Linux · Security advisory · March 15, 2022

RHSA-2022:0889: Security update for 6 packages

RHSA-2022:0889, released March 15, 2022, fixes 1 CVE across 6 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0201
80th percentile

Fixed package versions

ProductReleaseFixed in
389-ds-baseRHEL 80:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-develRHEL 80:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-legacy-toolsRHEL 80:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-libsRHEL 80:1.4.3.23-14.module+el8.5.0+14377+c731dc97
389-ds-base-snmpRHEL 80:1.4.3.23-14.module+el8.5.0+14377+c731dc97
python3-lib389RHEL 80:1.4.3.23-14.module+el8.5.0+14377+c731dc97

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-4091 389-ds-base: 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server 7.5 0.0201 None reported
Showing 1 to 1 of 1 1