Lucene search
OracleLinuxELSA-2022-8162HistoryNov 22, 2022 - 12:00 a.m.
389-ds-base security, bug fix, and enhancement update
2022-11-2200:00:00
linux.oracle.com
6
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
53.6%
[2.1.3-4]
- Bump version to 2.1.3-4
- Resolves: Bug 1872451 - Fix regression with dscreate template
[2.1.3-3] - Bump version to 2.1.3-3
- Resolves: Bug 2118765
[2.1.3-2] - Bump version to 2.1.3-2
- Resolves: Bug 2118765 - SIGSEGV in sync_repl
[2.1.3-1] - Bump version to 2.1.3-1
- Resolves: Bug 2061801 - rebase 389-ds-base to 2.1.3
- Resolves: Bug 1872451 - RFE - run as non-root
- Resolves: Bug 2052527 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2057056 - Import may break the replication because changelog starting csn may not be created
- Resolves: Bug 2057063 - Add support for recursively deleting subentries
- Resolves: Bug 2062778 - sending crafted message could result in DoS
- Resolves: Bug 2064781 - expired password was still allowed to access the database
- Resolves: Bug 2100337 - dsconf backend export userroot fails ldap.DECODING_ERROR
[2.1.1-3] - Bump version to 2.1.1-3
- Resolves: Bug 2061801 - Fix nss-tools requirement
[2.1.1-2] - Bump version to 2.1.1-2
- Resolves: Bug 2061801 - Fix lmdb-libs requirement
[2.1.1-1] - Bump version to 2.1.1-1
- Resolves: Bug 2061801 - rebase 389-ds-base to 2.1.1
[2.1.0-1] - Bump version to 2.1.0-1
- Resolves: Bug 2061801 - rebase 389-ds-base to 2.1.0
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | 389-ds-base | < 2.1.3-4.el9_1 | 389-ds-base-2.1.3-4.el9_1.src.rpm |
| oracle linux | 9 | aarch64 | 389-ds-base | < 2.1.3-4.el9_1 | 389-ds-base-2.1.3-4.el9_1.aarch64.rpm |
| oracle linux | 9 | aarch64 | 389-ds-base-libs | < 2.1.3-4.el9_1 | 389-ds-base-libs-2.1.3-4.el9_1.aarch64.rpm |
| oracle linux | 9 | noarch | python3-lib389 | < 2.1.3-4.el9_1 | python3-lib389-2.1.3-4.el9_1.noarch.rpm |
| oracle linux | 9 | src | 389-ds-base | < 2.1.3-4.el9_1 | 389-ds-base-2.1.3-4.el9_1.src.rpm |
| oracle linux | 9 | x86_64 | 389-ds-base | < 2.1.3-4.el9_1 | 389-ds-base-2.1.3-4.el9_1.x86_64.rpm |
| oracle linux | 9 | x86_64 | 389-ds-base-libs | < 2.1.3-4.el9_1 | 389-ds-base-libs-2.1.3-4.el9_1.x86_64.rpm |
| oracle linux | 9 | noarch | python3-lib389 | < 2.1.3-4.el9_1 | python3-lib389-2.1.3-4.el9_1.noarch.rpm |
Related
osv
osv
Moderate: 389-ds-base security, bug fix, and enhancement update
2022-11-15 00:00:00
Moderate: 389-ds-base security, bug fix, and enhancement update
2022-11-15 06:17:19
Moderate: 389-ds:1.4 security update
2022-08-02 07:05:16
nessus
nessus
RHEL 9 : 389-ds-base (RHSA-2022:8976)
2022-12-13 00:00:00
RHEL 9 : 389-ds-base (RHSA-2022:8162)
2022-11-16 00:00:00
Oracle Linux 9 : 389-ds-base (ELSA-2022-8162)
2022-11-23 00:00:00
almalinux
almalinux
Moderate: 389-ds-base security, bug fix, and enhancement update
2022-11-15 00:00:00
Moderate: 389-ds:1.4 security update
2022-08-02 00:00:00
Moderate: 389-ds:1.4 security update
2022-10-25 00:00:00
redhat
redhat
(RHSA-2022:8976) Moderate: 389-ds-base security update
2022-12-13 15:31:10
rocky
rocky
389-ds-base security, bug fix, and enhancement update
2022-11-15 06:17:19
389-ds:1.4 security update
2022-08-02 07:05:16
389-ds:1.4 security update
2022-10-25 07:33:40
oraclelinux
oraclelinux
389-ds:1.4 security update
2022-08-03 00:00:00
389-ds-base security, bug fix, and enhancement update
2022-06-29 00:00:00
389-ds-base security and bug fix update
2022-10-25 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2022-1881)
2022-06-17 00:00:00
Mageia: Security Advisory (MGASA-2022-0134)
2022-04-11 00:00:00
CentOS: Security Advisory for 389-ds-base (CESA-2022:5239)
2022-08-03 00:00:00
mageia
mageia
Updated 389-ds-base packages fix security vulnerability
2022-04-10 00:20:39
Updated 389-ds-base packages fix security vulnerability
2022-11-08 22:44:28
centos
centos
389 security update
2022-08-02 19:20:46
389 security update
2022-10-26 14:16:15
suse
suse
Security update for 389-ds (important)
2022-04-04 00:00:00
Security update for 389-ds (moderate)
2022-09-16 00:00:00
Security update for 389-ds (moderate)
2022-09-05 00:00:00
amazon
amazon
Medium: 389-ds-base
2022-07-19 00:26:00
Medium: 389-ds-base
2022-12-01 20:31:00
ubuntucve
ubuntucve
debian
debian
[SECURITY] [DLA 3399-1] 389-ds-base security update
2023-04-24 05:25:20
prion
prion
Authentication flaw
2022-03-16 15:15:00
Authentication flaw
2022-03-23 20:15:00
Null pointer dereference
2022-10-14 18:15:00
debiancve
debiancve
cve
cve
redhatcve
redhatcve
veracode
veracode
Denial Of Service (DoS)
2022-06-02 20:59:51
Denial Of Service (DoS)
2022-11-10 00:44:40
Insufficient Session Expiration
2022-05-01 06:02:15
fedora
fedora
[SECURITY] Fedora 34 Update: 389-ds-base-2.0.15-1.fc34
2022-04-01 16:04:56
[SECURITY] Fedora 35 Update: 389-ds-base-2.0.15-1.fc35
2022-04-01 04:51:23
cnvd
cnvd
Red Hat 389 Directory Server Code Issue Vulnerability
2022-03-23 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
53.6%
Related for ELSA-2022-8162