RHSA-2016:0493Medium

Red Hat Security Advisory: krb5 security update

Published
March 22, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (2)

CVE-2015-8629 →CVE-2015-8631 →

📋 Description

CVE-2015-8629 — krb5: xdr_nullstring() doesn't check for terminating null character CVE-2015-8631 — krb5: Memory leak caused by supplying a null principal name in request

🎯 Affected products89

  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • krb5-0:1.10.3-42z1.el6_7.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • krb5-0:1.10.3-42z1.el6_7.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • krb5-0:1.10.3-42z1.el6_7.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • krb5-0:1.10.3-42z1.el6_7.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.ppc as a component of Red Hat Enterprise Linux Server (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.s390 as a component of Red Hat Enterprise Linux Server (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • krb5-debuginfo-0:1.10.3-42z1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • krb5-devel-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
  • krb5-devel-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • krb5-devel-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • krb5-devel-0:1.10.3-42z1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • +59 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (5)