<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="0801012c98f8f6f5a600aff42a181053"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="740">
  <id>dbg111-krb5</id>
  <title>krb5: security update</title>
  <release>openSUSE 11.1</release>
  <issued date="1239031856"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=485894" id="485894" title="bug number 485894" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=486722" id="486722" title="bug number 486722" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=486723" id="486723" title="bug number 486723" type="bugzilla"/>
  </references>
  <description>Clients sending negotiation requests with invalid flags
could crash the kerberos server (CVE-2009-0845).

GSS-API clients could crash when reading from an invalid
address space (CVE-2009-0844).

Invalid length checks could crash applications using the
kerberos ASN.1 parser (CVE-2009-0847).

Under certain circumstances the ASN.1 parser could free an
uninitialized pointer which could crash a kerberos server
or even lead to execution of arbitrary code (CVE-2009-0846).
</description>
  <pkglist>
    <collection>
        <package name="krb5-debuginfo" arch="i586" version="1.6.3" release="132.5.1">
          <filename>krb5-debuginfo-1.6.3-132.5.1.i586.rpm</filename>
        </package>
        <package name="krb5-debuginfo" arch="ppc" version="1.6.3" release="132.5.1">
          <filename>krb5-debuginfo-1.6.3-132.5.1.ppc.rpm</filename>
        </package>
        <package name="krb5-debuginfo" arch="x86_64" version="1.6.3" release="132.5.1">
          <filename>krb5-debuginfo-1.6.3-132.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debuginfo-32bit" arch="x86_64" version="1.6.3" release="132.5.1">
          <filename>krb5-debuginfo-32bit-1.6.3-132.5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debuginfo-64bit" arch="ppc" version="1.6.3" release="132.5.1">
          <filename>krb5-debuginfo-64bit-1.6.3-132.5.1.ppc.rpm</filename>
        </package>
        <package name="krb5-debugsource" arch="i586" version="1.6.3" release="132.5.1">
          <filename>krb5-debugsource-1.6.3-132.5.1.i586.rpm</filename>
        </package>
        <package name="krb5-debugsource" arch="ppc" version="1.6.3" release="132.5.1">
          <filename>krb5-debugsource-1.6.3-132.5.1.ppc.rpm</filename>
        </package>
        <package name="krb5-debugsource" arch="x86_64" version="1.6.3" release="132.5.1">
          <filename>krb5-debugsource-1.6.3-132.5.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
