slesp2-krb5

Security update for Kerberos

Clients sending negotiation requests with invalid flags could crash the kerberos server (CVE-2009-0845). GSS-API clients could crash when reading from an invalid address space (CVE-2009-0844). Invalid length checks could crash applications using the kerberos ASN.1 parser (CVE-2009-0847). Under certain circumstances the ASN.1 parser could free an uninitialized pointer which could crash a kerberos server or even lead to execution of arbitrary code (CVE-2009-0846). Clients sending negotiation requests with invalid flags could crash the kerberos server (CVE-2009-0845). GSS-API clients could crash when reading from an invalid address space (CVE-2009-0844). Invalid length checks could crash applications using the kerberos ASN.1 parser (CVE-2009-0847). Under certain circumstances the ASN.1 parser could free an uninitialized pointer which could crash a kerberos server or even lead to execution of arbitrary code (CVE-2009-0846). security krb5 x86_64 f8116029f9e41dc905b85c7b5a83130697695e34 krb5-32bit x86_64 026c723195c1cd158d91ef487f1da68b9c2adf97 krb5-apps-clients x86_64 2b09ef574e4dab68d00093f56f0876b08c67adb9 krb5-apps-servers x86_64 5196d1d337079abbf3a3a40f3e4bd41022a47695 krb5-client x86_64 793088c3385d2c936ad8097ba8420914944db570 krb5-devel x86_64 77dcc1a03cd25743292e799e2dcaa8be4fd4993e krb5-devel-32bit x86_64 63aade4f5e5b8d0275cb30f1b9a230622ff8d73d krb5-server x86_64 0322885426e4357409a48c0d7f325d6735ec2faa