libuser-0.54.7-2.1.AXS3.2

エラータID: AXSA:2011-12:01

Release date: 
Tuesday, January 25, 2011 - 10:56
Subject: 
libuser-0.54.7-2.1.AXS3.2
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

The libuser library implements a standardized interface for manipulating
and administering user and group accounts. The library uses pluggable
back-ends to interface to its data sources.
Sample applications modeled after those included with the shadow password
suite are included.
Security issues fixed with this release:
CVE-2011-0002
No description available at the time of writing, see CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2011-0002
libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.


Additional Info: 

N/A

Download: 

SRPMS
  1. libuser-0.54.7-2.1.AXS3.2.src.rpm
    MD5: 5e494ec095bcbcb96f62eb30b549aafe
    SHA-256: 856bf9fad3aa10fb8f1b779821c00177b51663dd850bdf3d240e7b7c361f07ee
    Size: 1.13 MB

Asianux Server 3 for x86
  1. libuser-0.54.7-2.1.AXS3.2.i386.rpm
    MD5: 61cf0b434d01973040fb1d52c7fbbc70
    SHA-256: 320b4ac5ec1ca6f5c08656e37e2242eb6d436e65adb206d9893d603df0283195
    Size: 440.82 kB
  2. libuser-devel-0.54.7-2.1.AXS3.2.i386.rpm
    MD5: 5dc8f5e2a28b4614987a0c389b105039
    SHA-256: 4c2124cdb2b58ea84ec2e9946e0e5507124d1b687eb94a7db68dbd5e2d5e8375
    Size: 56.20 kB

Asianux Server 3 for x86_64
  1. libuser-0.54.7-2.1.AXS3.2.x86_64.rpm
    MD5: fd776d49fe82a6e7daeb7774cc8e0c47
    SHA-256: cf484f9784f8facb7fddf683135cd1d3da6c563a82007850659407dacd2b927e
    Size: 452.55 kB
  2. libuser-devel-0.54.7-2.1.AXS3.2.x86_64.rpm
    MD5: 29c9791876c7fb2c33eebec8569108c2
    SHA-256: 4ae1010b05c5f6315372d8382e020d4f9bfe28f39e408e2ec23c619eb88dfb85
    Size: 56.18 kB