[Pkg-fedora-ds-maintainers] Bug#834233: 389-ds-base: CVE-2016-5416: ACI readable by anonymous user

[Salvatore Bonaccorso]

Source: 389-ds-base
Version: 1.3.3.5-4
Severity: important
Tags: security upstream
Forwarded: https://fedorahosted.org/389/ticket/48852

Hi,

the following vulnerability was published for 389-ds-base. I'm filling
to be able to track it in the BTS (I'm not familiar enough with
389-ds-base, but looks that it's planned to fix that in 1.3.6).

CVE-2016-5416[0]:
ACI readable by anonymous user

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-5416
[1] https://fedorahosted.org/389/ticket/48852

Regards,
Salvatore