389-ds-base-1.2.11.15-14.AXS4

エラータID: AXSA:2013-412:03

Release date: 
Friday, April 26, 2013 - 20:11
Subject: 
389-ds-base-1.2.11.15-14.AXS4
Affected Channels: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity: 
High
Description: 

389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration.

Security issues fixed with this release:

• CVE-2013-1897

No information available at the time of writing, please use the CVE link below.

Fixed bugs :

• Previously, the ns-slapd process could crash with a segmentation fault when the schema-reload.pl script ran under heavy load. This has been fixed.

• Previously, an out of scope problem for a local variable could trigger a crash in the modrdn operation. This has been fixed.

• Fixed the cleanAllRUV task failing to cleanup the config file upon completion.

• Fixed a crash in aci evaluation.

• Fixed a Deadlock in DNA plug-in.

Solution: 

Update packages.

CVEs: 
CVE-2013-1897
The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote attackers to obtain sensitive information outside of the rootDSE via a crafted LDAP search.


Additional Info: 

N/A

Download: 

SRPMS
  1. 389-ds-base-1.2.11.15-14.AXS4.src.rpm
    MD5: 41eb642a49fc7d7c4da426560c059d38
    SHA-256: caa58c3c5ec8dd9d6bc8aa0443cd05a3fa641a266d508edc813502899140a507
    Size: 3.01 MB

Asianux Server 4 for x86
  1. 389-ds-base-1.2.11.15-14.AXS4.i686.rpm
    MD5: cf5695864c7a8ea40ad15cc6f0ff8243
    SHA-256: f39c3719deb8aaa0303661f068d745e56d32b57a85bdcf3e00abd8ac4f732133
    Size: 1.44 MB
  2. 389-ds-base-libs-1.2.11.15-14.AXS4.i686.rpm
    MD5: c3a846544eb40f04c06a64d075c8ce02
    SHA-256: a0558b25f2c5cc20b368b607fb098ac33768a50d922e053dcb80cf246958fdf7
    Size: 396.01 kB

Asianux Server 4 for x86_64
  1. 389-ds-base-1.2.11.15-14.AXS4.x86_64.rpm
    MD5: 875e72f6e8c81bdaf3de37d5cac7b8f1
    SHA-256: 6d271e07a6c7e9f327529caf0476f6b14473ea64e1a3de8e0cb9bafae8f5eec0
    Size: 1.45 MB
  2. 389-ds-base-libs-1.2.11.15-14.AXS4.x86_64.rpm
    MD5: fe5cc6aeee143d0ff091456f747305a2
    SHA-256: 7709729fd01da2c760136283cfc2fccf770a5f60c14a545428615c85c7412be9
    Size: 391.35 kB
  3. 389-ds-base-libs-1.2.11.15-14.AXS4.i686.rpm
    MD5: c3a846544eb40f04c06a64d075c8ce02
    SHA-256: a0558b25f2c5cc20b368b607fb098ac33768a50d922e053dcb80cf246958fdf7
    Size: 396.01 kB