Red Hat Security Advisory

RHSA-2019:1789

389-ds-base security update

Released 2019-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) 389-ds-base-1.3.7.5-30.el7_5, 389-ds-base-devel-1.3.7.5-30.el7_5, 389-ds-base-libs-1.3.7.5-30.el7_5 +1
Red Hat Enterprise Linux Server EUS (v. 7.5) 389-ds-base-1.3.7.5-30.el7_5, 389-ds-base-libs-1.3.7.5-30.el7_5
Red Hat Enterprise Linux Server Optional EUS (v. 7.5) 389-ds-base-1.3.7.5-30.el7_5, 389-ds-base-devel-1.3.7.5-30.el7_5, 389-ds-base-libs-1.3.7.5-30.el7_5 +1

TI-2019-07492 CVE-2019-10171 · GHSA-9cc6-43cm-mf7x

LOW 36

It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01395 Published 2019-08-02 Partial fix · 1.4.0.17 CWE-770