Synopsis

Important: 389-ds:1.4 security update

Type/Severity

Security Advisory: Important

Topic

An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

• 389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.0 ppc64le
• Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.0 x86_64

Fixes

• BZ - 1747448 - CVE-2019-14824 389-ds-base: Read permission check bypass via the deref plugin

CVEs

• CVE-2019-14824

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.0

SRPM
389-ds-base-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.src.rpm	SHA-256: a8f305bd10e284a5d00f6d24da620d4a39850aa74a7bed04927a1dbc542f4015
ppc64le
python3-lib389-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.noarch.rpm	SHA-256: 36d4e72e7cf87157cddc0e045b30543e5244f9dc30f407d9421f9cf2bf2decc2
389-ds-base-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: d8f1982e286eb91137d5ab1816df603b9de2b011341b52dbf8d94c998d0d0c30
389-ds-base-debuginfo-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: 2c0e103e73213d734a44aaf615d826818a147f3180a94584899eafdcf59331da
389-ds-base-debugsource-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: 0af73b68a3d318dbf2ac21ce1a680bf9ee1de186889f89eef508fc5913c02992
389-ds-base-devel-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: e8768e6d9357a883b4c6511ca8db2498b503e06579ae314fa0986993ab1c885f
389-ds-base-legacy-tools-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: f23ccf5842aee7160e5b5e0c02bb01c4b0330429541673ea13d75ccce8339e9f
389-ds-base-legacy-tools-debuginfo-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: cb7145c8253919125c306da78a1f48e1c7e04fbce602f68c90ea7f12c273ce9f
389-ds-base-libs-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: c91aacbfc664d21e60519e93577bfb110253931b7d00663d3c0b9fa57fe8fbac
389-ds-base-libs-debuginfo-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: 69e9017cd61a03954ca3e76d59cd2ce6faebc09a6686bb4fd5d13a3f0569cf72
389-ds-base-snmp-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: aff77736185eae2a87cd4a70c9cf613ee4b17c92f07f556aa61e1cb1dee78cf4
389-ds-base-snmp-debuginfo-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.ppc64le.rpm	SHA-256: b643e6f5363f17e56cbda51e917d582bb44da77073609e21922c6ce1deee6223

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.0

SRPM
389-ds-base-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.src.rpm	SHA-256: a8f305bd10e284a5d00f6d24da620d4a39850aa74a7bed04927a1dbc542f4015
x86_64
389-ds-base-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: f5b97bf610ef7be4f9428c614496e6ac051541d698ea7491c9fd3d165b4a7e46
389-ds-base-debuginfo-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: 80cb14a4e291034369464b9b781a98d65d118bf3ad065baa6dfeda9b1e628776
389-ds-base-debugsource-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: 44eb903b4ed175456a5c1cffd34a4b0dc9ca878ccf7098d56c4e40ce4d8da1b2
389-ds-base-devel-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: a5ec68b329316b0b2f052273c2fe9279c7e6e9a7fca55086a9f2201fd49d2f5c
389-ds-base-legacy-tools-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: 5400fafc82c2a60053d1c7abff150f14b14d46bb95d70dcd853f0f4a17901753
389-ds-base-legacy-tools-debuginfo-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: 5c2e5f6b456fe1fe093c337e69af8a06ed1470e407672d1eb4957d2024f41e79
389-ds-base-libs-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: 9a628baa0047365c49760a220c8a282cff73857b2317cd1b0ce642ba96302a7f
389-ds-base-libs-debuginfo-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: 3431519ea31721b65fc42b360bca8d5545e90081add14a7915d0ce379258be25
389-ds-base-snmp-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: 8c304bb684a63aaaac56089de4a5f1b0b8852fe5e8d25b8a6ddf9929592799c5
389-ds-base-snmp-debuginfo-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.x86_64.rpm	SHA-256: 1ee5b6dc2337c13cbf84d6c6194792038af6f0714d457017d464f4d2ebd8718b
python3-lib389-1.4.0.20-10.1.module+el8.0.0+4597+364a3066.noarch.rpm	SHA-256: 36d4e72e7cf87157cddc0e045b30543e5244f9dc30f407d9421f9cf2bf2decc2