Lucene search

K
oraclelinuxOracleLinuxELSA-2016-2591
HistoryNov 09, 2016 - 12:00 a.m.

krb5 security, bug fix, and enhancement update

2016-11-0900:00:00
linux.oracle.com
9

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.071 Low

EPSS

Percentile

93.3%

[1.14.1-26]

  • Use responder in non-preauth AS reqs
  • Resolves: #1363690
    [1.14.1-25]
  • Fix bad debug_log() call in selinux handling
  • Resolves: #1292153
    [1.14.1-24]
  • Fix KKDCPP with TLS SNI by always presenting ‘Host:’ header
  • Resolves: #1364993
    [1.14.1-23]
  • Add dependency on libkadm5 to krb5-devel
  • Resolves: #1347403
    [1.14.1-22]
  • Builders have new version of mock; adapt.
  • Resolves: #1290239
    [1.14.1-21]
  • Fix CVE-2016-3120
  • Resolves: #1361504
    [1.14.1-20]
  • Make version dependencies on libkadm5 more explicit to appease rpmdiff
  • Resolves: #1347403
    [1.14.1-19]
  • Add in upstream version of kprop port and tests
  • Resolves: #1292795
    [1.14.1-18]
  • Fix incorrect recv() size calculation in libkrad
  • Resolves: #1349042
    [1.14.1-17]
  • Separate out the kadm5 libs
  • Resolves: #1347403
    [1.14.1-16]
  • Fix kprop/iprop handling of default realm
  • Fix t_kprop.py
  • Resolves: #1290561
  • Resolves: #1302967
  • Resolves: #1292795
    [1.14.1-15]
  • Fix SPNEGO with NTLM to conform to MS-SPNG section 3.3.5.1
  • Resolves: #1341726
    [1.14.1-14]
  • Do not indicate depricated mechanisms when requested
  • Resolves: #1293908
    [1.14.1-13]
  • Fix OTP module incorrectly overwriting as_key
  • Resolves: #1340304
    [1.14.1-12]
  • Fix CVE-2016-3119 (LDAP NULL dereference)
  • Resolves: #1339562
    [1.14.1-11]
  • Make ksu not ask for password without -n
  • Resolves: #1247261
    [1.14.1-10]
  • Frob kadm5 soname version so that the rebase does not break things
  • Resolves: #1292153
    [1.14.1-9]
  • Revamp selinux patch to not leak memory
  • Resolves: #1313457
    [1.14.1-8]
  • Add snippet support in /etc/krb5.conf.d
  • Resolves: #1146945
    [1.14.1-7]
  • Skip unnecessary mech calls in gss_inquire_cred
  • Resolves: #1314493
    [1.14.1-6]
  • Fix impersonate_name to work with interposers
  • Resolves: #1284987
    [1.14.1-5]
  • Fix change tracking of krb5.conf
  • Resolves: #1208243
    [1.14.1-4]
  • Ensure log files are not world-readable
  • Resolves: #1256735
    [1.14.1-3]
  • Clean up initscript handling in spec file
  • Resolves: #1283902
  • Resolves: #1183058
    [1.14.1-2]
  • Backport spec file changes from Fedora
  • Resolves: #1290239
    [1.14.1-1]
  • Rebase to new upstream version 1.14.1
  • Remove pax logic
  • Resolves: #1292153
  • Resolves: #1135427
  • Resolves: #1265509
  • Resolves: #1265510
  • Resolves: #1296241

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.071 Low

EPSS

Percentile

93.3%