Skip to content
OpenAdvisories
Medium RLSA-2022:8162 3 CVEs

Moderate: 389-ds-base security, bug fix, and enhancement update

Published Nov 15, 2022 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)

Security Fix(es):

* 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)

* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)

* 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 389-ds-base 0:2.1.3-4.el9_1

Vulnerabilities 3

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1872451
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2052527
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2055815
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2057056
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2057063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2061801
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064769
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2100337
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2100572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2115348
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2118691