Lucene search
AlmaLinuxALSA-2021:3079HistoryAug 10, 2021 - 12:01 p.m.
Low: 389-ds:1.4 security and bug fix update
2021-08-1012:01:08
errata.almalinux.org
43
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
- 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed (CVE-2021-3652)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
A plugin can create an index. Even if the index can be used immediately (for searches) the index remains offline until further reindex (BZ#1983095)
-
On big endian machine, the server fails to identify the operation type (BZ#1980063)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | x86_64 | 389-ds-base | < 1.4.3.16-19.module_el8.4.0+2517+f5bb5c43 | 389-ds-base-1.4.3.16-19.module_el8.4.0+2517+f5bb5c43.x86_64.rpm |
| almalinux | 8 | x86_64 | 389-ds-base-devel | < 1.4.3.16-19.module_el8.4.0+2517+f5bb5c43 | 389-ds-base-devel-1.4.3.16-19.module_el8.4.0+2517+f5bb5c43.x86_64.rpm |
| almalinux | 8 | x86_64 | 389-ds-base-legacy-tools | < 1.4.3.16-19.module_el8.4.0+2517+f5bb5c43 | 389-ds-base-legacy-tools-1.4.3.16-19.module_el8.4.0+2517+f5bb5c43.x86_64.rpm |
| almalinux | 8 | x86_64 | 389-ds-base-libs | < 1.4.3.16-19.module_el8.4.0+2517+f5bb5c43 | 389-ds-base-libs-1.4.3.16-19.module_el8.4.0+2517+f5bb5c43.x86_64.rpm |
| almalinux | 8 | x86_64 | 389-ds-base-snmp | < 1.4.3.16-19.module_el8.4.0+2517+f5bb5c43 | 389-ds-base-snmp-1.4.3.16-19.module_el8.4.0+2517+f5bb5c43.x86_64.rpm |
| almalinux | 8 | noarch | python3-lib389 | < 1.4.3.16-19.module_el8.4.0+2517+f5bb5c43 | python3-lib389-1.4.3.16-19.module_el8.4.0+2517+f5bb5c43.noarch.rpm |
References
Related
nessus
nessus
SUSE SLES15 Security Update : 389-ds (SUSE-SU-2021:2857-1)
2021-08-28 00:00:00
EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2021-2928)
2021-12-31 00:00:00
EulerOS 2.0 SP8 : 389-ds-base (EulerOS-SA-2022-2214)
2022-08-17 00:00:00
veracode
veracode
Insecure Access Control
2021-10-18 14:15:47
oraclelinux
oraclelinux
389-ds-base security and bug fix update
2021-10-13 00:00:00
389-ds:1.4 security and bug fix update
2021-08-12 00:00:00
cve
cve
CVE-2021-3652
2022-04-18 17:15:00
redhatcve
redhatcve
CVE-2021-3652
2021-07-16 21:25:01
debiancve
debiancve
CVE-2021-3652
2022-04-18 17:15:00
redhat
redhat
(RHSA-2021:3079) Low: 389-ds:1.4 security and bug fix update
2021-08-10 12:01:08
(RHSA-2021:3807) Low: 389-ds-base security and bug fix update
2021-10-12 13:22:56
(RHSA-2021:3906) Low: 389-ds:1.4 security and bug fix update
2021-10-19 06:31:53
rosalinux
rosalinux
Advisory ROSA-SA-2023-2231
2023-09-05 12:17:46
Advisory ROSA-SA-2023-2237
2023-09-19 09:31:12
rocky
rocky
389-ds:1.4 security and bug fix update
2021-08-10 12:01:08
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0440)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2022-1156)
2022-02-24 00:00:00
openSUSE: Security Advisory for 389-ds (openSUSE-SU-2021:1211-1)
2021-08-31 00:00:00
suse
suse
Security update for 389-ds (moderate)
2021-08-30 00:00:00
Security update for 389-ds (moderate)
2021-08-20 00:00:00
centos
centos
389 security update
2021-11-17 14:40:17
amazon
amazon
Low: 389-ds-base
2021-12-08 02:21:00
Low: 389-admin
2022-07-28 20:30:00
Low: 389-ds-base
2022-07-28 20:31:00
mageia
mageia
Updated 389-ds-base packages fix security vulnerability
2021-09-23 07:49:29
prion
prion
Authentication flaw
2022-04-18 17:15:00
osv
osv
CVE-2021-3652
2022-04-18 17:15:15
Low: 389-ds:1.4 security and bug fix update
2021-08-10 12:01:08
389-ds-base - security update
2023-04-24 00:00:00
archlinux
archlinux
[ASA-202107-72] 389-ds-base: multiple issues
2021-07-27 00:00:00
ubuntucve
ubuntucve
CVE-2021-3652
2022-04-18 00:00:00
debian
debian
[SECURITY] [DLA 3399-1] 389-ds-base security update
2023-04-24 05:25:20
Related for ALSA-2021:3079