[El-errata] ELSA-2010-0029 Critical: Enterprise Linux 4 krb5 security update

Errata Announcements for Enterprise Linux el-errata at oss.oracle.com
Tue Jan 12 19:47:32 PST 2010


Enterprise Linux Security Advisory ELSA-2010-0029

https://rhn.redhat.com/errata/RHSA-2010-0029.html

The following updated rpms for Enterprise Linux 4 have been uploaded to 
the Unbreakable Linux Network:

i386:
krb5-devel-1.3.4-62.el4_8.1.i386.rpm
krb5-libs-1.3.4-62.el4_8.1.i386.rpm
krb5-server-1.3.4-62.el4_8.1.i386.rpm
krb5-workstation-1.3.4-62.el4_8.1.i386.rpm

x86_64:
krb5-devel-1.3.4-62.el4_8.1.x86_64.rpm
krb5-libs-1.3.4-62.el4_8.1.i386.rpm
krb5-libs-1.3.4-62.el4_8.1.x86_64.rpm
krb5-server-1.3.4-62.el4_8.1.x86_64.rpm
krb5-workstation-1.3.4-62.el4_8.1.x86_64.rpm

ia64:
krb5-devel-1.3.4-62.el4_8.1.ia64.rpm
krb5-libs-1.3.4-62.el4_8.1.i386.rpm
krb5-libs-1.3.4-62.el4_8.1.ia64.rpm
krb5-server-1.3.4-62.el4_8.1.ia64.rpm
krb5-workstation-1.3.4-62.el4_8.1.ia64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/krb5-1.3.4-62.el4_8.1.src.rpm


Description of changes:

[1.3.4-62.el4_8.1]
- add candidate patch to correct KDC integer overflows which could be
  triggered by malformed RC4 and AES ciphertexts (CVE-2009-4212, #546345)





More information about the El-errata mailing list