ELSA-2018-0666

ELSA-2018-0666 - krb5 security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2018-04-16

Description

[1.15.1-18]
- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089

[1.15.1-17]
- Drop certauth test changes that prevented runnig it
- Resolves: #1498767

[1.15.1-16]
- Drop irrelevant DIR trigger logic
- Resolves: #1431198

[1.15.1-15]
- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767

[1.15.1-14]
- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768

[1.15.1-13]
- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198

[1.15.1-12]
- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982

[1.15.1-11]
- Make t_certauth.py runnable
- Resolves: #1443388

[1.15.1-10]
- Add context SSF query support
- Resolves: #1472956

[1.15.1-9]
- Remove incomplete PKINIT OCSP support
- Resolves: #1460089

Related CVEs

CVE-2017-7562

CVE-2017-11368

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	krb5-1.15.1-18.el7.src.rpm	740244f5b632d273c8c2bec9e9ff136c	ELBA-2020-3982
	krb5-devel-1.15.1-18.el7.aarch64.rpm	2f483fb39287feb9ffb2631c5fcb605c	ELBA-2020-3982
	krb5-libs-1.15.1-18.el7.aarch64.rpm	9a976579f4e75937da569214c7945982	ELBA-2020-3982
	krb5-pkinit-1.15.1-18.el7.aarch64.rpm	2315ea91c894cfd1f1458af9d90108f1	ELBA-2020-3982
	krb5-server-1.15.1-18.el7.aarch64.rpm	a4995dc7f1239eb7b01a9e25876271a9	ELBA-2020-3982
	krb5-server-ldap-1.15.1-18.el7.aarch64.rpm	d73c192fc78edbce47de05504526ad29	ELBA-2020-3982
	krb5-workstation-1.15.1-18.el7.aarch64.rpm	f75ce119ca0c6b9f57842cfcbb2c224f	ELBA-2020-3982
	libkadm5-1.15.1-18.el7.aarch64.rpm	a2cd8b43d9bf8f02a4ed85ab6de0ea8e	ELBA-2020-3982
Oracle Linux 7 (x86_64)	krb5-1.15.1-18.el7.src.rpm	740244f5b632d273c8c2bec9e9ff136c	ELBA-2020-3982
	krb5-devel-1.15.1-18.el7.i686.rpm	749d94c731acecf5b7c8a3638216b301	ELBA-2020-3982
	krb5-devel-1.15.1-18.el7.x86_64.rpm	6430a63c2c99e54b3ceae1c34459615b	ELBA-2020-3982
	krb5-libs-1.15.1-18.el7.i686.rpm	d918345e0695972ae9935c314d2a2fe2	ELBA-2020-3982
	krb5-libs-1.15.1-18.el7.x86_64.rpm	cbc3c3c56a166984337f0171be8e779a	ELBA-2020-3982
	krb5-pkinit-1.15.1-18.el7.x86_64.rpm	55878dc74783c7fb1ddc21b0db505b71	ELBA-2020-3982
	krb5-server-1.15.1-18.el7.x86_64.rpm	fcdca234e05460c4f9cef2acc370f0bc	ELBA-2020-3982
	krb5-server-ldap-1.15.1-18.el7.x86_64.rpm	54d1c9b56e98e6d9e81eeffcbe44a46c	ELBA-2020-3982
	krb5-workstation-1.15.1-18.el7.x86_64.rpm	5ed3e3cea080d507fc73fbc155a5b942	ELBA-2020-3982
	libkadm5-1.15.1-18.el7.i686.rpm	e12174edf88b0c25fb6248ed974dcc9e	ELBA-2020-3982
	libkadm5-1.15.1-18.el7.x86_64.rpm	e738e21b1ad5c781296e2167a9e39aa5	ELBA-2020-3982

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team