Synopsis

Important: 389-ds-base security update

Type/Severity

Security Advisory: Important

Topic

An update for 389-ds-base is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

• 389-ds-base: ns-slapd crash via large filter value in ldapsearch (CVE-2018-1089)
  

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Greg Kubok for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the 389 server service will be restarted automatically.

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64

Fixes

• BZ - 1559802 - CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch

CVEs

• CVE-2018-1089

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 6

SRPM
389-ds-base-1.2.11.15-95.el6_9.src.rpm	SHA-256: bda5ebf0e76864c44b5212ac947628f12fe0ef9a35fb0f2802218633b7c5ca64
x86_64
389-ds-base-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 051218c23be00522877a0948ce0c75aefe962e0ff7ec8f2352c970e5b0122287
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-debuginfo-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 1d588cd5bae91864747d8bb2b23be194645120d021806254b20c667de7f362fb
389-ds-base-debuginfo-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 1d588cd5bae91864747d8bb2b23be194645120d021806254b20c667de7f362fb
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm	SHA-256: cc1c173b2f804f53dd7d6b09dee8e8ea03df749455194c356cd8624990b424ea
389-ds-base-devel-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 7d521ac0a8c0dc478bf477be22a3e6111019dca87c203f6ad558a036e7129288
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm	SHA-256: f8cd9e18f9b470572429c4fd5192b5d9a33fd6e9085354e8abdb56a9c193d712
389-ds-base-libs-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: dc98439eed852f697b808e5520333bf0344873cf615bfa2c7875947530752264
i386
389-ds-base-1.2.11.15-95.el6_9.i686.rpm	SHA-256: 9c5e67ea624f0483590cfc7b8a05b7571cdef64bd976d67d0bd114ce2b641199
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm	SHA-256: cc1c173b2f804f53dd7d6b09dee8e8ea03df749455194c356cd8624990b424ea
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm	SHA-256: f8cd9e18f9b470572429c4fd5192b5d9a33fd6e9085354e8abdb56a9c193d712

Red Hat Enterprise Linux Workstation 6

SRPM
389-ds-base-1.2.11.15-95.el6_9.src.rpm	SHA-256: bda5ebf0e76864c44b5212ac947628f12fe0ef9a35fb0f2802218633b7c5ca64
x86_64
389-ds-base-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 051218c23be00522877a0948ce0c75aefe962e0ff7ec8f2352c970e5b0122287
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-debuginfo-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 1d588cd5bae91864747d8bb2b23be194645120d021806254b20c667de7f362fb
389-ds-base-debuginfo-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 1d588cd5bae91864747d8bb2b23be194645120d021806254b20c667de7f362fb
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm	SHA-256: cc1c173b2f804f53dd7d6b09dee8e8ea03df749455194c356cd8624990b424ea
389-ds-base-devel-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 7d521ac0a8c0dc478bf477be22a3e6111019dca87c203f6ad558a036e7129288
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm	SHA-256: f8cd9e18f9b470572429c4fd5192b5d9a33fd6e9085354e8abdb56a9c193d712
389-ds-base-libs-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: dc98439eed852f697b808e5520333bf0344873cf615bfa2c7875947530752264
i386
389-ds-base-1.2.11.15-95.el6_9.i686.rpm	SHA-256: 9c5e67ea624f0483590cfc7b8a05b7571cdef64bd976d67d0bd114ce2b641199
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm	SHA-256: cc1c173b2f804f53dd7d6b09dee8e8ea03df749455194c356cd8624990b424ea
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm	SHA-256: f8cd9e18f9b470572429c4fd5192b5d9a33fd6e9085354e8abdb56a9c193d712

Red Hat Enterprise Linux Desktop 6

SRPM
389-ds-base-1.2.11.15-95.el6_9.src.rpm	SHA-256: bda5ebf0e76864c44b5212ac947628f12fe0ef9a35fb0f2802218633b7c5ca64
x86_64
389-ds-base-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 051218c23be00522877a0948ce0c75aefe962e0ff7ec8f2352c970e5b0122287
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-debuginfo-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 1d588cd5bae91864747d8bb2b23be194645120d021806254b20c667de7f362fb
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm	SHA-256: cc1c173b2f804f53dd7d6b09dee8e8ea03df749455194c356cd8624990b424ea
389-ds-base-devel-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 7d521ac0a8c0dc478bf477be22a3e6111019dca87c203f6ad558a036e7129288
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm	SHA-256: f8cd9e18f9b470572429c4fd5192b5d9a33fd6e9085354e8abdb56a9c193d712
389-ds-base-libs-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: dc98439eed852f697b808e5520333bf0344873cf615bfa2c7875947530752264
i386
389-ds-base-1.2.11.15-95.el6_9.i686.rpm	SHA-256: 9c5e67ea624f0483590cfc7b8a05b7571cdef64bd976d67d0bd114ce2b641199
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm	SHA-256: cc1c173b2f804f53dd7d6b09dee8e8ea03df749455194c356cd8624990b424ea
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm	SHA-256: f8cd9e18f9b470572429c4fd5192b5d9a33fd6e9085354e8abdb56a9c193d712

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
389-ds-base-1.2.11.15-95.el6_9.src.rpm	SHA-256: bda5ebf0e76864c44b5212ac947628f12fe0ef9a35fb0f2802218633b7c5ca64
x86_64
389-ds-base-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 051218c23be00522877a0948ce0c75aefe962e0ff7ec8f2352c970e5b0122287
389-ds-base-debuginfo-1.2.11.15-95.el6_9.i686.rpm	SHA-256: c028663308576b15d55d90e92953d72b00147fed59d12e4757179c9469ec27ee
389-ds-base-debuginfo-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 1d588cd5bae91864747d8bb2b23be194645120d021806254b20c667de7f362fb
389-ds-base-devel-1.2.11.15-95.el6_9.i686.rpm	SHA-256: cc1c173b2f804f53dd7d6b09dee8e8ea03df749455194c356cd8624990b424ea
389-ds-base-devel-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: 7d521ac0a8c0dc478bf477be22a3e6111019dca87c203f6ad558a036e7129288
389-ds-base-libs-1.2.11.15-95.el6_9.i686.rpm	SHA-256: f8cd9e18f9b470572429c4fd5192b5d9a33fd6e9085354e8abdb56a9c193d712
389-ds-base-libs-1.2.11.15-95.el6_9.x86_64.rpm	SHA-256: dc98439eed852f697b808e5520333bf0344873cf615bfa2c7875947530752264