ELSA-2014-0292

ELSA-2014-0292 - 389-ds-base security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2014-03-13

Description

[1.2.11.15-32]
- Resolves: bug 1074847 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.5.z] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)

Related CVEs

CVE-2014-0132

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	389-ds-base-1.2.11.15-32.el6_5.src.rpm	60bd562ff6866c4f4741a90119583746ee2a6b4bfe6e383242dddd28d9cb4551	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-1.2.11.15-32.el6_5.src.rpm	60bd562ff6866c4f4741a90119583746ee2a6b4bfe6e383242dddd28d9cb4551	ELBA-2018-2407	ol6_u5_i386_patch
	389-ds-base-1.2.11.15-32.el6_5.i686.rpm	97218f15b1797a740bb1ec30372a5e701390bb97a49d62544934bb895f982cbc	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-1.2.11.15-32.el6_5.i686.rpm	97218f15b1797a740bb1ec30372a5e701390bb97a49d62544934bb895f982cbc	ELBA-2018-2407	ol6_u5_i386_patch
	389-ds-base-devel-1.2.11.15-32.el6_5.i686.rpm	5929dc50789e6f3577f31bf4fe3034dcd3e5126c0927a849171fb21a895f5fa0	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-devel-1.2.11.15-32.el6_5.i686.rpm	5929dc50789e6f3577f31bf4fe3034dcd3e5126c0927a849171fb21a895f5fa0	ELBA-2018-2407	ol6_u5_i386_patch
	389-ds-base-libs-1.2.11.15-32.el6_5.i686.rpm	f982ff34f332898065d7cf6e82fa2742ca958e98797e3665e9a5cf74c02a860f	ELBA-2018-2407	ol6_i386_latest_archive
	389-ds-base-libs-1.2.11.15-32.el6_5.i686.rpm	f982ff34f332898065d7cf6e82fa2742ca958e98797e3665e9a5cf74c02a860f	ELBA-2018-2407	ol6_u5_i386_patch
Oracle Linux 6 (x86_64)	389-ds-base-1.2.11.15-32.el6_5.src.rpm	60bd562ff6866c4f4741a90119583746ee2a6b4bfe6e383242dddd28d9cb4551	ELBA-2018-2407	ol6_u5_x86_64_patch
	389-ds-base-1.2.11.15-32.el6_5.src.rpm	60bd562ff6866c4f4741a90119583746ee2a6b4bfe6e383242dddd28d9cb4551	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-1.2.11.15-32.el6_5.x86_64.rpm	c62d4f6123145c5e8801b5fdf528d5d288de9f5bfa1604fc43a9c125cc299e9d	ELBA-2018-2407	ol6_u5_x86_64_patch
	389-ds-base-1.2.11.15-32.el6_5.x86_64.rpm	c62d4f6123145c5e8801b5fdf528d5d288de9f5bfa1604fc43a9c125cc299e9d	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-devel-1.2.11.15-32.el6_5.i686.rpm	5929dc50789e6f3577f31bf4fe3034dcd3e5126c0927a849171fb21a895f5fa0	ELBA-2018-2407	ol6_u5_x86_64_patch
	389-ds-base-devel-1.2.11.15-32.el6_5.i686.rpm	5929dc50789e6f3577f31bf4fe3034dcd3e5126c0927a849171fb21a895f5fa0	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-devel-1.2.11.15-32.el6_5.x86_64.rpm	20d34ecc9f6d302a667cf01f8b688f91d3c33974260ef3a650dfd399409d999f	ELBA-2018-2407	ol6_u5_x86_64_patch
	389-ds-base-devel-1.2.11.15-32.el6_5.x86_64.rpm	20d34ecc9f6d302a667cf01f8b688f91d3c33974260ef3a650dfd399409d999f	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-libs-1.2.11.15-32.el6_5.i686.rpm	f982ff34f332898065d7cf6e82fa2742ca958e98797e3665e9a5cf74c02a860f	ELBA-2018-2407	ol6_u5_x86_64_patch
	389-ds-base-libs-1.2.11.15-32.el6_5.i686.rpm	f982ff34f332898065d7cf6e82fa2742ca958e98797e3665e9a5cf74c02a860f	ELBA-2018-2407	ol6_x86_64_latest_archive
	389-ds-base-libs-1.2.11.15-32.el6_5.x86_64.rpm	55aee78fe32f274f9002dfe4b01a86bdfb7b54003351af7ab6083df273c57a68	ELBA-2018-2407	ol6_u5_x86_64_patch
	389-ds-base-libs-1.2.11.15-32.el6_5.x86_64.rpm	55aee78fe32f274f9002dfe4b01a86bdfb7b54003351af7ab6083df273c57a68	ELBA-2018-2407	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team