slesp2-krb5

Security update for Kerberos

Clients sending negotiation requests with invalid flags could crash the kerberos server (CVE-2009-0845). GSS-API clients could crash when reading from an invalid address space (CVE-2009-0844). Invalid length checks could crash applications using the kerberos ASN.1 parser (CVE-2009-0847). Under certain circumstances the ASN.1 parser could free an uninitialized pointer which could crash a kerberos server or even lead to execution of arbitrary code (CVE-2009-0846). Clients sending negotiation requests with invalid flags could crash the kerberos server (CVE-2009-0845). GSS-API clients could crash when reading from an invalid address space (CVE-2009-0844). Invalid length checks could crash applications using the kerberos ASN.1 parser (CVE-2009-0847). Under certain circumstances the ASN.1 parser could free an uninitialized pointer which could crash a kerberos server or even lead to execution of arbitrary code (CVE-2009-0846). security krb5 i586 b735248f7e613ba2cc07b28d077e7a01a6e44a23 krb5-apps-clients i586 f2efe113ac470bae78776c55559606dcb7b4f6f3 krb5-apps-servers i586 e690b68b1d0aeea25bd4b813ca426dc3f3737236 krb5-client i586 412e3893e9b338164d63b480357f1684f5b3d730 krb5-devel i586 cde88705f7cf9f7d39bf0449c7a5ceb51657286c krb5-server i586 cc3e7eac1ac64d332fe631e264f045d01463ff61