[El-errata] ELSA-2008-0180 Critical: Enterprise Linux 4 krb5 security update

[el-errata at oss.oracle.com]

Enterprise Linux Security Advisory ELSA-2008-0180

https://rhn.redhat.com/errata/RHSA-2008-0180.html

The following updated rpms for Enterprise Linux 4 have been uploaded to 
the Unbreakable Linux Network:

i386:
krb5-devel-1.3.4-54.el4_6.1.i386.rpm
krb5-libs-1.3.4-54.el4_6.1.i386.rpm
krb5-server-1.3.4-54.el4_6.1.i386.rpm
krb5-workstation-1.3.4-54.el4_6.1.i386.rpm

x86_64:
krb5-devel-1.3.4-54.el4_6.1.x86_64.rpm
krb5-libs-1.3.4-54.el4_6.1.i386.rpm
krb5-libs-1.3.4-54.el4_6.1.x86_64.rpm
krb5-server-1.3.4-54.el4_6.1.x86_64.rpm
krb5-workstation-1.3.4-54.el4_6.1.x86_64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/krb5-1.3.4-54.el4_6.1.src.rpm

Description of changes:

[1.3.4-54.el4_6.1]
- add preliminary patch to fix use of uninitialized pointer / double-free in
  KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
- add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
  (#415351)