gpp_maybe Security update for 389-ds

SUSE-SLE-Module-Server-Applications-15-SP1-2019-2155

This update for 389-ds to version 1.4.0.26 fixes the following issues: Security issues fixed: - CVE-2016-5416: Fixed an information disclosure where a anonymous user could read the default ACI (bsc#991201). - CVE-2018-1054: Fixed a denial of service via search filters in SetUnicodeStringFromUTF_8() (bsc#1083689). - CVE-2018-1089: Fixed a buffer overflow via large filter value (bsc#1092187). - CVE-2018-10871: Fixed an information disclosure in certain plugins leading to the disclosure of plaintext password to an privileged attackers (bsc#1099465). - CVE-2018-14638: Fixed a denial of service through a crash in delete_passwdPolicy () (bsc#1108674). - CVE-2018-14648: Fixed a denial of service caused by malformed values in search queries (bsc#1109609). - CVE-2018-10935: Fixed a denial of service related to ldapsearch with server side sort (bsc#1105606). - CVE-2019-3883: Fixed a denial of service caused by hanging LDAP requests over TLS (bsc#1132385).

Release Date

Aug 15 2019
References

Bugzilla: 1099465, 991201, 1120189, 1132385, 1092187, 1108674, 1083689, 1144797, 1105606, 1109609
CVEs: CVE-2018-10935, CVE-2018-10871, CVE-2019-3883, CVE-2016-5416, CVE-2018-14638, CVE-2018-1054, CVE-2018-14648, CVE-2018-1089
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.1 ppc64le

Packages

389-ds
389 Directory Server

1.4.0.26~git0.8a2d3de6f-4.14.1 lock rpm lock src

389-ds-devel
Development files for the 389 Directory Server

1.4.0.26~git0.8a2d3de6f-4.14.1 lock rpm

Server Applications Module 15.1 x86_64

Packages

389-ds
389 Directory Server

1.4.0.26~git0.8a2d3de6f-4.14.1 lock rpm lock src

389-ds-devel
Development files for the 389 Directory Server

1.4.0.26~git0.8a2d3de6f-4.14.1 lock rpm

Server Applications Module 15.1 aarch64

Packages

389-ds
389 Directory Server

1.4.0.26~git0.8a2d3de6f-4.14.1 lock rpm lock src

389-ds-devel
Development files for the 389 Directory Server

1.4.0.26~git0.8a2d3de6f-4.14.1 lock rpm

Server Applications Module 15.1 s390x

Packages

389-ds
389 Directory Server

1.4.0.26~git0.8a2d3de6f-4.14.1 lock rpm lock src

389-ds-devel
Development files for the 389 Directory Server

1.4.0.26~git0.8a2d3de6f-4.14.1 lock rpm