Summary
[1.15.1-50.0.1]
- Add recursion limit for ASN.1 indefinite lengths [Orabug: 32582360]
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | krb5-devel | 0:1.15.1-50.0.1.el7 |
| Oracle Linux · 7 | krb5-libs | 0:1.15.1-50.0.1.el7 |
| Oracle Linux · 7 | krb5-pkinit | 0:1.15.1-50.0.1.el7 |
| Oracle Linux · 7 | krb5-server | 0:1.15.1-50.0.1.el7 |
| Oracle Linux · 7 | krb5-server-ldap | 0:1.15.1-50.0.1.el7 |
| Oracle Linux · 7 | krb5-workstation | 0:1.15.1-50.0.1.el7 |
| Oracle Linux · 7 | libkadm5 | 0:1.15.1-50.0.1.el7 |
Vulnerabilities 1
-
High 7.5
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerber…