389-ds-base-1.3.5.10-11.el7

エラータID: AXSA:2016-1115:06

Release date: 
Tuesday, November 29, 2016 - 09:01
Subject: 
389-ds-base-1.3.5.10-11.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

389 Directory Server is an LDAPv3 compliant server. The base package includes
the LDAP server and command line utilities for server administration.

Security issues fixed with this release:

CVE-2016-4992
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5405
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-5416
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

The following packages have been upgraded to a newer upstream version: 389-ds-base (1.3.5.10).
Additional Changes:

Solution: 

Update packages.

CVEs: 
CVE-2016-4992
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects.
CVE-2016-5405
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.
CVE-2016-5416
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.
Additional Info: 

N/A

Download: 

SRPMS
  1. 389-ds-base-1.3.5.10-11.el7.src.rpm
    MD5: b5435f9fccfb09c7e996cf9b72690705
    SHA-256: 4dd129a8f6cbbbe4b9a362a69cb90d8847044e7a5d1a48d83605d315fa22c975
    Size: 4.00 MB

Asianux Server 7 for x86_64
  1. 389-ds-base-1.3.5.10-11.el7.x86_64.rpm
    MD5: 56df74b5f3e79053a9e7e9df8f39c6d6
    SHA-256: 645913dea93749591aedcb04089688a7449b572f545333f89c17b3a987234f73
    Size: 1.69 MB
  2. 389-ds-base-libs-1.3.5.10-11.el7.x86_64.rpm
    MD5: 80c591fedb6227f4bb752ee27b5c2198
    SHA-256: 00b6ea9c277a8aa8ede153a0bbdaae089fd3f0fbfee9e4dcb8795b74c6e3b703
    Size: 663.09 kB