slapi-nis-0.56.5-4.el7

エラータID: AXSA:2021-1758:02

Release date: 
Thursday, May 20, 2021 - 11:27
Subject: 
slapi-nis-0.56.5-4.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The slapi-nis packages contain the NIS server plug-in and the Schema Compatibility plug-in for use with the 389 Directory Server.

Security Fix(es):

* slapi-nis: NULL dereference (DoS) with specially crafted Binding DN (CVE-2021-3480)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2021-3480
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. slapi-nis-0.56.5-4.el7.src.rpm
    MD5: df58bca0ffed6b6bf49e9af214eb35dd
    SHA-256: 11593e93e40195130762e3d04d2bbc9134f4459c092785fc9b074a143a35b6d3
    Size: 628.94 kB

Asianux Server 7 for x86_64
  1. slapi-nis-0.56.5-4.el7.x86_64.rpm
    MD5: 4b7be6fe51672f32ebf5f9809f23cfb5
    SHA-256: e95e8dcbda21143a03ef23f526caefd6870f43575eceb5b277b8c89751afa2be
    Size: 148.08 kB