ELSA-2008-0181

ELSA-2008-0181 - Critical: krb5 security update

Type:	SECURITY
Severity:	CRITICAL
Release Date:	2008-03-18

Description

[1.2.7-68]
- add preliminary patch to fix use of uninitialized pointer / double-free in
KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add preliminary patch to fix incorrect handling of high-numbered
descriptors
in the RPC library (CVE-2008-0948) (#435087)

Related CVEs

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 3 (i386)	krb5-1.2.7-68.src.rpm	68c97faf81ccd3942e6746a85db660fb	ELSA-2010-0423
	krb5-devel-1.2.7-68.i386.rpm	8a36f5efba921be9bbecf1326aa7158e	ELSA-2010-0423
	krb5-libs-1.2.7-68.i386.rpm	1fe799a0ebb4ea1901d75a133a966cda	ELSA-2010-0423
	krb5-server-1.2.7-68.i386.rpm	3600fa76be3f6faa25e2c664ee589787	ELSA-2010-0423
	krb5-workstation-1.2.7-68.i386.rpm	4e2fe545519f518a31061b93a5feee0e	ELSA-2010-0423
Oracle Linux 3 (x86_64)	krb5-1.2.7-68.src.rpm	68c97faf81ccd3942e6746a85db660fb	ELSA-2010-0423
	krb5-devel-1.2.7-68.x86_64.rpm	bfc01d4661d199bc610398828b50222e	ELSA-2010-0423
	krb5-libs-1.2.7-68.i386.rpm	1fe799a0ebb4ea1901d75a133a966cda	ELSA-2010-0423
	krb5-libs-1.2.7-68.x86_64.rpm	7754d4fcc6462ee9c715706b06c0f042	ELSA-2010-0423
	krb5-server-1.2.7-68.x86_64.rpm	1cc417a1b314d4d0c73565a8cf548ec8	ELSA-2010-0423
	krb5-workstation-1.2.7-68.x86_64.rpm	1cb4670ca9009d9fbd93be73e117945c	ELSA-2010-0423

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team