Skip to content
OpenAdvisories
Low ELSA-2021-3079 1 CVE

Low: 389-ds:1.4 security and bug fix update (Oracle Linux 8)

Published Aug 12, 2021 · Updated Aug 12, 2021

Ecosystem: Oracle Linux

Summary

[1.4.3.16-19]
- Bump version to 1.4.3.16-19
- Resolve: Bug 1984091 - persistent search returns entries even when an error is returned by content-sync-plugin

[1.4.3.16-18]
- Bump version to 1.4.3.16-18
- Resolve: Bug 1983121 - CRYPT password hash with asterisk allows any bind attempt to succeed

[1.4.3.16-17]
- Bump version to 1.4.3.16-17
- Resolve: Bug 1983095 - Internal unindexed searches in syncrepl
- Resolve: Bug 1980063 - IPA installation fails on s390x with 389-ds-base-1.4.3.8-4.module+el8.3.0+7193+dfd1e8ad.s390x

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 8 389-ds-base 0:1.4.3.16-19.module+el8.4.0+20279+846fb4fe
Oracle Linux · 8 389-ds-base-devel 0:1.4.3.16-19.module+el8.4.0+20279+846fb4fe
Oracle Linux · 8 389-ds-base-legacy-tools 0:1.4.3.16-19.module+el8.4.0+20279+846fb4fe
Oracle Linux · 8 389-ds-base-libs 0:1.4.3.16-19.module+el8.4.0+20279+846fb4fe
Oracle Linux · 8 389-ds-base-snmp 0:1.4.3.16-19.module+el8.4.0+20279+846fb4fe
Oracle Linux · 8 python3-lib389 0:1.4.3.16-19.module+el8.4.0+20279+846fb4fe

Vulnerabilities 1

  • Unscored —
    CVE-2021-3652

    A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, the…

    389-ds-base Debian