ELSA-2008-0164

ELSA-2008-0164 - Critical: krb5 security and bugfix update

Type:	SECURITY
Severity:	CRITICAL
Release Date:	2008-03-18

Description

[1.6.1-17.el5_1.1]
- add preliminary patch to fix use of uninitialized pointer / double-free in
KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add backported patch to fix use-after-free in libgssapi_krb5
(CVE-2007-5901)
(#415321)
- add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
(#415351)
- add preliminary patch to fix incorrect handling of high-numbered
descriptors
in the RPC library (CVE-2008-0947) (#433596)
- fix storage of delegated krb5 credentials when they've been wrapped up in
spnego (#436460)
- return a delegated credential handle even if the application didn't pass a
location to store the flags which would be used to indicate that
credentials
were delegated (#436465)
- add patch to fall back to TCP kpasswd servers for kdc-unreachable,
can't-resolve-server, and response-too-big errors (#436467)
- use the right sequence numbers when generating password-set/change
requests
for kpasswd servers after the first one (#436468)
- backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
structure the same way we would one which was allocated by the calling
application, to restore kinit's traditional behavior of doing a password
change right when it detects an expired password (#436470)

Related CVEs

CVE-2007-5901

CVE-2007-5971

CVE-2008-0062

CVE-2008-0063

CVE-2008-0947

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	krb5-1.6.1-17.el5_1.1.src.rpm	04b7201e594bee511bbbaedc4b902a58	ELSA-2014-1255
	krb5-devel-1.6.1-17.el5_1.1.i386.rpm	a2d4c7cfd3963ebc500f9abc7de5e5f4	ELSA-2014-1255
	krb5-libs-1.6.1-17.el5_1.1.i386.rpm	045eac0ec1970b2a5f4990ea4f970894	ELSA-2014-1255
	krb5-server-1.6.1-17.el5_1.1.i386.rpm	de9542e9cbce81bd2b7065fbb00218b7	ELSA-2014-1255
	krb5-workstation-1.6.1-17.el5_1.1.i386.rpm	d5be472a44e12eedb68abc1b56def921	ELSA-2014-1255
Oracle Linux 5 (x86_64)	krb5-1.6.1-17.el5_1.1.src.rpm	04b7201e594bee511bbbaedc4b902a58	ELSA-2014-1255
	krb5-devel-1.6.1-17.el5_1.1.i386.rpm	a2d4c7cfd3963ebc500f9abc7de5e5f4	ELSA-2014-1255
	krb5-devel-1.6.1-17.el5_1.1.x86_64.rpm	e7a444e70f933a5a5a5bf16aa3a5fc7c	ELSA-2014-1255
	krb5-libs-1.6.1-17.el5_1.1.i386.rpm	045eac0ec1970b2a5f4990ea4f970894	ELSA-2014-1255
	krb5-libs-1.6.1-17.el5_1.1.x86_64.rpm	026fb044cfe4818c84c1f632f25b9fa3	ELSA-2014-1255
	krb5-server-1.6.1-17.el5_1.1.x86_64.rpm	3b53d7e1c77da69246442856186aff31	ELSA-2014-1255
	krb5-workstation-1.6.1-17.el5_1.1.x86_64.rpm	aa507273a28cdbd0fd8ef1541fe927e8	ELSA-2014-1255

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team