Red Hat Security Advisory

RHSA-2022:0628

389-ds-base security and bug fix update

Released 2022-02-22 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) 389-ds-base-1.3.10.2-15.el7_9, 389-ds-base-devel-1.3.10.2-15.el7_9, 389-ds-base-libs-1.3.10.2-15.el7_9 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) 389-ds-base-1.3.10.2-15.el7_9, 389-ds-base-devel-1.3.10.2-15.el7_9, 389-ds-base-libs-1.3.10.2-15.el7_9 +1
Red Hat Enterprise Linux Server (v. 7) 389-ds-base-1.3.10.2-15.el7_9, 389-ds-base-libs-1.3.10.2-15.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) 389-ds-base-1.3.10.2-15.el7_9, 389-ds-base-devel-1.3.10.2-15.el7_9, 389-ds-base-libs-1.3.10.2-15.el7_9 +1
Red Hat Enterprise Linux Workstation (v. 7) 389-ds-base-1.3.10.2-15.el7_9, 389-ds-base-libs-1.3.10.2-15.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) 389-ds-base-devel-1.3.10.2-15.el7_9, 389-ds-base-snmp-1.3.10.2-15.el7_9

TI-2021-02971 CVE-2021-4091 · GHSA-qwhp-2gp7-qhfq

LOW 37

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02014 Published 2022-02-18 Fixed CWE-415