Summary
[1.3.5.10-20]
- Bump version to 1.3.5.10-20
- Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages
[1.3.5.10-19]
- Release 1.3.5.10-19
- Resolves: bug 1429495 - ns-slapd dies under heavy load
- Resolves: bug 1429498 - A filtered nsrole that specifies an empty nsrole in its nsRoleFilter will result in a segfault
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | 389-ds-base | 0:1.3.5.10-20.el7_3 |
| Oracle Linux · 7 | 389-ds-base-devel | 0:1.3.5.10-20.el7_3 |
| Oracle Linux · 7 | 389-ds-base-libs | 0:1.3.5.10-20.el7_3 |
| Oracle Linux · 7 | 389-ds-base-snmp | 0:1.3.5.10-20.el7_3 |
Vulnerabilities 1
-
Medium 6.5
389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind …