ELSA-2009-0410

ELSA-2009-0410 - krb5 security update

Type:	SECURITY
Impact:	CRITICAL
Release Date:	2009-04-07

Description

[1.2.7-70]
- override $(SHLIB_EXPFLAGS) at build-time to ensure that shared libraries
don't include an RPATH (internal tools)

[1.2.7-69]
- add backported fix for attempt to free uninitialized pointer in the ASN.1
decoder (#491834, CVE-2009-0846)
- add backported fix for bug in length validation in the ASN.1 decoder
(CVE-2009-0847)

Related CVEs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 3 (i386)	krb5-1.2.7-70.src.rpm	fca4ab067e9eef57f0e26ee7319c361d8c5f9da8d3ed21c14dace444a794af44	ELSA-2010-0423	el3_i386_latest
	krb5-1.2.7-70.src.rpm	fca4ab067e9eef57f0e26ee7319c361d8c5f9da8d3ed21c14dace444a794af44	ELSA-2010-0423	el3_u9_i386_patch
	krb5-devel-1.2.7-70.i386.rpm	fb8a39030dcf0b56e0e129ed6ea2515e8bc296b3b3477bd4672d5f1c30a6f443	ELSA-2010-0423	el3_i386_latest
	krb5-devel-1.2.7-70.i386.rpm	fb8a39030dcf0b56e0e129ed6ea2515e8bc296b3b3477bd4672d5f1c30a6f443	ELSA-2010-0423	el3_u9_i386_patch
	krb5-libs-1.2.7-70.i386.rpm	8f24e8dda906b52c35dbf5f19c2c0f0994f7b4c660eb90e682d121ca2c3f9a87	ELSA-2010-0423	el3_i386_latest
	krb5-libs-1.2.7-70.i386.rpm	8f24e8dda906b52c35dbf5f19c2c0f0994f7b4c660eb90e682d121ca2c3f9a87	ELSA-2010-0423	el3_u9_i386_patch
	krb5-server-1.2.7-70.i386.rpm	a060822c392bad8832b40331b0675b006ee97bfe121c44b28be4518dda03c769	ELSA-2010-0423	el3_i386_latest
	krb5-server-1.2.7-70.i386.rpm	a060822c392bad8832b40331b0675b006ee97bfe121c44b28be4518dda03c769	ELSA-2010-0423	el3_u9_i386_patch
	krb5-workstation-1.2.7-70.i386.rpm	b167441c19af6b3ee4ed36325ea6abbca8b7a31858cf8bd14bba325ca1c45502	ELSA-2010-0423	el3_i386_latest
	krb5-workstation-1.2.7-70.i386.rpm	b167441c19af6b3ee4ed36325ea6abbca8b7a31858cf8bd14bba325ca1c45502	ELSA-2010-0423	el3_u9_i386_patch
Oracle Linux 3 (x86_64)	krb5-1.2.7-70.src.rpm	fca4ab067e9eef57f0e26ee7319c361d8c5f9da8d3ed21c14dace444a794af44	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-1.2.7-70.src.rpm	fca4ab067e9eef57f0e26ee7319c361d8c5f9da8d3ed21c14dace444a794af44	ELSA-2010-0423	el3_x86_64_latest
	krb5-devel-1.2.7-70.x86_64.rpm	5749d91451bd22f3d663b90d91c4463eebc94eff7bebc056865cb8a1c44e7dee	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-devel-1.2.7-70.x86_64.rpm	5749d91451bd22f3d663b90d91c4463eebc94eff7bebc056865cb8a1c44e7dee	ELSA-2010-0423	el3_x86_64_latest
	krb5-libs-1.2.7-70.i386.rpm	8f24e8dda906b52c35dbf5f19c2c0f0994f7b4c660eb90e682d121ca2c3f9a87	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-libs-1.2.7-70.i386.rpm	8f24e8dda906b52c35dbf5f19c2c0f0994f7b4c660eb90e682d121ca2c3f9a87	ELSA-2010-0423	el3_x86_64_latest
	krb5-libs-1.2.7-70.x86_64.rpm	49bca323c89429a809a5ffc6d4d1b443066fbec12bbcd0998f1cf71f1eee5631	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-libs-1.2.7-70.x86_64.rpm	49bca323c89429a809a5ffc6d4d1b443066fbec12bbcd0998f1cf71f1eee5631	ELSA-2010-0423	el3_x86_64_latest
	krb5-server-1.2.7-70.x86_64.rpm	e62b0265d8257497196870d2ad761af2daa2ac7e515e6e7607ff871eef3f557a	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-server-1.2.7-70.x86_64.rpm	e62b0265d8257497196870d2ad761af2daa2ac7e515e6e7607ff871eef3f557a	ELSA-2010-0423	el3_x86_64_latest
	krb5-workstation-1.2.7-70.x86_64.rpm	3bf8b6216ed75467f7e9197644d092556116cd5c40b49a139cb485013c247fcb	ELSA-2010-0423	el3_u9_x86_64_patch
	krb5-workstation-1.2.7-70.x86_64.rpm	3bf8b6216ed75467f7e9197644d092556116cd5c40b49a139cb485013c247fcb	ELSA-2010-0423	el3_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team