ELSA-2008-0181

ELSA-2008-0181 - Critical: krb5 security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2008-03-18

Description

[1.2.7-68]
- add preliminary patch to fix use of uninitialized pointer / double-free in
KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add preliminary patch to fix incorrect handling of high-numbered
descriptors
in the RPC library (CVE-2008-0948) (#435087)

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 3 (i386)	krb5-1.2.7-68.src.rpm	eeecd5a992dddb7a1ed99a135b4d431362f0db4bf0c005ba1c704cc70a0e008f	ELSA-2010-0423	el3_i386_latest
	krb5-1.2.7-68.src.rpm	eeecd5a992dddb7a1ed99a135b4d431362f0db4bf0c005ba1c704cc70a0e008f	ELSA-2010-0423	el3_u9_i386_patch
	krb5-devel-1.2.7-68.i386.rpm	151358e67e7fc8be77bafd7e6e19884480b6f4205d00c6768184a1e9543761f8	ELSA-2010-0423	el3_i386_latest
	krb5-devel-1.2.7-68.i386.rpm	151358e67e7fc8be77bafd7e6e19884480b6f4205d00c6768184a1e9543761f8	ELSA-2010-0423	el3_u9_i386_patch
	krb5-libs-1.2.7-68.i386.rpm	0b558e9aefe446abfc8d76aa280ec8cdf75c676e9c178294fd4c6969199ce76b	ELSA-2010-0423	el3_i386_latest
	krb5-libs-1.2.7-68.i386.rpm	0b558e9aefe446abfc8d76aa280ec8cdf75c676e9c178294fd4c6969199ce76b	ELSA-2010-0423	el3_u9_i386_patch
	krb5-server-1.2.7-68.i386.rpm	f7b55cb6dce4445937c68db64358e28f98d7c27edcdec2a88705cd43d0c84e67	ELSA-2010-0423	el3_i386_latest
	krb5-server-1.2.7-68.i386.rpm	f7b55cb6dce4445937c68db64358e28f98d7c27edcdec2a88705cd43d0c84e67	ELSA-2010-0423	el3_u9_i386_patch
	krb5-workstation-1.2.7-68.i386.rpm	a6c1302c7289f19de563ff9fc67bccb8628d1462ce1a130fa260ad20687c0f3b	ELSA-2010-0423	el3_i386_latest
	krb5-workstation-1.2.7-68.i386.rpm	a6c1302c7289f19de563ff9fc67bccb8628d1462ce1a130fa260ad20687c0f3b	ELSA-2010-0423	el3_u9_i386_patch
Oracle Linux 3 (x86_64)	krb5-1.2.7-68.src.rpm	eeecd5a992dddb7a1ed99a135b4d431362f0db4bf0c005ba1c704cc70a0e008f	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-1.2.7-68.src.rpm	eeecd5a992dddb7a1ed99a135b4d431362f0db4bf0c005ba1c704cc70a0e008f	ELSA-2010-0423	el3_x86_64_latest
	krb5-devel-1.2.7-68.x86_64.rpm	717033a32042f9e0a74d70da25136b175ac1b28a21f94c5f6c9be0f19916096b	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-devel-1.2.7-68.x86_64.rpm	717033a32042f9e0a74d70da25136b175ac1b28a21f94c5f6c9be0f19916096b	ELSA-2010-0423	el3_x86_64_latest
	krb5-libs-1.2.7-68.i386.rpm	0b558e9aefe446abfc8d76aa280ec8cdf75c676e9c178294fd4c6969199ce76b	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-libs-1.2.7-68.i386.rpm	0b558e9aefe446abfc8d76aa280ec8cdf75c676e9c178294fd4c6969199ce76b	ELSA-2010-0423	el3_x86_64_latest
	krb5-libs-1.2.7-68.x86_64.rpm	7aa4c040f1eb94c2402b640452ec15f2c3c4f37e153d5ee4c83d78372352180f	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-libs-1.2.7-68.x86_64.rpm	7aa4c040f1eb94c2402b640452ec15f2c3c4f37e153d5ee4c83d78372352180f	ELSA-2010-0423	el3_x86_64_latest
	krb5-server-1.2.7-68.x86_64.rpm	aeac12614a805861627cafc114cae9d9d03ccff75e97e831b23460539f3b27ce	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-server-1.2.7-68.x86_64.rpm	aeac12614a805861627cafc114cae9d9d03ccff75e97e831b23460539f3b27ce	ELSA-2010-0423	el3_x86_64_latest
	krb5-workstation-1.2.7-68.x86_64.rpm	54ee97e06bf34b28c2525516247a0022f9729bb3119ccb91b7b7ad4de81c3a40	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-workstation-1.2.7-68.x86_64.rpm	54ee97e06bf34b28c2525516247a0022f9729bb3119ccb91b7b7ad4de81c3a40	ELSA-2010-0423	el3_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team