389-ds-base: CVE-2016-5416: ACI readable by anonymous user

Debian Bug report logs - #834233
389-ds-base: CVE-2016-5416: ACI readable by anonymous user

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: 389-ds-base: CVE-2016-5416: ACI readable by anonymous user

Date: Sat, 13 Aug 2016 17:46:19 +0200

Source: 389-ds-base
Version: 1.3.3.5-4
Severity: important
Tags: security upstream
Forwarded: https://fedorahosted.org/389/ticket/48852

Hi,

the following vulnerability was published for 389-ds-base. I'm filling
to be able to track it in the BTS (I'm not familiar enough with
389-ds-base, but looks that it's planned to fix that in 1.3.6).

CVE-2016-5416[0]:
ACI readable by anonymous user

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-5416
[1] https://fedorahosted.org/389/ticket/48852

Regards,
Salvatore

Message #10 received at 834233@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@inutil.org>

To: 834233@bugs.debian.org

Subject: Re: 389-ds-base: CVE-2016-5416: ACI readable by anonymous user

Date: Wed, 21 Dec 2016 19:07:11 +0100

On Sat, Aug 13, 2016 at 05:46:19PM +0200, Salvatore Bonaccorso wrote:
> Source: 389-ds-base
> Version: 1.3.3.5-4
> Severity: important
> Tags: security upstream
> Forwarded: https://fedorahosted.org/389/ticket/48852
> 
> Hi,
> 
> the following vulnerability was published for 389-ds-base. I'm filling
> to be able to track it in the BTS (I'm not familiar enough with
> 389-ds-base, but looks that it's planned to fix that in 1.3.6).
> 
> CVE-2016-5416[0]:
> ACI readable by anonymous user

What's the status? It's been four months without a followup to this security
bug...

Cheers,
        Moritz

Message #15 received at 834233@bugs.debian.org (full text, mbox, reply):

From: Timo Aaltonen <tjaalton@debian.org>

To: Moritz Muehlenhoff <jmm@inutil.org>, 834233@bugs.debian.org

Subject: Re: [Pkg-fedora-ds-maintainers] Bug#834233: 389-ds-base: CVE-2016-5416: ACI readable by anonymous user

Date: Wed, 21 Dec 2016 21:30:56 +0200

On 21.12.2016 20:07, Moritz Muehlenhoff wrote:
> On Sat, Aug 13, 2016 at 05:46:19PM +0200, Salvatore Bonaccorso wrote:
>> Source: 389-ds-base
>> Version: 1.3.3.5-4
>> Severity: important
>> Tags: security upstream
>> Forwarded: https://fedorahosted.org/389/ticket/48852
>>
>> Hi,
>>
>> the following vulnerability was published for 389-ds-base. I'm filling
>> to be able to track it in the BTS (I'm not familiar enough with
>> 389-ds-base, but looks that it's planned to fix that in 1.3.6).
>>
>> CVE-2016-5416[0]:
>> ACI readable by anonymous user
> 
> What's the status? It's been four months without a followup to this security
> bug...

Still unfixed upstream.


-- 
t

Message #22 received at 834233-done@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 834233-done@bugs.debian.org,912224-done@bugs.debian.org,

Cc: 389-ds-base@packages.debian.org

Subject: Bug#915510: Removed package(s) from unstable

Date: Mon, 14 Jan 2019 17:54:40 +0000

Version: 1.4.0.19-3+rm

Dear submitter,

as the package 389-ds-base has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/915510

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)

Message #31 received at 834233@bugs.debian.org (full text, mbox, reply):

From: Scott Kitterman <debian@kitterman.com>

To: 834233@bugs.debian.org

Subject: Re: Bug#915510: Removed package(s) from unstable

Date: Mon, 14 Jan 2019 14:15:28 -0500

On Mon, 14 Jan 2019 17:54:40 +0000 Debian FTP Masters <ftpmaster@ftp-master.debian.org> wrote:
> Version: 1.4.0.19-3+rm
...

Package was removed in error.

Bug reopened.

Scott K

Send a report that this bug log contains spam.