: bug 1361321 - Duplicate collation entries (DS 48936)
- Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
- Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat

[1.3.5.10-5]
- Release 1.3.5.10-5
- Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)

[1.3.5.10-4]
- Release 1.3.5.10-4
- Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
- Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)
- Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat
- Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767)
- Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924)
- Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922)
- Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916)
- Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)

[1.3.5.10-3]
- Release 1.3.5.10-3
- Resolves: bug 1354374 - Fixing the tarball version in the sources file.

[1.3.5.10-2]
- Release 1.3.5.10-2
- Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743)
- Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755)
- Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914)
- Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)

[1.3.5.10-1]
- Release 1.3.5.10-1
- Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)

[1.3.5.9-1]
- Release 1.3.5.9-1
- Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636)
- Resolves: bug 1304682 - 'stale' automember rule (associated to a removed group) causes discrepancies in the database (DS 48637)
- Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file '(bulk import)' (DS 48755)
- Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904)
- Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule (DS 48891)
- Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899)
- Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898)
- Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
- Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)

[1.3.5.8-1]
- Release 1.3.5.8-1
- Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366)

[1.3.5.7-1]
- Release 1.3.5.7-1
- Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
- Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
- Resolves: bug 1290101 - proxyauth support does not work when bound as directory manager (DS 48366)
- Resolves: bug 1338872 - Wrong result code displa

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 389-ds-base 0:1.3.5.10-11.el7
Oracle Linux · 7 389-ds-base-devel 0:1.3.5.10-11.el7
Oracle Linux · 7 389-ds-base-libs 0:1.3.5.10-11.el7
Oracle Linux · 7 389-ds-base-snmp 0:1.3.5.10-11.el7

Vulnerabilities 3