ELSA-2009-0409

ELSA-2009-0409 - krb5 security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2009-04-07

Description

[1.3.4-60.el4_7.2]
- whoops, actually add the patches

[1.3.4-60.el4_7.1]
- add fix for attempt to free uninitialized pointer in the ASN.1 decoder
(#491835, CVE-2009-0846)
- add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)

Related CVEs

CVE-2009-0846

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 4 (i386)	krb5-1.3.4-60.el4_7.2.src.rpm	5fe99b483e300a3830cfc5d896c041ce	ELSA-2011-1851
	krb5-devel-1.3.4-60.el4_7.2.i386.rpm	bfc83a3590cb31db26af52843a589c5e	ELSA-2011-1851
	krb5-libs-1.3.4-60.el4_7.2.i386.rpm	a10de773878e8997a901aecc00e960cd	ELSA-2011-1851
	krb5-server-1.3.4-60.el4_7.2.i386.rpm	bfff9ab34c92ff7eb533dcc5b7474c78	ELSA-2011-1851
	krb5-workstation-1.3.4-60.el4_7.2.i386.rpm	eea1716087df7cad3589b95ac9b0d128	ELSA-2011-1851
Oracle Linux 4 (ia64)	krb5-1.3.4-60.el4_7.2.src.rpm	5fe99b483e300a3830cfc5d896c041ce	ELSA-2011-1851
	krb5-devel-1.3.4-60.el4_7.2.ia64.rpm	5fbc4d7f1d6db1febd4bcbc0d719dc3f	ELSA-2011-1851
	krb5-libs-1.3.4-60.el4_7.2.i386.rpm	a10de773878e8997a901aecc00e960cd	ELSA-2011-1851
	krb5-libs-1.3.4-60.el4_7.2.ia64.rpm	e40fc31e97466cd9b7e92c8d7a451ebf	ELSA-2011-1851
	krb5-server-1.3.4-60.el4_7.2.ia64.rpm	b8b76119c52280d79e9c857b2e5ecd14	ELSA-2011-1851
	krb5-workstation-1.3.4-60.el4_7.2.ia64.rpm	b9d40b1f6ae0a8cfa0d4a969768ffdf9	ELSA-2011-1851
Oracle Linux 4 (x86_64)	krb5-1.3.4-60.el4_7.2.src.rpm	5fe99b483e300a3830cfc5d896c041ce	ELSA-2011-1851
	krb5-devel-1.3.4-60.el4_7.2.x86_64.rpm	2e8ea5710dfee9a8f3d12f340c3a14fc	ELSA-2011-1851
	krb5-libs-1.3.4-60.el4_7.2.i386.rpm	a10de773878e8997a901aecc00e960cd	ELSA-2011-1851
	krb5-libs-1.3.4-60.el4_7.2.x86_64.rpm	ff649d41802c9af9b0cf9937fa6c69c7	ELSA-2011-1851
	krb5-server-1.3.4-60.el4_7.2.x86_64.rpm	b0a9e96e2177bb38d12519ad45b870db	ELSA-2011-1851
	krb5-workstation-1.3.4-60.el4_7.2.x86_64.rpm	71c3f95bd5e538dadb29ee261c7bc8ac	ELSA-2011-1851

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team