389-ds-base

#47605 CVE-2013-4485: DoS due to improper handling of ger attr searches
Closed: wontfix Opened by rmeggins.

Closed: wontfix
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 1032898

This is an automatically created tracking bug!  It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s).  This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multiple supported versions of Fedora.
Only one tracking bug has been filed; please ensure that it is only closed
when all affected versions are fixed.
[bug automatically created by: add-tracking-bugs]

To ssh://git.fedorahosted.org/git/389/ds.git
1b74654..96346ba 389-ds-base-1.2.11 -> 389-ds-base-1.2.11
commit 96346ba786048cb1ad6245d2014151fbd38f2049
Author: Rich Megginson rmeggins@redhat.com
Date: Tue Oct 29 13:47:35 2013 -0600
e2d1107..b1afed2 389-ds-base-1.3.0 -> 389-ds-base-1.3.0
commit b1afed23fd90e8eb523125ddb45bfe0e1d89c49e
Author: Rich Megginson rmeggins@redhat.com
Date: Tue Oct 29 13:47:35 2013 -0600
03f6347..8c5e74b 389-ds-base-1.3.1 -> 389-ds-base-1.3.1
commit 8c5e74b291d08c66e0afbf766f77f955725b9bf4
Author: Rich Megginson rmeggins@redhat.com
Date: Tue Oct 29 13:47:35 2013 -0600
6cdca01..87e44e2 389-ds-base-1.3.2 -> 389-ds-base-1.3.2
commit 87e44e294fc7bd1038b4ab5c174064824c815e3c
Author: Rich Megginson rmeggins@redhat.com
Date: Tue Oct 29 13:47:35 2013 -0600
e2c42bc..542b476 master -> master
commit 542b4761272055d65049515c796db9212be9117b
Author: Rich Megginson rmeggins@redhat.com
Date: Tue Oct 29 13:47:35 2013 -0600

0001-Ticket-47605-CVE-2013-4485-DoS-due-to-improper-handl.patch
0001-Ticket-47605-CVE-2013-4485-DoS-due-to-improper-handl.patch

Metadata Update from @rmeggins:
- Issue assigned to rmeggins
- Issue set to the milestone: 1.2.11.25

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/942

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: Fixed)
Metadata
None
None
None
Low
ack
RHCust
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.