Summary
[1.4.3.8-7]
- Bump version to 1.4.3.8-7
- Resolves: Bug 1908705 - CVE-2020-35518 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN
- Resolves: Bug 1936461 - A failed re-indexing leaves the database in broken state.
- Resolves: Bug 1912481 - Server-Cert.crt created using dscreate has Subject:CN =localhost instead of hostname.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | 389-ds-base | 0:1.4.3.8-7.module+el8.3.0+20006+53cafd96 |
| Oracle Linux · 8 | 389-ds-base-devel | 0:1.4.3.8-7.module+el8.3.0+20006+53cafd96 |
| Oracle Linux · 8 | 389-ds-base-legacy-tools | 0:1.4.3.8-7.module+el8.3.0+20006+53cafd96 |
| Oracle Linux · 8 | 389-ds-base-libs | 0:1.4.3.8-7.module+el8.3.0+20006+53cafd96 |
| Oracle Linux · 8 | 389-ds-base-snmp | 0:1.4.3.8-7.module+el8.3.0+20006+53cafd96 |
| Oracle Linux · 8 | python3-lib389 | 0:1.4.3.8-7.module+el8.3.0+20006+53cafd96 |
Vulnerabilities 1
-
Unscored —
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or …