389-ds:1.4 bug fix and enhancement update

エラータID: AXSA:2021-2281:02

Release date: 
Tuesday, August 3, 2021 - 08:45
Subject: 
389-ds:1.4 bug fix and enhancement update
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

An update for the 389-ds:1.4 module is now available.

CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.

Modularity name: 389-ds
Stream name: 1.4

Solution: 

Update packages.

CVEs: 
CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database.
Additional Info: 

N/A

Download: 

SRPMS
  1. 389-ds-base-1.4.3.16-13.module+el8+1249+901817c2.src.rpm
    MD5: 378918f36f6832c9dd67620df0a27843
    SHA-256: 8db3d80bebeb7528961d242f1cbe44e3efb8e46d78346fa270ea10d11ac3c0c4
    Size: 6.43 MB

Asianux Server 8 for x86_64
  1. 389-ds-base-1.4.3.16-13.module+el8+1249+901817c2.x86_64.rpm
    MD5: ec20dea068c1d5fddf003f5fe0349265
    SHA-256: 471db3bd745d15fc8b8827438796271cd8feae7aab29b81ff5e406fa391c13f9
    Size: 1.78 MB
  2. 389-ds-base-debugsource-1.4.3.16-13.module+el8+1249+901817c2.x86_64.rpm
    MD5: b568b4345a7fd53a8072e399a9d622a1
    SHA-256: a6a1bb08df895677c1ccce03c8771056436dea84b75368630d7d73c9b13004e6
    Size: 2.52 MB
  3. 389-ds-base-devel-1.4.3.16-13.module+el8+1249+901817c2.x86_64.rpm
    MD5: e2e3dd9bd78df2c539d3270cef715d70
    SHA-256: 54e3070efe32d6b6ef49dfe6153d867149eba6a29c5a642a5166976202a82b84
    Size: 132.02 kB
  4. 389-ds-base-legacy-tools-1.4.3.16-13.module+el8+1249+901817c2.x86_64.rpm
    MD5: 05a859895b7d6e43f23f99c7382bd258
    SHA-256: a7e92a0390113ff0fd33ab9636c0e1ddd55ad18dbf7f17d6b3abbe69d05887f8
    Size: 284.07 kB
  5. 389-ds-base-libs-1.4.3.16-13.module+el8+1249+901817c2.x86_64.rpm
    MD5: c86b5fee1cb3706e850759b8d4160871
    SHA-256: 52156c7f192c22c196c28bab12d9c2b32f0d718246ef627497063ba65677a326
    Size: 849.87 kB
  6. 389-ds-base-snmp-1.4.3.16-13.module+el8+1249+901817c2.x86_64.rpm
    MD5: af866c98d1cd91356402c4cba2b2d9c0
    SHA-256: e099783b5a3607470fca84c99ea9f466d3b5f2dff2a0e8e24f29112912f23524
    Size: 45.28 kB
  7. python3-lib389-1.4.3.16-13.module+el8+1249+901817c2.noarch.rpm
    MD5: eb58365eacc3fd610b1c3a7d57d16fab
    SHA-256: 5968e5a49fbae9d0e569568435d9b98db08b24c9f7ab0f83970c685b69de143e
    Size: 895.69 kB