From 37dc22840629aa155713d54be169c50ca339155f Mon Sep 17 00:00:00 2001 From: Rich Megginson Date: Nov 21 2013 18:21:04 +0000 Subject: Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches --- diff --git a/.gitignore b/.gitignore index 8e3e857..35b6510 100644 --- a/.gitignore +++ b/.gitignore @@ -84,3 +84,4 @@ /389-ds-base-1.3.2.2.tar.bz2 /389-ds-base-1.3.2.3.tar.bz2 /389-ds-base-1.3.2.4.tar.bz2 +/389-ds-base-1.3.2.5.tar.bz2 diff --git a/389-ds-base-git-local.sh b/389-ds-base-git-local.sh index 0625eb3..e2dbaf8 100644 --- a/389-ds-base-git-local.sh +++ b/389-ds-base-git-local.sh @@ -2,7 +2,7 @@ DATE=`date +%Y%m%d` # use a real tag name here -VERSION=1.3.2.4 +VERSION=1.3.2.5 PKGNAME=389-ds-base TAG=${TAG:-$PKGNAME-$VERSION} #SRCNAME=$PKGNAME-$VERSION-$DATE diff --git a/389-ds-base-git.sh b/389-ds-base-git.sh index f9033bb..bceda40 100644 --- a/389-ds-base-git.sh +++ b/389-ds-base-git.sh @@ -2,7 +2,7 @@ DATE=`date +%Y%m%d` # use a real tag name here -VERSION=1.3.2.4 +VERSION=1.3.2.5 PKGNAME=389-ds-base TAG=${TAG:-$PKGNAME-$VERSION} URL="http://git.fedorahosted.org/git/?p=389/ds.git;a=snapshot;h=$TAG;sf=tgz" diff --git a/389-ds-base.spec b/389-ds-base.spec index 66e71a8..8a25765 100644 --- a/389-ds-base.spec +++ b/389-ds-base.spec @@ -24,7 +24,7 @@ Summary: 389 Directory Server (base) Name: 389-ds-base -Version: 1.3.2.4 +Version: 1.3.2.5 Release: %{?relprefix}1%{?prerel}%{?dist} License: GPLv2 with exceptions URL: http://port389.org/ @@ -315,6 +315,9 @@ fi %{_libdir}/%{pkgname}/libslapd.so.* %changelog +* Thu Nov 21 2013 Rich Megginson - 1.3.2.5-1 +- Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches + * Wed Nov 20 2013 Mark Reynolds - 1.3.2.4-1 6cdca01 bump version to 1.3.2.4 Ticket 47599 - Reduce lock scope in retro changelog plug-in diff --git a/sources b/sources index 1392ef6..45904df 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -0c8fa0e0a73114c4f431d141b4b8986d 389-ds-base-1.3.2.4.tar.bz2 +9c9b706a85829e7e03a07834c12d8de1 389-ds-base-1.3.2.5.tar.bz2