Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | 389-ds-base | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::client | 389-ds-base-debuginfo | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::client | 389-ds-base-devel | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::client | 389-ds-base-libs | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::client | 389-ds-base-snmp | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | 389-ds-base | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | 389-ds-base-debuginfo | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | 389-ds-base-devel | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | 389-ds-base-libs | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | 389-ds-base-snmp | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | 389-ds-base | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | 389-ds-base-debuginfo | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | 389-ds-base-devel | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | 389-ds-base-libs | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::server | 389-ds-base-snmp | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | 389-ds-base | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | 389-ds-base-debuginfo | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | 389-ds-base-devel | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | 389-ds-base-libs | 0:1.3.7.5-28.el7_5 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | 389-ds-base-snmp | 0:1.3.7.5-28.el7_5 |
Vulnerabilities 4
-
High 7.5
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the…
-
High 7.5
A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function…
-
Medium 6.5
A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch wit…
-
Medium 5.9
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persiste…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1588056
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1613606
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1614836
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1614861
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1615924
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1619450
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1623247
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1626079
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2757.json
-
report
https://access.redhat.com/security/cve/CVE-2018-10850
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-10850
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-10850
-
article
https://pagure.io/389-ds-base/issue/49768
-
report
https://access.redhat.com/security/cve/CVE-2018-10935
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-10935
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-10935
-
report
https://access.redhat.com/security/cve/CVE-2018-14624
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-14624
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-14624
-
report
https://access.redhat.com/security/cve/CVE-2018-14638
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-14638
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-14638