libldb-1.1.13-3.AXS4.1

エラータID: AXSA:2016-010:01

Release date: 
Friday, January 8, 2016 - 10:29
Subject: 
libldb-1.1.13-3.AXS4.1
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
Moderate
Description: 

An extensible library that implements an LDAP like API to access remote LDAP
servers, or use local tdb databases.

Security issues fixed with this release:

CVE-2015-3223
The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24,
as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before
4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which
allows remote attackers to cause a denial of service (infinite loop)
via crafted packets.
CVE-2015-5330
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before
4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string
lengths, which allows remote attackers to obtain sensitive information
from daemon heap memory by sending crafted packets and then reading
(1) an error message or (2) a database value.

Solution: 

Update packages.

CVEs: 
CVE-2015-3223
The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
CVE-2015-5330
ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading (1) an error message or (2) a database value.
Additional Info: 

N/A

Download: 

SRPMS
  1. libldb-1.1.13-3.AXS4.1.src.rpm
    MD5: 60b91c0eea4ee385e4f525c4a64a5199
    SHA-256: 302da1b52e8f4e991f3f4f8431187bf602fc6f2e5ccfa923e689afcb126fa8ae
    Size: 1.07 MB

Asianux Server 4 for x86
  1. libldb-1.1.13-3.AXS4.1.i686.rpm
    MD5: 8c063fc68dc92f2ba2a1cc9436a8e4b3
    SHA-256: 7d623dab019a46935600ce350fc4f09442dc8d7d0e68937d7891bd5bffec3f4c
    Size: 112.04 kB
  2. libldb-devel-1.1.13-3.AXS4.1.i686.rpm
    MD5: 52a1b1cf023719435ae3e214330b5c5c
    SHA-256: 53f02521a31a8c5f813ada9f20bff5c9d287345d471cc2a662d1317ca2cd050b
    Size: 68.27 kB
  3. pyldb-1.1.13-3.AXS4.1.i686.rpm
    MD5: ab1187f6687c3503420f2e7ea63c5d9b
    SHA-256: 53e7273c58544546d0fb041bf561e5a144a3be8bc6812facebf08ed5b896d3a9
    Size: 30.45 kB

Asianux Server 4 for x86_64
  1. libldb-1.1.13-3.AXS4.1.x86_64.rpm
    MD5: 28b527c9814c1c63c392078f2805d0f1
    SHA-256: 24ffe412d8204162acf966a46c0d4c4ab2f2acf4b0161f98e77b965cbc8dad68
    Size: 109.97 kB
  2. libldb-devel-1.1.13-3.AXS4.1.x86_64.rpm
    MD5: a4ac3cda6c5725836b8419164fc4df2e
    SHA-256: 436f7108d1941b2fa298e42b4776829d0102b6d32479de316d273aa12c0538fd
    Size: 67.84 kB
  3. pyldb-1.1.13-3.AXS4.1.x86_64.rpm
    MD5: e76c10b417a9287017da4fd7b5d49f31
    SHA-256: d7a4079030c703b70824fae66d3d1cbd5dc1df9b02b69b71046fa72f26685ae7
    Size: 31.08 kB
  4. libldb-1.1.13-3.AXS4.1.i686.rpm
    MD5: 8c063fc68dc92f2ba2a1cc9436a8e4b3
    SHA-256: 7d623dab019a46935600ce350fc4f09442dc8d7d0e68937d7891bd5bffec3f4c
    Size: 112.04 kB
  5. libldb-devel-1.1.13-3.AXS4.1.i686.rpm
    MD5: 52a1b1cf023719435ae3e214330b5c5c
    SHA-256: 53f02521a31a8c5f813ada9f20bff5c9d287345d471cc2a662d1317ca2cd050b
    Size: 68.27 kB