RHSA-2023:4655MediumCVSS 5.5
Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update
🔗 CVE IDs covered (1)
📋 Description
CVE-2023-1055 — RHDS: LDAP browser tries to decode userPassword instead of userCertificate attribute
🎯 Affected products14
- Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.src (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-debuginfo-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-debugsource-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-devel-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-legacy-tools-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-legacy-tools-debuginfo-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-libs-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-libs-debuginfo-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-snmp-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- 389-ds-base-snmp-debuginfo-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.x86_64 (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- cockpit-389-ds-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
- python3-lib389-0:1.4.3.34-1.module+el8dsrv+18380+8350b80e.noarch (redhat-ds:11) as a component of Red Hat Directory Server 11.6 for RHEL 8
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2023:4655
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/security/cve/CVE-2023-1055
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2168719
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2173517
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4655.json