ELSA-2014-0292

ELSA-2014-0292 - 389-ds-base security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2014-03-13

Description

[1.2.11.15-32]
- Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.5.z] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)

Related CVEs

CVE-2014-0132

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	389-ds-base-1.2.11.15-32.el6_5.src.rpm	df639401a38ca94c72c0abd1ccbf5732	ELBA-2018-2407
	389-ds-base-1.2.11.15-32.el6_5.i686.rpm	169619eb87686d851111387b9ab0031c	ELBA-2018-2407
	389-ds-base-devel-1.2.11.15-32.el6_5.i686.rpm	add0d5a826cf7e77bdb69b9361212a23	ELBA-2018-2407
	389-ds-base-libs-1.2.11.15-32.el6_5.i686.rpm	e569d75f8976511c0be8f0056c2835ce	ELBA-2018-2407
Oracle Linux 6 (x86_64)	389-ds-base-1.2.11.15-32.el6_5.src.rpm	df639401a38ca94c72c0abd1ccbf5732	ELBA-2018-2407
	389-ds-base-1.2.11.15-32.el6_5.x86_64.rpm	9a566f5108570f9e2f3e2e243e768186	ELBA-2018-2407
	389-ds-base-devel-1.2.11.15-32.el6_5.i686.rpm	add0d5a826cf7e77bdb69b9361212a23	ELBA-2018-2407
	389-ds-base-devel-1.2.11.15-32.el6_5.x86_64.rpm	812c47047a55e5f4d938995ceb28d66e	ELBA-2018-2407
	389-ds-base-libs-1.2.11.15-32.el6_5.i686.rpm	e569d75f8976511c0be8f0056c2835ce	ELBA-2018-2407
	389-ds-base-libs-1.2.11.15-32.el6_5.x86_64.rpm	5c089c03fb0a3768b6f8a2774cbe188e	ELBA-2018-2407

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team