Summary
[1.3.7.5-21]
- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch
[1.3.7.5-20]
- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - 'Truncated search results' pop-up appears in user details in WebUI
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | 389-ds-base | 0:1.3.7.5-21.el7_5 |
| Oracle Linux · 7 | 389-ds-base-devel | 0:1.3.7.5-21.el7_5 |
| Oracle Linux · 7 | 389-ds-base-libs | 0:1.3.7.5-21.el7_5 |
| Oracle Linux · 7 | 389-ds-base-snmp | 0:1.3.7.5-21.el7_5 |
Vulnerabilities 1
-
High 7.5
389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters need…