ELSA-2012-1131

ELSA-2012-1131 - krb5 security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2012-07-31

Description

[1.9-33.2]
- pull up the patch to correct a possible NULL pointer dereference in
kadmind (CVE-2012-1013, #827517)

[1.9-33.1]
- add candidate patch from upstream to fix freeing uninitialized pointer in
the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)

Related CVEs

CVE-2012-1013

CVE-2012-1015

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	krb5-1.9-33.el6_3.2.src.rpm	b95643a7e3324365b8b0118e21efd716	ELSA-2016-0493
	krb5-devel-1.9-33.el6_3.2.i686.rpm	699f3aa7a4353cf0f89fe7d247b9f448	ELSA-2016-0493
	krb5-libs-1.9-33.el6_3.2.i686.rpm	0060e638683fa02659e33850ed7a10fa	ELSA-2016-0493
	krb5-pkinit-openssl-1.9-33.el6_3.2.i686.rpm	2609e63a48f2b9ba589802356512b789	ELSA-2016-0493
	krb5-server-1.9-33.el6_3.2.i686.rpm	c2619c869fb42fee7a198b1fe8128eb6	ELSA-2016-0493
	krb5-server-ldap-1.9-33.el6_3.2.i686.rpm	25bedf77ba78e4916990652dbc9dc705	ELSA-2016-0493
	krb5-workstation-1.9-33.el6_3.2.i686.rpm	83d3b4c3713868da0dee7f896ddac8eb	ELSA-2016-0493
Oracle Linux 6 (x86_64)	krb5-1.9-33.el6_3.2.src.rpm	b95643a7e3324365b8b0118e21efd716	ELSA-2016-0493
	krb5-devel-1.9-33.el6_3.2.i686.rpm	699f3aa7a4353cf0f89fe7d247b9f448	ELSA-2016-0493
	krb5-devel-1.9-33.el6_3.2.x86_64.rpm	17f3a0d8cb7fd4e9ed5426a907860de8	ELSA-2016-0493
	krb5-libs-1.9-33.el6_3.2.i686.rpm	0060e638683fa02659e33850ed7a10fa	ELSA-2016-0493
	krb5-libs-1.9-33.el6_3.2.x86_64.rpm	d2955e33f7dd639ff9660349617b4ad6	ELSA-2016-0493
	krb5-pkinit-openssl-1.9-33.el6_3.2.x86_64.rpm	e5425711b64243e97809976e2d9be973	ELSA-2016-0493
	krb5-server-1.9-33.el6_3.2.x86_64.rpm	b642a93b719013b11df11dba1b077e9e	ELSA-2016-0493
	krb5-server-ldap-1.9-33.el6_3.2.i686.rpm	25bedf77ba78e4916990652dbc9dc705	ELSA-2016-0493
	krb5-server-ldap-1.9-33.el6_3.2.x86_64.rpm	94ed9658cffeaea63af6564b79e3bdee	ELSA-2016-0493
	krb5-workstation-1.9-33.el6_3.2.x86_64.rpm	5b68c0a2083a78178596a22851cf8ed1	ELSA-2016-0493

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team