[Pkg-fedora-ds-maintainers] Bug#834233: Bug#834233: 389-ds-base: CVE-2016-5416: ACI readable by anonymous user

[Timo Aaltonen]

On 21.12.2016 20:07, Moritz Muehlenhoff wrote:
> On Sat, Aug 13, 2016 at 05:46:19PM +0200, Salvatore Bonaccorso wrote:
>> Source: 389-ds-base
>> Version: 1.3.3.5-4
>> Severity: important
>> Tags: security upstream
>> Forwarded: https://fedorahosted.org/389/ticket/48852
>>
>> Hi,
>>
>> the following vulnerability was published for 389-ds-base. I'm filling
>> to be able to track it in the BTS (I'm not familiar enough with
>> 389-ds-base, but looks that it's planned to fix that in 1.3.6).
>>
>> CVE-2016-5416[0]:
>> ACI readable by anonymous user
> 
> What's the status? It's been four months without a followup to this security
> bug...

Still unfixed upstream.


-- 
t