drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Preisgabe von Informationen in redhat-ds
Name: |
Preisgabe von Informationen in redhat-ds |
|
ID: |
RHSA-2021:0599-01 |
|
Distribution: |
Red Hat |
|
Plattformen: |
Red Hat Directory Server |
|
Datum: |
Mi, 17. Februar 2021, 06:26 |
|
Referenzen: |
https://access.redhat.com/security/cve/CVE-2020-35518 |
|
Applikationen: |
389 Directory Server |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
===================================================================== Red Hat Security Advisory
Synopsis: Moderate: redhat-ds:11 security and bug fix update Advisory ID: RHSA-2021:0599-01 Product: Red Hat Directory Server Advisory URL: https://access.redhat.com/errata/RHSA-2021:0599 Issue date: 2021-02-16 CVE Names: CVE-2020-35518 =====================================================================
1. Summary:
An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.1 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
2. Relevant releases/architectures:
Red Hat Directory Server 11.1 for RHEL 8 - noarch, x86_64
3. Description:
Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration, the Administration Server HTTP agent package, and the GUI console packages.
Security Fix(es):
* 389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation (BZ#1909675)
4. Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1905565 - CVE-2020-35518 389-ds-base: information disclosure during the binding of a DN 1909675 - RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation 1923217 - CVE-2020-35518 RHDS: information disclosure during the binding of a DN
6. Package List:
Red Hat Directory Server 11.1 for RHEL 8:
Source: 389-ds-base-1.4.2.12-5.module+el8dsrv+9896+eb95346c.src.rpm
noarch: cockpit-389-ds-1.4.2.12-5.module+el8dsrv+9896+eb95346c.noarch.rpm python3-lib389-1.4.2.12-5.module+el8dsrv+9896+eb95346c.noarch.rpm
x86_64: 389-ds-base-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm 389-ds-base-debuginfo-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm 389-ds-base-debugsource-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm 389-ds-base-devel-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm 389-ds-base-legacy-tools-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm 389-ds-base-legacy-tools-debuginfo-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rp m 389-ds-base-libs-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm 389-ds-base-libs-debuginfo-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm 389-ds-base-snmp-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm 389-ds-base-snmp-debuginfo-1.4.2.12-5.module+el8dsrv+9896+eb95346c.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2020-35518 https://access.redhat.com/security/updates/classification/#moderate
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBYCwPgNzjgjWX9erEAQjX1RAAiBMEyJKy2m+PxptfH+Ig8jYh13+eCHtN l7hM68yWhCKuX0j8M96EDxNdjgH7HFNKw0GCTWjuyyNZNT7tjfHfAT9NBrPe04s8 9C1OH3o2JGDLOoOOk/ZpakooINGs8HV1DKJ7wYlxujsByPqhPjnMA1R4j6NPPDss tMj6kg8lYQpe8yyeXDF2FcnfyXf/yysT7yUqDiGAW7aPJxSzxOByxVnwXfBMG4eg FMnd917E/nZmsYUIjLd41zKvupCt9zU6ZqjI4H0AJxiWrlqLns3C7BkCEHdzEfmc 8KEe8ah4i0c3DiQwYHmG08AuBvYU1aZHPuE4ros7dODelf4zo99NjDNnXDfyyN4K mv3jnaNDAHlC1lIu0lbdYNzUPAO88l8vWXXIGVEs4yF6n8QIw+vHwe3/nHqTsR13 9yhRj+Sl2PqBgpN6sBXG43XFtjttpXmu7DA+I/ifCw2pQCYvuMbBCtlWeoVB6PVK MKR1hp1DBQni6o5huW8hwgAdXKDmzKmpRwYYspDrpMI2e/7O+0GF+7o3oFd7eNsJ ELEHkJ6HNEqr7UAvR8k+G7lQrrB8XWUSUVVu5C1DFI7aNDvCokFBkwE1SGu6p08h NzSIozsTY38p+AfOCNe5LNJlQzTtN4va3BzvDIGwRx6pXsP8MTtY1L4aEgR+BbPn 1DRdxcFORU0= =heLl -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@listman.redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce
|
|
|
|