nss_ldap-253-12AXS3

エラータID: AXSA:2008-276:03

Release date: 
Wednesday, October 29, 2008 - 19:24
Subject: 
nss_ldap-253-12AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
Moderate
Description: 

The nss_ldap package contains the nss_ldap and pam_ldap modules.
The nss_ldap module is a plug-in which allows applications to retrieve information about users and groups from a directory server.
The pam_ldap module allows PAM-aware applications to use a directory server to verify user passwords.
Fixed bugs:
Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection.
NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.
- Automatic DNS discovery of the LDAP server does not work
- pam_ldap tries to change passwords twice

Solution: 

Update packages

CVEs: 
CVE-2007-5794
Race condition in nss_ldap, when used in applications that are linked against the pthread library and fork after a call to nss_ldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong mailboxes being returned, but other applications might also be affected.


Additional Info: 

N/A

Download: 

Asianux Server 3 for x86
  1. nss_ldap-253-12AXS3.i386.rpm
    MD5: 859b3e0c442151ec3c8227ffa7a9f99f
    SHA-256: 3c3044175d6d25017e1eba11597e329d0d189cb5b150ee21b351e90f79ec8e07
    Size: 1.42 MB

Asianux Server 3 for x86_64
  1. nss_ldap-253-12AXS3.x86_64.rpm
    MD5: 3ae151cdbdbf09548827b83353a7623e
    SHA-256: fa44500462b625bf8bd736dac021da03103750a227021732b2a34b15ce0a7180
    Size: 1.41 MB