New branch '389-ds-base-1.2.11-CVE-2014-0132' available with the following
commits:
commit ffef8eb616609237ecc5109c18fc017b1215f95e
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Thu Mar 27 10:48:50 2014 -0700
bump version to 1.2.11.28
commit 6f756177ea29f3611a646ef0ce05066cc1a4bd2b
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Mon Mar 10 16:12:08 2014 -0700
Ticket #47739 - directory server is insecurely misinterpreting authzid on a
SASL/GSSAPI bind
Description: SASL_CB_PROXY_POLICY callback is not needed since we
don't support the case authid and authzid do not match. This patch
gets rid of the callback function ids_sasl_proxy_policy.
https://fedorahosted.org/389/ticket/47739
Reviewed by nkinder(a)redhat.com (Thank you, Nathan!!)
(cherry picked from commit 76acff12a86110d4165f94e2cba13ef5c7ebc38a)
(cherry picked from commit 9bc2b46b7c7ee4c975d04b041f73a5992906b07c)
(cherry picked from commit d2063c889feeba122e12f152e2e2c98aed4eb442)
(cherry picked from commit 614d72196e696395d5bc0a6d62f8be9d4ee41c5b)