ELSA-2023-6699

ELSA-2023-6699 - krb5 security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-11-11

Description

[1.21.1-1.0.1]
- Fixed race condition in krb5_set_password() [Orabug: 33609767]

[1.21.1-1]
- New upstream version (1.21.1)
- Fix double-free in KDC TGS processing (CVE-2023-39975)
- Add support for 'pac_privsvr_enctype' KDB string attribute
Resolves: rhbz#2060421

Related CVEs

CVE-2023-39975

CVE-2023-36054

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	krb5-1.21.1-1.0.1.el9.src.rpm	068d5921c3e1d3e76693b21471a7e88740c282b2fc87d380eeac970f7be9675d	-	ol9_aarch64_appstream
	krb5-1.21.1-1.0.1.el9.src.rpm	068d5921c3e1d3e76693b21471a7e88740c282b2fc87d380eeac970f7be9675d	-	ol9_aarch64_baseos_latest
	krb5-1.21.1-1.0.1.el9.src.rpm	068d5921c3e1d3e76693b21471a7e88740c282b2fc87d380eeac970f7be9675d	-	ol9_aarch64_u3_baseos_base
	krb5-1.21.1-1.0.1.el9.src.rpm	068d5921c3e1d3e76693b21471a7e88740c282b2fc87d380eeac970f7be9675d	-	ol9_aarch64_u4_baseos_base
	krb5-devel-1.21.1-1.0.1.el9.aarch64.rpm	6363340705238c9c60d1e19f55fa86c406d8a4129c637cf2a3d5870cb6657f16	-	ol9_aarch64_appstream
	krb5-libs-1.21.1-1.0.1.el9.aarch64.rpm	babf15f32f1f88a6cfa24f74cb37e8b82e7364849f85190b7b1744614cab4767	-	ol9_aarch64_baseos_latest
	krb5-libs-1.21.1-1.0.1.el9.aarch64.rpm	babf15f32f1f88a6cfa24f74cb37e8b82e7364849f85190b7b1744614cab4767	-	ol9_aarch64_u3_baseos_base
	krb5-libs-1.21.1-1.0.1.el9.aarch64.rpm	babf15f32f1f88a6cfa24f74cb37e8b82e7364849f85190b7b1744614cab4767	-	ol9_aarch64_u4_baseos_base
	krb5-pkinit-1.21.1-1.0.1.el9.aarch64.rpm	fbce85cde05bbf8b274ade8500478e2e52080aec69895b9d62f7e69ecc9f7293	-	ol9_aarch64_baseos_latest
	krb5-pkinit-1.21.1-1.0.1.el9.aarch64.rpm	fbce85cde05bbf8b274ade8500478e2e52080aec69895b9d62f7e69ecc9f7293	-	ol9_aarch64_u3_baseos_base
	krb5-pkinit-1.21.1-1.0.1.el9.aarch64.rpm	fbce85cde05bbf8b274ade8500478e2e52080aec69895b9d62f7e69ecc9f7293	-	ol9_aarch64_u4_baseos_base
	krb5-server-1.21.1-1.0.1.el9.aarch64.rpm	8b49072ca6580b4a76d4269bb9927434aff1e29f32a0617533db5af1077fbadf	-	ol9_aarch64_baseos_latest
	krb5-server-1.21.1-1.0.1.el9.aarch64.rpm	8b49072ca6580b4a76d4269bb9927434aff1e29f32a0617533db5af1077fbadf	-	ol9_aarch64_u3_baseos_base
	krb5-server-1.21.1-1.0.1.el9.aarch64.rpm	8b49072ca6580b4a76d4269bb9927434aff1e29f32a0617533db5af1077fbadf	-	ol9_aarch64_u4_baseos_base
	krb5-server-ldap-1.21.1-1.0.1.el9.aarch64.rpm	57a9348d4c7a74e6784e3b9ea9b09a744646f1c51ba14f769ca5eb2b68fbfc38	-	ol9_aarch64_baseos_latest
	krb5-server-ldap-1.21.1-1.0.1.el9.aarch64.rpm	57a9348d4c7a74e6784e3b9ea9b09a744646f1c51ba14f769ca5eb2b68fbfc38	-	ol9_aarch64_u3_baseos_base
	krb5-server-ldap-1.21.1-1.0.1.el9.aarch64.rpm	57a9348d4c7a74e6784e3b9ea9b09a744646f1c51ba14f769ca5eb2b68fbfc38	-	ol9_aarch64_u4_baseos_base
	krb5-workstation-1.21.1-1.0.1.el9.aarch64.rpm	5c45fd447a44ce7c2fe4a2b391e3ea0551e221dc2c56cdb3476f8c0de088397e	-	ol9_aarch64_baseos_latest
	krb5-workstation-1.21.1-1.0.1.el9.aarch64.rpm	5c45fd447a44ce7c2fe4a2b391e3ea0551e221dc2c56cdb3476f8c0de088397e	-	ol9_aarch64_u3_baseos_base
	krb5-workstation-1.21.1-1.0.1.el9.aarch64.rpm	5c45fd447a44ce7c2fe4a2b391e3ea0551e221dc2c56cdb3476f8c0de088397e	-	ol9_aarch64_u4_baseos_base
	libkadm5-1.21.1-1.0.1.el9.aarch64.rpm	e68e150f9de0be12023fa08bf936684d887a3b4ecbd29474a369e3189e77a008	-	ol9_aarch64_baseos_latest
	libkadm5-1.21.1-1.0.1.el9.aarch64.rpm	e68e150f9de0be12023fa08bf936684d887a3b4ecbd29474a369e3189e77a008	-	ol9_aarch64_u3_baseos_base
	libkadm5-1.21.1-1.0.1.el9.aarch64.rpm	e68e150f9de0be12023fa08bf936684d887a3b4ecbd29474a369e3189e77a008	-	ol9_aarch64_u4_baseos_base
Oracle Linux 9 (x86_64)	krb5-1.21.1-1.0.1.el9.src.rpm	068d5921c3e1d3e76693b21471a7e88740c282b2fc87d380eeac970f7be9675d	-	ol9_x86_64_appstream
	krb5-1.21.1-1.0.1.el9.src.rpm	068d5921c3e1d3e76693b21471a7e88740c282b2fc87d380eeac970f7be9675d	-	ol9_x86_64_baseos_latest
	krb5-1.21.1-1.0.1.el9.src.rpm	068d5921c3e1d3e76693b21471a7e88740c282b2fc87d380eeac970f7be9675d	-	ol9_x86_64_u3_baseos_base
	krb5-1.21.1-1.0.1.el9.src.rpm	068d5921c3e1d3e76693b21471a7e88740c282b2fc87d380eeac970f7be9675d	-	ol9_x86_64_u4_baseos_base
	krb5-devel-1.21.1-1.0.1.el9.i686.rpm	07fd3ac399a7fe553930d572787814fe4d55876e7c816d2076b65fc97e33f0ab	-	ol9_x86_64_appstream
	krb5-devel-1.21.1-1.0.1.el9.x86_64.rpm	1e1bd0ae3d79129bf7c15ea15eebfbe9b5147f5cd67106c9addb674507d30782	-	ol9_x86_64_appstream
	krb5-libs-1.21.1-1.0.1.el9.i686.rpm	d7695b4614f6089beb8383ebb6dc1bbcefcfbf55d52e08762f65bc167d6bc345	-	ol9_x86_64_baseos_latest
	krb5-libs-1.21.1-1.0.1.el9.i686.rpm	d7695b4614f6089beb8383ebb6dc1bbcefcfbf55d52e08762f65bc167d6bc345	-	ol9_x86_64_u3_baseos_base
	krb5-libs-1.21.1-1.0.1.el9.i686.rpm	d7695b4614f6089beb8383ebb6dc1bbcefcfbf55d52e08762f65bc167d6bc345	-	ol9_x86_64_u4_baseos_base
	krb5-libs-1.21.1-1.0.1.el9.x86_64.rpm	75d5055ce8d59dfba8f3bafe7b0e947a9564346d4d83d083ba7ad083dbbc7b28	-	ol9_x86_64_baseos_latest
	krb5-libs-1.21.1-1.0.1.el9.x86_64.rpm	75d5055ce8d59dfba8f3bafe7b0e947a9564346d4d83d083ba7ad083dbbc7b28	-	ol9_x86_64_u3_baseos_base
	krb5-libs-1.21.1-1.0.1.el9.x86_64.rpm	75d5055ce8d59dfba8f3bafe7b0e947a9564346d4d83d083ba7ad083dbbc7b28	-	ol9_x86_64_u4_baseos_base
	krb5-pkinit-1.21.1-1.0.1.el9.i686.rpm	f7b63371429e906904d1b963df62234b1caa92d9053986a1b82c346ba5e4a392	-	ol9_x86_64_baseos_latest
	krb5-pkinit-1.21.1-1.0.1.el9.i686.rpm	f7b63371429e906904d1b963df62234b1caa92d9053986a1b82c346ba5e4a392	-	ol9_x86_64_u3_baseos_base
	krb5-pkinit-1.21.1-1.0.1.el9.i686.rpm	f7b63371429e906904d1b963df62234b1caa92d9053986a1b82c346ba5e4a392	-	ol9_x86_64_u4_baseos_base
	krb5-pkinit-1.21.1-1.0.1.el9.x86_64.rpm	a4569db473427d39e1abbb94e85b989183e85d70f2c234c966937b068a8be4da	-	ol9_x86_64_baseos_latest
	krb5-pkinit-1.21.1-1.0.1.el9.x86_64.rpm	a4569db473427d39e1abbb94e85b989183e85d70f2c234c966937b068a8be4da	-	ol9_x86_64_u3_baseos_base
	krb5-pkinit-1.21.1-1.0.1.el9.x86_64.rpm	a4569db473427d39e1abbb94e85b989183e85d70f2c234c966937b068a8be4da	-	ol9_x86_64_u4_baseos_base
	krb5-server-1.21.1-1.0.1.el9.i686.rpm	d38371074f37b0fc9fc2aeb4cbfb4709b46b583dba362a3f4646d58688ed7f40	-	ol9_x86_64_baseos_latest
	krb5-server-1.21.1-1.0.1.el9.i686.rpm	d38371074f37b0fc9fc2aeb4cbfb4709b46b583dba362a3f4646d58688ed7f40	-	ol9_x86_64_u3_baseos_base
	krb5-server-1.21.1-1.0.1.el9.i686.rpm	d38371074f37b0fc9fc2aeb4cbfb4709b46b583dba362a3f4646d58688ed7f40	-	ol9_x86_64_u4_baseos_base
	krb5-server-1.21.1-1.0.1.el9.x86_64.rpm	603e2a1f491125b0803ece79919dc840e3f531cbb4793f68dc57a4de55821b96	-	ol9_x86_64_baseos_latest
	krb5-server-1.21.1-1.0.1.el9.x86_64.rpm	603e2a1f491125b0803ece79919dc840e3f531cbb4793f68dc57a4de55821b96	-	ol9_x86_64_u3_baseos_base
	krb5-server-1.21.1-1.0.1.el9.x86_64.rpm	603e2a1f491125b0803ece79919dc840e3f531cbb4793f68dc57a4de55821b96	-	ol9_x86_64_u4_baseos_base
	krb5-server-ldap-1.21.1-1.0.1.el9.i686.rpm	8446c739289ead8726b23fc1decfb0f5fc083784ee888a1704bc5a86a41f1c08	-	ol9_x86_64_baseos_latest
	krb5-server-ldap-1.21.1-1.0.1.el9.i686.rpm	8446c739289ead8726b23fc1decfb0f5fc083784ee888a1704bc5a86a41f1c08	-	ol9_x86_64_u3_baseos_base
	krb5-server-ldap-1.21.1-1.0.1.el9.i686.rpm	8446c739289ead8726b23fc1decfb0f5fc083784ee888a1704bc5a86a41f1c08	-	ol9_x86_64_u4_baseos_base
	krb5-server-ldap-1.21.1-1.0.1.el9.x86_64.rpm	1204b32da0e2b42bb7a8d419eb7fd1b7570b07c688853a47aae77d2d9907ca2a	-	ol9_x86_64_baseos_latest
	krb5-server-ldap-1.21.1-1.0.1.el9.x86_64.rpm	1204b32da0e2b42bb7a8d419eb7fd1b7570b07c688853a47aae77d2d9907ca2a	-	ol9_x86_64_u3_baseos_base
	krb5-server-ldap-1.21.1-1.0.1.el9.x86_64.rpm	1204b32da0e2b42bb7a8d419eb7fd1b7570b07c688853a47aae77d2d9907ca2a	-	ol9_x86_64_u4_baseos_base
	krb5-workstation-1.21.1-1.0.1.el9.x86_64.rpm	abf9150c7631153a5a2998f6a0a55f2b986f2860bf2bd45b4fbf3ec49d93cd19	-	ol9_x86_64_baseos_latest
	krb5-workstation-1.21.1-1.0.1.el9.x86_64.rpm	abf9150c7631153a5a2998f6a0a55f2b986f2860bf2bd45b4fbf3ec49d93cd19	-	ol9_x86_64_u3_baseos_base
	krb5-workstation-1.21.1-1.0.1.el9.x86_64.rpm	abf9150c7631153a5a2998f6a0a55f2b986f2860bf2bd45b4fbf3ec49d93cd19	-	ol9_x86_64_u4_baseos_base
	libkadm5-1.21.1-1.0.1.el9.i686.rpm	72e3f19495ce5d0c662c822fea3e553841f2cc8351e55d85cbf42d1eb7b9d70f	-	ol9_x86_64_baseos_latest
	libkadm5-1.21.1-1.0.1.el9.i686.rpm	72e3f19495ce5d0c662c822fea3e553841f2cc8351e55d85cbf42d1eb7b9d70f	-	ol9_x86_64_u3_baseos_base
	libkadm5-1.21.1-1.0.1.el9.i686.rpm	72e3f19495ce5d0c662c822fea3e553841f2cc8351e55d85cbf42d1eb7b9d70f	-	ol9_x86_64_u4_baseos_base
	libkadm5-1.21.1-1.0.1.el9.x86_64.rpm	8dc4f41140f3e79bac1b65cc04caf7a4eddca77694d7b10da47efb43075da755	-	ol9_x86_64_baseos_latest
	libkadm5-1.21.1-1.0.1.el9.x86_64.rpm	8dc4f41140f3e79bac1b65cc04caf7a4eddca77694d7b10da47efb43075da755	-	ol9_x86_64_u3_baseos_base
	libkadm5-1.21.1-1.0.1.el9.x86_64.rpm	8dc4f41140f3e79bac1b65cc04caf7a4eddca77694d7b10da47efb43075da755	-	ol9_x86_64_u4_baseos_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team