Summary
[1.3.6.1-28]
- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8
[1.3.6.1-27]
- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | 389-ds-base | 0:1.3.6.1-28.el7_4 |
| Oracle Linux · 7 | 389-ds-base-devel | 0:1.3.6.1-28.el7_4 |
| Oracle Linux · 7 | 389-ds-base-libs | 0:1.3.6.1-28.el7_4 |
| Oracle Linux · 7 | 389-ds-base-snmp | 0:1.3.6.1-28.el7_4 |
Vulnerabilities 2
-
Unscored —
It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison …
-
Unscored —
An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all v…