cvelistv5 - cve-2008-0062

CVE-2008-0062 (GCVE-0-2008-0062)

Vulnerability from cvelistv5

Published

2008-03-19 10:00

Modified

2024-08-07 07:32

Severity ?

CWE

Summary

KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.

References

►

URL

	Vendor	Product	Version
	n/a	n/a	Version: n/a

rhsa-2008:0181

Vulnerability from csaf_redhat

Published

2008-03-18 18:54

Modified

2024-11-22 01:52

Summary

Red Hat Security Advisory: krb5 security update

Notes

Topic

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team.

Details

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated krb5 packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 2.1 and 3.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Kerberos is a network authentication system which allows clients and\nservers to authenticate to each other through use of symmetric encryption\nand a trusted third party, the KDC.\n\nA flaw was found in the way the MIT Kerberos Authentication Service and Key\nDistribution Center server (krb5kdc) handled Kerberos v4 protocol packets.\nAn unauthenticated remote attacker could use this flaw to crash the\nkrb5kdc daemon, disclose portions of its memory, or possibly execute\narbitrary code using malformed or truncated Kerberos v4 protocol\nrequests. (CVE-2008-0062, CVE-2008-0063)\n\nThis issue only affected krb5kdc with Kerberos v4 protocol compatibility\nenabled, which is the default setting on Red Hat Enterprise Linux 4.\nKerberos v4 protocol support can be disabled by adding \"v4_mode=none\"\n(without the quotes) to the \"[kdcdefaults]\" section of\n/var/kerberos/krb5kdc/kdc.conf.\n\nA flaw was found in the RPC library used by the MIT Kerberos kadmind\nserver. An unauthenticated remote attacker could use this flaw to crash\nkadmind. This issue only affected systems with certain resource limits\nconfigured and did not affect systems using default resource limits used by\nRed Hat Enterprise Linux 2.1 or 3. (CVE-2008-0948)\n\nRed Hat would like to thank MIT for reporting these issues.\n\nAll krb5 users are advised to update to these erratum packages which\ncontain backported fixes to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0181",
        "url": "https://access.redhat.com/errata/RHSA-2008:0181"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "432620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
      },
      {
        "category": "external",
        "summary": "432621",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
      },
      {
        "category": "external",
        "summary": "435087",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=435087"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0181.json"
      }
    ],
    "title": "Red Hat Security Advisory: krb5 security update",
    "tracking": {
      "current_release_date": "2024-11-22T01:52:06+00:00",
      "generator": {
        "date": "2024-11-22T01:52:06+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2008:0181",
      "initial_release_date": "2008-03-18T18:54:00+00:00",
      "revision_history": [
        {
          "date": "2008-03-18T18:54:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-03-18T15:19:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T01:52:06+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "2.1AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "2.1AW",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "2.1ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "2.1WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 3",
                  "product_id": "3AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 3",
                "product": {
                  "name": "Red Hat Desktop version 3",
                  "product_id": "3Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 3",
                  "product_id": "3ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 3",
                  "product_id": "3WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.2.2-48.ia64",
                "product": {
                  "name": "krb5-workstation-0:1.2.2-48.ia64",
                  "product_id": "krb5-workstation-0:1.2.2-48.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.2.2-48?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.2-48.ia64",
                "product": {
                  "name": "krb5-libs-0:1.2.2-48.ia64",
                  "product_id": "krb5-libs-0:1.2.2-48.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.2-48?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.2.2-48.ia64",
                "product": {
                  "name": "krb5-devel-0:1.2.2-48.ia64",
                  "product_id": "krb5-devel-0:1.2.2-48.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.2.2-48?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.2.2-48.ia64",
                "product": {
                  "name": "krb5-server-0:1.2.2-48.ia64",
                  "product_id": "krb5-server-0:1.2.2-48.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.2.2-48?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.2.7-68.ia64",
                "product": {
                  "name": "krb5-server-0:1.2.7-68.ia64",
                  "product_id": "krb5-server-0:1.2.7-68.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.2.7-68?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.2.7-68.ia64",
                "product": {
                  "name": "krb5-workstation-0:1.2.7-68.ia64",
                  "product_id": "krb5-workstation-0:1.2.7-68.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.2.7-68?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.7-68.ia64",
                "product": {
                  "name": "krb5-libs-0:1.2.7-68.ia64",
                  "product_id": "krb5-libs-0:1.2.7-68.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.7-68?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.2.7-68.ia64",
                "product": {
                  "name": "krb5-debuginfo-0:1.2.7-68.ia64",
                  "product_id": "krb5-debuginfo-0:1.2.7-68.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.2.7-68?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.2.7-68.ia64",
                "product": {
                  "name": "krb5-devel-0:1.2.7-68.ia64",
                  "product_id": "krb5-devel-0:1.2.7-68.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.2.7-68?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-0:1.2.2-48.src",
                "product": {
                  "name": "krb5-0:1.2.2-48.src",
                  "product_id": "krb5-0:1.2.2-48.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5@1.2.2-48?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-0:1.2.7-68.src",
                "product": {
                  "name": "krb5-0:1.2.7-68.src",
                  "product_id": "krb5-0:1.2.7-68.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5@1.2.7-68?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.2.2-48.i386",
                "product": {
                  "name": "krb5-workstation-0:1.2.2-48.i386",
                  "product_id": "krb5-workstation-0:1.2.2-48.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.2.2-48?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.2-48.i386",
                "product": {
                  "name": "krb5-libs-0:1.2.2-48.i386",
                  "product_id": "krb5-libs-0:1.2.2-48.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.2-48?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.2.2-48.i386",
                "product": {
                  "name": "krb5-devel-0:1.2.2-48.i386",
                  "product_id": "krb5-devel-0:1.2.2-48.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.2.2-48?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.2.2-48.i386",
                "product": {
                  "name": "krb5-server-0:1.2.2-48.i386",
                  "product_id": "krb5-server-0:1.2.2-48.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.2.2-48?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.7-68.i386",
                "product": {
                  "name": "krb5-libs-0:1.2.7-68.i386",
                  "product_id": "krb5-libs-0:1.2.7-68.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.7-68?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.2.7-68.i386",
                "product": {
                  "name": "krb5-debuginfo-0:1.2.7-68.i386",
                  "product_id": "krb5-debuginfo-0:1.2.7-68.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.2.7-68?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.2.7-68.i386",
                "product": {
                  "name": "krb5-server-0:1.2.7-68.i386",
                  "product_id": "krb5-server-0:1.2.7-68.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.2.7-68?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.2.7-68.i386",
                "product": {
                  "name": "krb5-workstation-0:1.2.7-68.i386",
                  "product_id": "krb5-workstation-0:1.2.7-68.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.2.7-68?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.2.7-68.i386",
                "product": {
                  "name": "krb5-devel-0:1.2.7-68.i386",
                  "product_id": "krb5-devel-0:1.2.7-68.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.2.7-68?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-server-0:1.2.7-68.x86_64",
                "product": {
                  "name": "krb5-server-0:1.2.7-68.x86_64",
                  "product_id": "krb5-server-0:1.2.7-68.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.2.7-68?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.2.7-68.x86_64",
                "product": {
                  "name": "krb5-workstation-0:1.2.7-68.x86_64",
                  "product_id": "krb5-workstation-0:1.2.7-68.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.2.7-68?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.7-68.x86_64",
                "product": {
                  "name": "krb5-libs-0:1.2.7-68.x86_64",
                  "product_id": "krb5-libs-0:1.2.7-68.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.7-68?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.2.7-68.x86_64",
                "product": {
                  "name": "krb5-debuginfo-0:1.2.7-68.x86_64",
                  "product_id": "krb5-debuginfo-0:1.2.7-68.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.2.7-68?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.2.7-68.x86_64",
                "product": {
                  "name": "krb5-devel-0:1.2.7-68.x86_64",
                  "product_id": "krb5-devel-0:1.2.7-68.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.2.7-68?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-server-0:1.2.7-68.ppc",
                "product": {
                  "name": "krb5-server-0:1.2.7-68.ppc",
                  "product_id": "krb5-server-0:1.2.7-68.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.2.7-68?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.2.7-68.ppc",
                "product": {
                  "name": "krb5-workstation-0:1.2.7-68.ppc",
                  "product_id": "krb5-workstation-0:1.2.7-68.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.2.7-68?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.7-68.ppc",
                "product": {
                  "name": "krb5-libs-0:1.2.7-68.ppc",
                  "product_id": "krb5-libs-0:1.2.7-68.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.7-68?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.2.7-68.ppc",
                "product": {
                  "name": "krb5-debuginfo-0:1.2.7-68.ppc",
                  "product_id": "krb5-debuginfo-0:1.2.7-68.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.2.7-68?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.2.7-68.ppc",
                "product": {
                  "name": "krb5-devel-0:1.2.7-68.ppc",
                  "product_id": "krb5-devel-0:1.2.7-68.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.2.7-68?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.7-68.ppc64",
                "product": {
                  "name": "krb5-libs-0:1.2.7-68.ppc64",
                  "product_id": "krb5-libs-0:1.2.7-68.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.7-68?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.2.7-68.ppc64",
                "product": {
                  "name": "krb5-debuginfo-0:1.2.7-68.ppc64",
                  "product_id": "krb5-debuginfo-0:1.2.7-68.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.2.7-68?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-server-0:1.2.7-68.s390x",
                "product": {
                  "name": "krb5-server-0:1.2.7-68.s390x",
                  "product_id": "krb5-server-0:1.2.7-68.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.2.7-68?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.2.7-68.s390x",
                "product": {
                  "name": "krb5-workstation-0:1.2.7-68.s390x",
                  "product_id": "krb5-workstation-0:1.2.7-68.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.2.7-68?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.7-68.s390x",
                "product": {
                  "name": "krb5-libs-0:1.2.7-68.s390x",
                  "product_id": "krb5-libs-0:1.2.7-68.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.7-68?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.2.7-68.s390x",
                "product": {
                  "name": "krb5-debuginfo-0:1.2.7-68.s390x",
                  "product_id": "krb5-debuginfo-0:1.2.7-68.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.2.7-68?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.2.7-68.s390x",
                "product": {
                  "name": "krb5-devel-0:1.2.7-68.s390x",
                  "product_id": "krb5-devel-0:1.2.7-68.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.2.7-68?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.2.7-68.s390",
                "product": {
                  "name": "krb5-libs-0:1.2.7-68.s390",
                  "product_id": "krb5-libs-0:1.2.7-68.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.2.7-68?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.2.7-68.s390",
                "product": {
                  "name": "krb5-debuginfo-0:1.2.7-68.s390",
                  "product_id": "krb5-debuginfo-0:1.2.7-68.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.2.7-68?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.2.7-68.s390",
                "product": {
                  "name": "krb5-server-0:1.2.7-68.s390",
                  "product_id": "krb5-server-0:1.2.7-68.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.2.7-68?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.2.7-68.s390",
                "product": {
                  "name": "krb5-workstation-0:1.2.7-68.s390",
                  "product_id": "krb5-workstation-0:1.2.7-68.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.2.7-68?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.2.7-68.s390",
                "product": {
                  "name": "krb5-devel-0:1.2.7-68.s390",
                  "product_id": "krb5-devel-0:1.2.7-68.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.2.7-68?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.2.2-48.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-0:1.2.2-48.src"
        },
        "product_reference": "krb5-0:1.2.2-48.src",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-devel-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-devel-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-devel-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-devel-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-libs-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-libs-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-libs-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-libs-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-server-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-server-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-server-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-server-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-workstation-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-workstation-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:krb5-workstation-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-workstation-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.2.2-48.src as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-0:1.2.2-48.src"
        },
        "product_reference": "krb5-0:1.2.2-48.src",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.2-48.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-devel-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-devel-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.2-48.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-devel-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-devel-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.2-48.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-libs-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-libs-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.2-48.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-libs-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-libs-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.2-48.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-server-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-server-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.2-48.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-server-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-server-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.2-48.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-workstation-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-workstation-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.2-48.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:krb5-workstation-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-workstation-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.2.2-48.src as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-0:1.2.2-48.src"
        },
        "product_reference": "krb5-0:1.2.2-48.src",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-devel-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-devel-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-devel-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-devel-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-libs-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-libs-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-libs-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-libs-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-server-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-server-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-server-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-server-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-workstation-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-workstation-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:krb5-workstation-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-workstation-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.2.2-48.src as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-0:1.2.2-48.src"
        },
        "product_reference": "krb5-0:1.2.2-48.src",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-devel-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-devel-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-devel-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-devel-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-libs-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-libs-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-libs-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-libs-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-server-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-server-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-server-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-server-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.2-48.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-workstation-0:1.2.2-48.i386"
        },
        "product_reference": "krb5-workstation-0:1.2.2-48.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.2-48.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:krb5-workstation-0:1.2.2-48.ia64"
        },
        "product_reference": "krb5-workstation-0:1.2.2-48.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.2.7-68.src as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-0:1.2.7-68.src"
        },
        "product_reference": "krb5-0:1.2.7-68.src",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-debuginfo-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-debuginfo-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-debuginfo-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ppc64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-debuginfo-0:1.2.7-68.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ppc64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-debuginfo-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-debuginfo-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-debuginfo-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-devel-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-devel-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-devel-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-devel-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-devel-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-devel-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-libs-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-libs-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-libs-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ppc64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-libs-0:1.2.7-68.ppc64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ppc64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-libs-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-libs-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-libs-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-server-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-server-0:1.2.7-68.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-server-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-server-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-server-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-server-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-server-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-server-0:1.2.7-68.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-server-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-server-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-server-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-server-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-workstation-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-workstation-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-workstation-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-workstation-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-workstation-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:krb5-workstation-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.2.7-68.src as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-0:1.2.7-68.src"
        },
        "product_reference": "krb5-0:1.2.7-68.src",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-debuginfo-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-debuginfo-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ppc64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ppc64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-debuginfo-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-debuginfo-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-debuginfo-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-devel-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-devel-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-devel-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-devel-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-devel-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-devel-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-libs-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-libs-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-libs-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ppc64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-libs-0:1.2.7-68.ppc64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ppc64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-libs-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-libs-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-libs-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-server-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-server-0:1.2.7-68.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-server-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-server-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-server-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-server-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-server-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-server-0:1.2.7-68.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-server-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-server-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-server-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-server-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-workstation-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-workstation-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-workstation-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-workstation-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-workstation-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:krb5-workstation-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.2.7-68.src as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-0:1.2.7-68.src"
        },
        "product_reference": "krb5-0:1.2.7-68.src",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-debuginfo-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-debuginfo-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-debuginfo-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ppc64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-debuginfo-0:1.2.7-68.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ppc64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-debuginfo-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-debuginfo-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-debuginfo-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-devel-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-devel-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-devel-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-devel-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-devel-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-devel-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-libs-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-libs-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-libs-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ppc64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-libs-0:1.2.7-68.ppc64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ppc64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-libs-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-libs-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-libs-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-server-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-server-0:1.2.7-68.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-server-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-server-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-server-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-server-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-server-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-server-0:1.2.7-68.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-server-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-server-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-server-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-server-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-workstation-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-workstation-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-workstation-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-workstation-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-workstation-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:krb5-workstation-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.2.7-68.src as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-0:1.2.7-68.src"
        },
        "product_reference": "krb5-0:1.2.7-68.src",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-debuginfo-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-debuginfo-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-debuginfo-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.ppc64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-debuginfo-0:1.2.7-68.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.ppc64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-debuginfo-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-debuginfo-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-debuginfo-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-devel-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-devel-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-devel-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-devel-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-devel-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-devel-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-devel-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-libs-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-libs-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-libs-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.ppc64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-libs-0:1.2.7-68.ppc64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.ppc64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-libs-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-libs-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-libs-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-libs-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-server-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-server-0:1.2.7-68.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-server-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-server-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-server-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-server-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-server-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-server-0:1.2.7-68.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-server-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-server-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-server-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-server-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-workstation-0:1.2.7-68.i386"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-workstation-0:1.2.7-68.ia64"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-workstation-0:1.2.7-68.ppc"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-workstation-0:1.2.7-68.s390"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-workstation-0:1.2.7-68.s390x"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.2.7-68.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:krb5-workstation-0:1.2.7-68.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.2.7-68.x86_64",
        "relates_to_product_reference": "3WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0062",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: uninitialized pointer use in krb5kdc",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:krb5-0:1.2.2-48.src",
          "2.1AS:krb5-devel-0:1.2.2-48.i386",
          "2.1AS:krb5-devel-0:1.2.2-48.ia64",
          "2.1AS:krb5-libs-0:1.2.2-48.i386",
          "2.1AS:krb5-libs-0:1.2.2-48.ia64",
          "2.1AS:krb5-server-0:1.2.2-48.i386",
          "2.1AS:krb5-server-0:1.2.2-48.ia64",
          "2.1AS:krb5-workstation-0:1.2.2-48.i386",
          "2.1AS:krb5-workstation-0:1.2.2-48.ia64",
          "2.1AW:krb5-0:1.2.2-48.src",
          "2.1AW:krb5-devel-0:1.2.2-48.i386",
          "2.1AW:krb5-devel-0:1.2.2-48.ia64",
          "2.1AW:krb5-libs-0:1.2.2-48.i386",
          "2.1AW:krb5-libs-0:1.2.2-48.ia64",
          "2.1AW:krb5-server-0:1.2.2-48.i386",
          "2.1AW:krb5-server-0:1.2.2-48.ia64",
          "2.1AW:krb5-workstation-0:1.2.2-48.i386",
          "2.1AW:krb5-workstation-0:1.2.2-48.ia64",
          "2.1ES:krb5-0:1.2.2-48.src",
          "2.1ES:krb5-devel-0:1.2.2-48.i386",
          "2.1ES:krb5-devel-0:1.2.2-48.ia64",
          "2.1ES:krb5-libs-0:1.2.2-48.i386",
          "2.1ES:krb5-libs-0:1.2.2-48.ia64",
          "2.1ES:krb5-server-0:1.2.2-48.i386",
          "2.1ES:krb5-server-0:1.2.2-48.ia64",
          "2.1ES:krb5-workstation-0:1.2.2-48.i386",
          "2.1ES:krb5-workstation-0:1.2.2-48.ia64",
          "2.1WS:krb5-0:1.2.2-48.src",
          "2.1WS:krb5-devel-0:1.2.2-48.i386",
          "2.1WS:krb5-devel-0:1.2.2-48.ia64",
          "2.1WS:krb5-libs-0:1.2.2-48.i386",
          "2.1WS:krb5-libs-0:1.2.2-48.ia64",
          "2.1WS:krb5-server-0:1.2.2-48.i386",
          "2.1WS:krb5-server-0:1.2.2-48.ia64",
          "2.1WS:krb5-workstation-0:1.2.2-48.i386",
          "2.1WS:krb5-workstation-0:1.2.2-48.ia64",
          "3AS:krb5-0:1.2.7-68.src",
          "3AS:krb5-debuginfo-0:1.2.7-68.i386",
          "3AS:krb5-debuginfo-0:1.2.7-68.ia64",
          "3AS:krb5-debuginfo-0:1.2.7-68.ppc",
          "3AS:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3AS:krb5-debuginfo-0:1.2.7-68.s390",
          "3AS:krb5-debuginfo-0:1.2.7-68.s390x",
          "3AS:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3AS:krb5-devel-0:1.2.7-68.i386",
          "3AS:krb5-devel-0:1.2.7-68.ia64",
          "3AS:krb5-devel-0:1.2.7-68.ppc",
          "3AS:krb5-devel-0:1.2.7-68.s390",
          "3AS:krb5-devel-0:1.2.7-68.s390x",
          "3AS:krb5-devel-0:1.2.7-68.x86_64",
          "3AS:krb5-libs-0:1.2.7-68.i386",
          "3AS:krb5-libs-0:1.2.7-68.ia64",
          "3AS:krb5-libs-0:1.2.7-68.ppc",
          "3AS:krb5-libs-0:1.2.7-68.ppc64",
          "3AS:krb5-libs-0:1.2.7-68.s390",
          "3AS:krb5-libs-0:1.2.7-68.s390x",
          "3AS:krb5-libs-0:1.2.7-68.x86_64",
          "3AS:krb5-server-0:1.2.7-68.i386",
          "3AS:krb5-server-0:1.2.7-68.ia64",
          "3AS:krb5-server-0:1.2.7-68.ppc",
          "3AS:krb5-server-0:1.2.7-68.s390",
          "3AS:krb5-server-0:1.2.7-68.s390x",
          "3AS:krb5-server-0:1.2.7-68.x86_64",
          "3AS:krb5-workstation-0:1.2.7-68.i386",
          "3AS:krb5-workstation-0:1.2.7-68.ia64",
          "3AS:krb5-workstation-0:1.2.7-68.ppc",
          "3AS:krb5-workstation-0:1.2.7-68.s390",
          "3AS:krb5-workstation-0:1.2.7-68.s390x",
          "3AS:krb5-workstation-0:1.2.7-68.x86_64",
          "3Desktop:krb5-0:1.2.7-68.src",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.i386",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ia64",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.s390",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.s390x",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3Desktop:krb5-devel-0:1.2.7-68.i386",
          "3Desktop:krb5-devel-0:1.2.7-68.ia64",
          "3Desktop:krb5-devel-0:1.2.7-68.ppc",
          "3Desktop:krb5-devel-0:1.2.7-68.s390",
          "3Desktop:krb5-devel-0:1.2.7-68.s390x",
          "3Desktop:krb5-devel-0:1.2.7-68.x86_64",
          "3Desktop:krb5-libs-0:1.2.7-68.i386",
          "3Desktop:krb5-libs-0:1.2.7-68.ia64",
          "3Desktop:krb5-libs-0:1.2.7-68.ppc",
          "3Desktop:krb5-libs-0:1.2.7-68.ppc64",
          "3Desktop:krb5-libs-0:1.2.7-68.s390",
          "3Desktop:krb5-libs-0:1.2.7-68.s390x",
          "3Desktop:krb5-libs-0:1.2.7-68.x86_64",
          "3Desktop:krb5-server-0:1.2.7-68.i386",
          "3Desktop:krb5-server-0:1.2.7-68.ia64",
          "3Desktop:krb5-server-0:1.2.7-68.ppc",
          "3Desktop:krb5-server-0:1.2.7-68.s390",
          "3Desktop:krb5-server-0:1.2.7-68.s390x",
          "3Desktop:krb5-server-0:1.2.7-68.x86_64",
          "3Desktop:krb5-workstation-0:1.2.7-68.i386",
          "3Desktop:krb5-workstation-0:1.2.7-68.ia64",
          "3Desktop:krb5-workstation-0:1.2.7-68.ppc",
          "3Desktop:krb5-workstation-0:1.2.7-68.s390",
          "3Desktop:krb5-workstation-0:1.2.7-68.s390x",
          "3Desktop:krb5-workstation-0:1.2.7-68.x86_64",
          "3ES:krb5-0:1.2.7-68.src",
          "3ES:krb5-debuginfo-0:1.2.7-68.i386",
          "3ES:krb5-debuginfo-0:1.2.7-68.ia64",
          "3ES:krb5-debuginfo-0:1.2.7-68.ppc",
          "3ES:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3ES:krb5-debuginfo-0:1.2.7-68.s390",
          "3ES:krb5-debuginfo-0:1.2.7-68.s390x",
          "3ES:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3ES:krb5-devel-0:1.2.7-68.i386",
          "3ES:krb5-devel-0:1.2.7-68.ia64",
          "3ES:krb5-devel-0:1.2.7-68.ppc",
          "3ES:krb5-devel-0:1.2.7-68.s390",
          "3ES:krb5-devel-0:1.2.7-68.s390x",
          "3ES:krb5-devel-0:1.2.7-68.x86_64",
          "3ES:krb5-libs-0:1.2.7-68.i386",
          "3ES:krb5-libs-0:1.2.7-68.ia64",
          "3ES:krb5-libs-0:1.2.7-68.ppc",
          "3ES:krb5-libs-0:1.2.7-68.ppc64",
          "3ES:krb5-libs-0:1.2.7-68.s390",
          "3ES:krb5-libs-0:1.2.7-68.s390x",
          "3ES:krb5-libs-0:1.2.7-68.x86_64",
          "3ES:krb5-server-0:1.2.7-68.i386",
          "3ES:krb5-server-0:1.2.7-68.ia64",
          "3ES:krb5-server-0:1.2.7-68.ppc",
          "3ES:krb5-server-0:1.2.7-68.s390",
          "3ES:krb5-server-0:1.2.7-68.s390x",
          "3ES:krb5-server-0:1.2.7-68.x86_64",
          "3ES:krb5-workstation-0:1.2.7-68.i386",
          "3ES:krb5-workstation-0:1.2.7-68.ia64",
          "3ES:krb5-workstation-0:1.2.7-68.ppc",
          "3ES:krb5-workstation-0:1.2.7-68.s390",
          "3ES:krb5-workstation-0:1.2.7-68.s390x",
          "3ES:krb5-workstation-0:1.2.7-68.x86_64",
          "3WS:krb5-0:1.2.7-68.src",
          "3WS:krb5-debuginfo-0:1.2.7-68.i386",
          "3WS:krb5-debuginfo-0:1.2.7-68.ia64",
          "3WS:krb5-debuginfo-0:1.2.7-68.ppc",
          "3WS:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3WS:krb5-debuginfo-0:1.2.7-68.s390",
          "3WS:krb5-debuginfo-0:1.2.7-68.s390x",
          "3WS:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3WS:krb5-devel-0:1.2.7-68.i386",
          "3WS:krb5-devel-0:1.2.7-68.ia64",
          "3WS:krb5-devel-0:1.2.7-68.ppc",
          "3WS:krb5-devel-0:1.2.7-68.s390",
          "3WS:krb5-devel-0:1.2.7-68.s390x",
          "3WS:krb5-devel-0:1.2.7-68.x86_64",
          "3WS:krb5-libs-0:1.2.7-68.i386",
          "3WS:krb5-libs-0:1.2.7-68.ia64",
          "3WS:krb5-libs-0:1.2.7-68.ppc",
          "3WS:krb5-libs-0:1.2.7-68.ppc64",
          "3WS:krb5-libs-0:1.2.7-68.s390",
          "3WS:krb5-libs-0:1.2.7-68.s390x",
          "3WS:krb5-libs-0:1.2.7-68.x86_64",
          "3WS:krb5-server-0:1.2.7-68.i386",
          "3WS:krb5-server-0:1.2.7-68.ia64",
          "3WS:krb5-server-0:1.2.7-68.ppc",
          "3WS:krb5-server-0:1.2.7-68.s390",
          "3WS:krb5-server-0:1.2.7-68.s390x",
          "3WS:krb5-server-0:1.2.7-68.x86_64",
          "3WS:krb5-workstation-0:1.2.7-68.i386",
          "3WS:krb5-workstation-0:1.2.7-68.ia64",
          "3WS:krb5-workstation-0:1.2.7-68.ppc",
          "3WS:krb5-workstation-0:1.2.7-68.s390",
          "3WS:krb5-workstation-0:1.2.7-68.s390x",
          "3WS:krb5-workstation-0:1.2.7-68.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "RHBZ#432620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0062",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T18:54:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:krb5-0:1.2.2-48.src",
            "2.1AS:krb5-devel-0:1.2.2-48.i386",
            "2.1AS:krb5-devel-0:1.2.2-48.ia64",
            "2.1AS:krb5-libs-0:1.2.2-48.i386",
            "2.1AS:krb5-libs-0:1.2.2-48.ia64",
            "2.1AS:krb5-server-0:1.2.2-48.i386",
            "2.1AS:krb5-server-0:1.2.2-48.ia64",
            "2.1AS:krb5-workstation-0:1.2.2-48.i386",
            "2.1AS:krb5-workstation-0:1.2.2-48.ia64",
            "2.1AW:krb5-0:1.2.2-48.src",
            "2.1AW:krb5-devel-0:1.2.2-48.i386",
            "2.1AW:krb5-devel-0:1.2.2-48.ia64",
            "2.1AW:krb5-libs-0:1.2.2-48.i386",
            "2.1AW:krb5-libs-0:1.2.2-48.ia64",
            "2.1AW:krb5-server-0:1.2.2-48.i386",
            "2.1AW:krb5-server-0:1.2.2-48.ia64",
            "2.1AW:krb5-workstation-0:1.2.2-48.i386",
            "2.1AW:krb5-workstation-0:1.2.2-48.ia64",
            "2.1ES:krb5-0:1.2.2-48.src",
            "2.1ES:krb5-devel-0:1.2.2-48.i386",
            "2.1ES:krb5-devel-0:1.2.2-48.ia64",
            "2.1ES:krb5-libs-0:1.2.2-48.i386",
            "2.1ES:krb5-libs-0:1.2.2-48.ia64",
            "2.1ES:krb5-server-0:1.2.2-48.i386",
            "2.1ES:krb5-server-0:1.2.2-48.ia64",
            "2.1ES:krb5-workstation-0:1.2.2-48.i386",
            "2.1ES:krb5-workstation-0:1.2.2-48.ia64",
            "2.1WS:krb5-0:1.2.2-48.src",
            "2.1WS:krb5-devel-0:1.2.2-48.i386",
            "2.1WS:krb5-devel-0:1.2.2-48.ia64",
            "2.1WS:krb5-libs-0:1.2.2-48.i386",
            "2.1WS:krb5-libs-0:1.2.2-48.ia64",
            "2.1WS:krb5-server-0:1.2.2-48.i386",
            "2.1WS:krb5-server-0:1.2.2-48.ia64",
            "2.1WS:krb5-workstation-0:1.2.2-48.i386",
            "2.1WS:krb5-workstation-0:1.2.2-48.ia64",
            "3AS:krb5-0:1.2.7-68.src",
            "3AS:krb5-debuginfo-0:1.2.7-68.i386",
            "3AS:krb5-debuginfo-0:1.2.7-68.ia64",
            "3AS:krb5-debuginfo-0:1.2.7-68.ppc",
            "3AS:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3AS:krb5-debuginfo-0:1.2.7-68.s390",
            "3AS:krb5-debuginfo-0:1.2.7-68.s390x",
            "3AS:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3AS:krb5-devel-0:1.2.7-68.i386",
            "3AS:krb5-devel-0:1.2.7-68.ia64",
            "3AS:krb5-devel-0:1.2.7-68.ppc",
            "3AS:krb5-devel-0:1.2.7-68.s390",
            "3AS:krb5-devel-0:1.2.7-68.s390x",
            "3AS:krb5-devel-0:1.2.7-68.x86_64",
            "3AS:krb5-libs-0:1.2.7-68.i386",
            "3AS:krb5-libs-0:1.2.7-68.ia64",
            "3AS:krb5-libs-0:1.2.7-68.ppc",
            "3AS:krb5-libs-0:1.2.7-68.ppc64",
            "3AS:krb5-libs-0:1.2.7-68.s390",
            "3AS:krb5-libs-0:1.2.7-68.s390x",
            "3AS:krb5-libs-0:1.2.7-68.x86_64",
            "3AS:krb5-server-0:1.2.7-68.i386",
            "3AS:krb5-server-0:1.2.7-68.ia64",
            "3AS:krb5-server-0:1.2.7-68.ppc",
            "3AS:krb5-server-0:1.2.7-68.s390",
            "3AS:krb5-server-0:1.2.7-68.s390x",
            "3AS:krb5-server-0:1.2.7-68.x86_64",
            "3AS:krb5-workstation-0:1.2.7-68.i386",
            "3AS:krb5-workstation-0:1.2.7-68.ia64",
            "3AS:krb5-workstation-0:1.2.7-68.ppc",
            "3AS:krb5-workstation-0:1.2.7-68.s390",
            "3AS:krb5-workstation-0:1.2.7-68.s390x",
            "3AS:krb5-workstation-0:1.2.7-68.x86_64",
            "3Desktop:krb5-0:1.2.7-68.src",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.i386",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ia64",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.s390",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.s390x",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3Desktop:krb5-devel-0:1.2.7-68.i386",
            "3Desktop:krb5-devel-0:1.2.7-68.ia64",
            "3Desktop:krb5-devel-0:1.2.7-68.ppc",
            "3Desktop:krb5-devel-0:1.2.7-68.s390",
            "3Desktop:krb5-devel-0:1.2.7-68.s390x",
            "3Desktop:krb5-devel-0:1.2.7-68.x86_64",
            "3Desktop:krb5-libs-0:1.2.7-68.i386",
            "3Desktop:krb5-libs-0:1.2.7-68.ia64",
            "3Desktop:krb5-libs-0:1.2.7-68.ppc",
            "3Desktop:krb5-libs-0:1.2.7-68.ppc64",
            "3Desktop:krb5-libs-0:1.2.7-68.s390",
            "3Desktop:krb5-libs-0:1.2.7-68.s390x",
            "3Desktop:krb5-libs-0:1.2.7-68.x86_64",
            "3Desktop:krb5-server-0:1.2.7-68.i386",
            "3Desktop:krb5-server-0:1.2.7-68.ia64",
            "3Desktop:krb5-server-0:1.2.7-68.ppc",
            "3Desktop:krb5-server-0:1.2.7-68.s390",
            "3Desktop:krb5-server-0:1.2.7-68.s390x",
            "3Desktop:krb5-server-0:1.2.7-68.x86_64",
            "3Desktop:krb5-workstation-0:1.2.7-68.i386",
            "3Desktop:krb5-workstation-0:1.2.7-68.ia64",
            "3Desktop:krb5-workstation-0:1.2.7-68.ppc",
            "3Desktop:krb5-workstation-0:1.2.7-68.s390",
            "3Desktop:krb5-workstation-0:1.2.7-68.s390x",
            "3Desktop:krb5-workstation-0:1.2.7-68.x86_64",
            "3ES:krb5-0:1.2.7-68.src",
            "3ES:krb5-debuginfo-0:1.2.7-68.i386",
            "3ES:krb5-debuginfo-0:1.2.7-68.ia64",
            "3ES:krb5-debuginfo-0:1.2.7-68.ppc",
            "3ES:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3ES:krb5-debuginfo-0:1.2.7-68.s390",
            "3ES:krb5-debuginfo-0:1.2.7-68.s390x",
            "3ES:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3ES:krb5-devel-0:1.2.7-68.i386",
            "3ES:krb5-devel-0:1.2.7-68.ia64",
            "3ES:krb5-devel-0:1.2.7-68.ppc",
            "3ES:krb5-devel-0:1.2.7-68.s390",
            "3ES:krb5-devel-0:1.2.7-68.s390x",
            "3ES:krb5-devel-0:1.2.7-68.x86_64",
            "3ES:krb5-libs-0:1.2.7-68.i386",
            "3ES:krb5-libs-0:1.2.7-68.ia64",
            "3ES:krb5-libs-0:1.2.7-68.ppc",
            "3ES:krb5-libs-0:1.2.7-68.ppc64",
            "3ES:krb5-libs-0:1.2.7-68.s390",
            "3ES:krb5-libs-0:1.2.7-68.s390x",
            "3ES:krb5-libs-0:1.2.7-68.x86_64",
            "3ES:krb5-server-0:1.2.7-68.i386",
            "3ES:krb5-server-0:1.2.7-68.ia64",
            "3ES:krb5-server-0:1.2.7-68.ppc",
            "3ES:krb5-server-0:1.2.7-68.s390",
            "3ES:krb5-server-0:1.2.7-68.s390x",
            "3ES:krb5-server-0:1.2.7-68.x86_64",
            "3ES:krb5-workstation-0:1.2.7-68.i386",
            "3ES:krb5-workstation-0:1.2.7-68.ia64",
            "3ES:krb5-workstation-0:1.2.7-68.ppc",
            "3ES:krb5-workstation-0:1.2.7-68.s390",
            "3ES:krb5-workstation-0:1.2.7-68.s390x",
            "3ES:krb5-workstation-0:1.2.7-68.x86_64",
            "3WS:krb5-0:1.2.7-68.src",
            "3WS:krb5-debuginfo-0:1.2.7-68.i386",
            "3WS:krb5-debuginfo-0:1.2.7-68.ia64",
            "3WS:krb5-debuginfo-0:1.2.7-68.ppc",
            "3WS:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3WS:krb5-debuginfo-0:1.2.7-68.s390",
            "3WS:krb5-debuginfo-0:1.2.7-68.s390x",
            "3WS:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3WS:krb5-devel-0:1.2.7-68.i386",
            "3WS:krb5-devel-0:1.2.7-68.ia64",
            "3WS:krb5-devel-0:1.2.7-68.ppc",
            "3WS:krb5-devel-0:1.2.7-68.s390",
            "3WS:krb5-devel-0:1.2.7-68.s390x",
            "3WS:krb5-devel-0:1.2.7-68.x86_64",
            "3WS:krb5-libs-0:1.2.7-68.i386",
            "3WS:krb5-libs-0:1.2.7-68.ia64",
            "3WS:krb5-libs-0:1.2.7-68.ppc",
            "3WS:krb5-libs-0:1.2.7-68.ppc64",
            "3WS:krb5-libs-0:1.2.7-68.s390",
            "3WS:krb5-libs-0:1.2.7-68.s390x",
            "3WS:krb5-libs-0:1.2.7-68.x86_64",
            "3WS:krb5-server-0:1.2.7-68.i386",
            "3WS:krb5-server-0:1.2.7-68.ia64",
            "3WS:krb5-server-0:1.2.7-68.ppc",
            "3WS:krb5-server-0:1.2.7-68.s390",
            "3WS:krb5-server-0:1.2.7-68.s390x",
            "3WS:krb5-server-0:1.2.7-68.x86_64",
            "3WS:krb5-workstation-0:1.2.7-68.i386",
            "3WS:krb5-workstation-0:1.2.7-68.ia64",
            "3WS:krb5-workstation-0:1.2.7-68.ppc",
            "3WS:krb5-workstation-0:1.2.7-68.s390",
            "3WS:krb5-workstation-0:1.2.7-68.s390x",
            "3WS:krb5-workstation-0:1.2.7-68.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0181"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "krb5: uninitialized pointer use in krb5kdc"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0063",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432621"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka \"Uninitialized stack values.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: possible leak of sensitive data from krb5kdc using krb4 request",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:krb5-0:1.2.2-48.src",
          "2.1AS:krb5-devel-0:1.2.2-48.i386",
          "2.1AS:krb5-devel-0:1.2.2-48.ia64",
          "2.1AS:krb5-libs-0:1.2.2-48.i386",
          "2.1AS:krb5-libs-0:1.2.2-48.ia64",
          "2.1AS:krb5-server-0:1.2.2-48.i386",
          "2.1AS:krb5-server-0:1.2.2-48.ia64",
          "2.1AS:krb5-workstation-0:1.2.2-48.i386",
          "2.1AS:krb5-workstation-0:1.2.2-48.ia64",
          "2.1AW:krb5-0:1.2.2-48.src",
          "2.1AW:krb5-devel-0:1.2.2-48.i386",
          "2.1AW:krb5-devel-0:1.2.2-48.ia64",
          "2.1AW:krb5-libs-0:1.2.2-48.i386",
          "2.1AW:krb5-libs-0:1.2.2-48.ia64",
          "2.1AW:krb5-server-0:1.2.2-48.i386",
          "2.1AW:krb5-server-0:1.2.2-48.ia64",
          "2.1AW:krb5-workstation-0:1.2.2-48.i386",
          "2.1AW:krb5-workstation-0:1.2.2-48.ia64",
          "2.1ES:krb5-0:1.2.2-48.src",
          "2.1ES:krb5-devel-0:1.2.2-48.i386",
          "2.1ES:krb5-devel-0:1.2.2-48.ia64",
          "2.1ES:krb5-libs-0:1.2.2-48.i386",
          "2.1ES:krb5-libs-0:1.2.2-48.ia64",
          "2.1ES:krb5-server-0:1.2.2-48.i386",
          "2.1ES:krb5-server-0:1.2.2-48.ia64",
          "2.1ES:krb5-workstation-0:1.2.2-48.i386",
          "2.1ES:krb5-workstation-0:1.2.2-48.ia64",
          "2.1WS:krb5-0:1.2.2-48.src",
          "2.1WS:krb5-devel-0:1.2.2-48.i386",
          "2.1WS:krb5-devel-0:1.2.2-48.ia64",
          "2.1WS:krb5-libs-0:1.2.2-48.i386",
          "2.1WS:krb5-libs-0:1.2.2-48.ia64",
          "2.1WS:krb5-server-0:1.2.2-48.i386",
          "2.1WS:krb5-server-0:1.2.2-48.ia64",
          "2.1WS:krb5-workstation-0:1.2.2-48.i386",
          "2.1WS:krb5-workstation-0:1.2.2-48.ia64",
          "3AS:krb5-0:1.2.7-68.src",
          "3AS:krb5-debuginfo-0:1.2.7-68.i386",
          "3AS:krb5-debuginfo-0:1.2.7-68.ia64",
          "3AS:krb5-debuginfo-0:1.2.7-68.ppc",
          "3AS:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3AS:krb5-debuginfo-0:1.2.7-68.s390",
          "3AS:krb5-debuginfo-0:1.2.7-68.s390x",
          "3AS:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3AS:krb5-devel-0:1.2.7-68.i386",
          "3AS:krb5-devel-0:1.2.7-68.ia64",
          "3AS:krb5-devel-0:1.2.7-68.ppc",
          "3AS:krb5-devel-0:1.2.7-68.s390",
          "3AS:krb5-devel-0:1.2.7-68.s390x",
          "3AS:krb5-devel-0:1.2.7-68.x86_64",
          "3AS:krb5-libs-0:1.2.7-68.i386",
          "3AS:krb5-libs-0:1.2.7-68.ia64",
          "3AS:krb5-libs-0:1.2.7-68.ppc",
          "3AS:krb5-libs-0:1.2.7-68.ppc64",
          "3AS:krb5-libs-0:1.2.7-68.s390",
          "3AS:krb5-libs-0:1.2.7-68.s390x",
          "3AS:krb5-libs-0:1.2.7-68.x86_64",
          "3AS:krb5-server-0:1.2.7-68.i386",
          "3AS:krb5-server-0:1.2.7-68.ia64",
          "3AS:krb5-server-0:1.2.7-68.ppc",
          "3AS:krb5-server-0:1.2.7-68.s390",
          "3AS:krb5-server-0:1.2.7-68.s390x",
          "3AS:krb5-server-0:1.2.7-68.x86_64",
          "3AS:krb5-workstation-0:1.2.7-68.i386",
          "3AS:krb5-workstation-0:1.2.7-68.ia64",
          "3AS:krb5-workstation-0:1.2.7-68.ppc",
          "3AS:krb5-workstation-0:1.2.7-68.s390",
          "3AS:krb5-workstation-0:1.2.7-68.s390x",
          "3AS:krb5-workstation-0:1.2.7-68.x86_64",
          "3Desktop:krb5-0:1.2.7-68.src",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.i386",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ia64",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.s390",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.s390x",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3Desktop:krb5-devel-0:1.2.7-68.i386",
          "3Desktop:krb5-devel-0:1.2.7-68.ia64",
          "3Desktop:krb5-devel-0:1.2.7-68.ppc",
          "3Desktop:krb5-devel-0:1.2.7-68.s390",
          "3Desktop:krb5-devel-0:1.2.7-68.s390x",
          "3Desktop:krb5-devel-0:1.2.7-68.x86_64",
          "3Desktop:krb5-libs-0:1.2.7-68.i386",
          "3Desktop:krb5-libs-0:1.2.7-68.ia64",
          "3Desktop:krb5-libs-0:1.2.7-68.ppc",
          "3Desktop:krb5-libs-0:1.2.7-68.ppc64",
          "3Desktop:krb5-libs-0:1.2.7-68.s390",
          "3Desktop:krb5-libs-0:1.2.7-68.s390x",
          "3Desktop:krb5-libs-0:1.2.7-68.x86_64",
          "3Desktop:krb5-server-0:1.2.7-68.i386",
          "3Desktop:krb5-server-0:1.2.7-68.ia64",
          "3Desktop:krb5-server-0:1.2.7-68.ppc",
          "3Desktop:krb5-server-0:1.2.7-68.s390",
          "3Desktop:krb5-server-0:1.2.7-68.s390x",
          "3Desktop:krb5-server-0:1.2.7-68.x86_64",
          "3Desktop:krb5-workstation-0:1.2.7-68.i386",
          "3Desktop:krb5-workstation-0:1.2.7-68.ia64",
          "3Desktop:krb5-workstation-0:1.2.7-68.ppc",
          "3Desktop:krb5-workstation-0:1.2.7-68.s390",
          "3Desktop:krb5-workstation-0:1.2.7-68.s390x",
          "3Desktop:krb5-workstation-0:1.2.7-68.x86_64",
          "3ES:krb5-0:1.2.7-68.src",
          "3ES:krb5-debuginfo-0:1.2.7-68.i386",
          "3ES:krb5-debuginfo-0:1.2.7-68.ia64",
          "3ES:krb5-debuginfo-0:1.2.7-68.ppc",
          "3ES:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3ES:krb5-debuginfo-0:1.2.7-68.s390",
          "3ES:krb5-debuginfo-0:1.2.7-68.s390x",
          "3ES:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3ES:krb5-devel-0:1.2.7-68.i386",
          "3ES:krb5-devel-0:1.2.7-68.ia64",
          "3ES:krb5-devel-0:1.2.7-68.ppc",
          "3ES:krb5-devel-0:1.2.7-68.s390",
          "3ES:krb5-devel-0:1.2.7-68.s390x",
          "3ES:krb5-devel-0:1.2.7-68.x86_64",
          "3ES:krb5-libs-0:1.2.7-68.i386",
          "3ES:krb5-libs-0:1.2.7-68.ia64",
          "3ES:krb5-libs-0:1.2.7-68.ppc",
          "3ES:krb5-libs-0:1.2.7-68.ppc64",
          "3ES:krb5-libs-0:1.2.7-68.s390",
          "3ES:krb5-libs-0:1.2.7-68.s390x",
          "3ES:krb5-libs-0:1.2.7-68.x86_64",
          "3ES:krb5-server-0:1.2.7-68.i386",
          "3ES:krb5-server-0:1.2.7-68.ia64",
          "3ES:krb5-server-0:1.2.7-68.ppc",
          "3ES:krb5-server-0:1.2.7-68.s390",
          "3ES:krb5-server-0:1.2.7-68.s390x",
          "3ES:krb5-server-0:1.2.7-68.x86_64",
          "3ES:krb5-workstation-0:1.2.7-68.i386",
          "3ES:krb5-workstation-0:1.2.7-68.ia64",
          "3ES:krb5-workstation-0:1.2.7-68.ppc",
          "3ES:krb5-workstation-0:1.2.7-68.s390",
          "3ES:krb5-workstation-0:1.2.7-68.s390x",
          "3ES:krb5-workstation-0:1.2.7-68.x86_64",
          "3WS:krb5-0:1.2.7-68.src",
          "3WS:krb5-debuginfo-0:1.2.7-68.i386",
          "3WS:krb5-debuginfo-0:1.2.7-68.ia64",
          "3WS:krb5-debuginfo-0:1.2.7-68.ppc",
          "3WS:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3WS:krb5-debuginfo-0:1.2.7-68.s390",
          "3WS:krb5-debuginfo-0:1.2.7-68.s390x",
          "3WS:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3WS:krb5-devel-0:1.2.7-68.i386",
          "3WS:krb5-devel-0:1.2.7-68.ia64",
          "3WS:krb5-devel-0:1.2.7-68.ppc",
          "3WS:krb5-devel-0:1.2.7-68.s390",
          "3WS:krb5-devel-0:1.2.7-68.s390x",
          "3WS:krb5-devel-0:1.2.7-68.x86_64",
          "3WS:krb5-libs-0:1.2.7-68.i386",
          "3WS:krb5-libs-0:1.2.7-68.ia64",
          "3WS:krb5-libs-0:1.2.7-68.ppc",
          "3WS:krb5-libs-0:1.2.7-68.ppc64",
          "3WS:krb5-libs-0:1.2.7-68.s390",
          "3WS:krb5-libs-0:1.2.7-68.s390x",
          "3WS:krb5-libs-0:1.2.7-68.x86_64",
          "3WS:krb5-server-0:1.2.7-68.i386",
          "3WS:krb5-server-0:1.2.7-68.ia64",
          "3WS:krb5-server-0:1.2.7-68.ppc",
          "3WS:krb5-server-0:1.2.7-68.s390",
          "3WS:krb5-server-0:1.2.7-68.s390x",
          "3WS:krb5-server-0:1.2.7-68.x86_64",
          "3WS:krb5-workstation-0:1.2.7-68.i386",
          "3WS:krb5-workstation-0:1.2.7-68.ia64",
          "3WS:krb5-workstation-0:1.2.7-68.ppc",
          "3WS:krb5-workstation-0:1.2.7-68.s390",
          "3WS:krb5-workstation-0:1.2.7-68.s390x",
          "3WS:krb5-workstation-0:1.2.7-68.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "RHBZ#432621",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T18:54:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:krb5-0:1.2.2-48.src",
            "2.1AS:krb5-devel-0:1.2.2-48.i386",
            "2.1AS:krb5-devel-0:1.2.2-48.ia64",
            "2.1AS:krb5-libs-0:1.2.2-48.i386",
            "2.1AS:krb5-libs-0:1.2.2-48.ia64",
            "2.1AS:krb5-server-0:1.2.2-48.i386",
            "2.1AS:krb5-server-0:1.2.2-48.ia64",
            "2.1AS:krb5-workstation-0:1.2.2-48.i386",
            "2.1AS:krb5-workstation-0:1.2.2-48.ia64",
            "2.1AW:krb5-0:1.2.2-48.src",
            "2.1AW:krb5-devel-0:1.2.2-48.i386",
            "2.1AW:krb5-devel-0:1.2.2-48.ia64",
            "2.1AW:krb5-libs-0:1.2.2-48.i386",
            "2.1AW:krb5-libs-0:1.2.2-48.ia64",
            "2.1AW:krb5-server-0:1.2.2-48.i386",
            "2.1AW:krb5-server-0:1.2.2-48.ia64",
            "2.1AW:krb5-workstation-0:1.2.2-48.i386",
            "2.1AW:krb5-workstation-0:1.2.2-48.ia64",
            "2.1ES:krb5-0:1.2.2-48.src",
            "2.1ES:krb5-devel-0:1.2.2-48.i386",
            "2.1ES:krb5-devel-0:1.2.2-48.ia64",
            "2.1ES:krb5-libs-0:1.2.2-48.i386",
            "2.1ES:krb5-libs-0:1.2.2-48.ia64",
            "2.1ES:krb5-server-0:1.2.2-48.i386",
            "2.1ES:krb5-server-0:1.2.2-48.ia64",
            "2.1ES:krb5-workstation-0:1.2.2-48.i386",
            "2.1ES:krb5-workstation-0:1.2.2-48.ia64",
            "2.1WS:krb5-0:1.2.2-48.src",
            "2.1WS:krb5-devel-0:1.2.2-48.i386",
            "2.1WS:krb5-devel-0:1.2.2-48.ia64",
            "2.1WS:krb5-libs-0:1.2.2-48.i386",
            "2.1WS:krb5-libs-0:1.2.2-48.ia64",
            "2.1WS:krb5-server-0:1.2.2-48.i386",
            "2.1WS:krb5-server-0:1.2.2-48.ia64",
            "2.1WS:krb5-workstation-0:1.2.2-48.i386",
            "2.1WS:krb5-workstation-0:1.2.2-48.ia64",
            "3AS:krb5-0:1.2.7-68.src",
            "3AS:krb5-debuginfo-0:1.2.7-68.i386",
            "3AS:krb5-debuginfo-0:1.2.7-68.ia64",
            "3AS:krb5-debuginfo-0:1.2.7-68.ppc",
            "3AS:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3AS:krb5-debuginfo-0:1.2.7-68.s390",
            "3AS:krb5-debuginfo-0:1.2.7-68.s390x",
            "3AS:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3AS:krb5-devel-0:1.2.7-68.i386",
            "3AS:krb5-devel-0:1.2.7-68.ia64",
            "3AS:krb5-devel-0:1.2.7-68.ppc",
            "3AS:krb5-devel-0:1.2.7-68.s390",
            "3AS:krb5-devel-0:1.2.7-68.s390x",
            "3AS:krb5-devel-0:1.2.7-68.x86_64",
            "3AS:krb5-libs-0:1.2.7-68.i386",
            "3AS:krb5-libs-0:1.2.7-68.ia64",
            "3AS:krb5-libs-0:1.2.7-68.ppc",
            "3AS:krb5-libs-0:1.2.7-68.ppc64",
            "3AS:krb5-libs-0:1.2.7-68.s390",
            "3AS:krb5-libs-0:1.2.7-68.s390x",
            "3AS:krb5-libs-0:1.2.7-68.x86_64",
            "3AS:krb5-server-0:1.2.7-68.i386",
            "3AS:krb5-server-0:1.2.7-68.ia64",
            "3AS:krb5-server-0:1.2.7-68.ppc",
            "3AS:krb5-server-0:1.2.7-68.s390",
            "3AS:krb5-server-0:1.2.7-68.s390x",
            "3AS:krb5-server-0:1.2.7-68.x86_64",
            "3AS:krb5-workstation-0:1.2.7-68.i386",
            "3AS:krb5-workstation-0:1.2.7-68.ia64",
            "3AS:krb5-workstation-0:1.2.7-68.ppc",
            "3AS:krb5-workstation-0:1.2.7-68.s390",
            "3AS:krb5-workstation-0:1.2.7-68.s390x",
            "3AS:krb5-workstation-0:1.2.7-68.x86_64",
            "3Desktop:krb5-0:1.2.7-68.src",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.i386",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ia64",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.s390",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.s390x",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3Desktop:krb5-devel-0:1.2.7-68.i386",
            "3Desktop:krb5-devel-0:1.2.7-68.ia64",
            "3Desktop:krb5-devel-0:1.2.7-68.ppc",
            "3Desktop:krb5-devel-0:1.2.7-68.s390",
            "3Desktop:krb5-devel-0:1.2.7-68.s390x",
            "3Desktop:krb5-devel-0:1.2.7-68.x86_64",
            "3Desktop:krb5-libs-0:1.2.7-68.i386",
            "3Desktop:krb5-libs-0:1.2.7-68.ia64",
            "3Desktop:krb5-libs-0:1.2.7-68.ppc",
            "3Desktop:krb5-libs-0:1.2.7-68.ppc64",
            "3Desktop:krb5-libs-0:1.2.7-68.s390",
            "3Desktop:krb5-libs-0:1.2.7-68.s390x",
            "3Desktop:krb5-libs-0:1.2.7-68.x86_64",
            "3Desktop:krb5-server-0:1.2.7-68.i386",
            "3Desktop:krb5-server-0:1.2.7-68.ia64",
            "3Desktop:krb5-server-0:1.2.7-68.ppc",
            "3Desktop:krb5-server-0:1.2.7-68.s390",
            "3Desktop:krb5-server-0:1.2.7-68.s390x",
            "3Desktop:krb5-server-0:1.2.7-68.x86_64",
            "3Desktop:krb5-workstation-0:1.2.7-68.i386",
            "3Desktop:krb5-workstation-0:1.2.7-68.ia64",
            "3Desktop:krb5-workstation-0:1.2.7-68.ppc",
            "3Desktop:krb5-workstation-0:1.2.7-68.s390",
            "3Desktop:krb5-workstation-0:1.2.7-68.s390x",
            "3Desktop:krb5-workstation-0:1.2.7-68.x86_64",
            "3ES:krb5-0:1.2.7-68.src",
            "3ES:krb5-debuginfo-0:1.2.7-68.i386",
            "3ES:krb5-debuginfo-0:1.2.7-68.ia64",
            "3ES:krb5-debuginfo-0:1.2.7-68.ppc",
            "3ES:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3ES:krb5-debuginfo-0:1.2.7-68.s390",
            "3ES:krb5-debuginfo-0:1.2.7-68.s390x",
            "3ES:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3ES:krb5-devel-0:1.2.7-68.i386",
            "3ES:krb5-devel-0:1.2.7-68.ia64",
            "3ES:krb5-devel-0:1.2.7-68.ppc",
            "3ES:krb5-devel-0:1.2.7-68.s390",
            "3ES:krb5-devel-0:1.2.7-68.s390x",
            "3ES:krb5-devel-0:1.2.7-68.x86_64",
            "3ES:krb5-libs-0:1.2.7-68.i386",
            "3ES:krb5-libs-0:1.2.7-68.ia64",
            "3ES:krb5-libs-0:1.2.7-68.ppc",
            "3ES:krb5-libs-0:1.2.7-68.ppc64",
            "3ES:krb5-libs-0:1.2.7-68.s390",
            "3ES:krb5-libs-0:1.2.7-68.s390x",
            "3ES:krb5-libs-0:1.2.7-68.x86_64",
            "3ES:krb5-server-0:1.2.7-68.i386",
            "3ES:krb5-server-0:1.2.7-68.ia64",
            "3ES:krb5-server-0:1.2.7-68.ppc",
            "3ES:krb5-server-0:1.2.7-68.s390",
            "3ES:krb5-server-0:1.2.7-68.s390x",
            "3ES:krb5-server-0:1.2.7-68.x86_64",
            "3ES:krb5-workstation-0:1.2.7-68.i386",
            "3ES:krb5-workstation-0:1.2.7-68.ia64",
            "3ES:krb5-workstation-0:1.2.7-68.ppc",
            "3ES:krb5-workstation-0:1.2.7-68.s390",
            "3ES:krb5-workstation-0:1.2.7-68.s390x",
            "3ES:krb5-workstation-0:1.2.7-68.x86_64",
            "3WS:krb5-0:1.2.7-68.src",
            "3WS:krb5-debuginfo-0:1.2.7-68.i386",
            "3WS:krb5-debuginfo-0:1.2.7-68.ia64",
            "3WS:krb5-debuginfo-0:1.2.7-68.ppc",
            "3WS:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3WS:krb5-debuginfo-0:1.2.7-68.s390",
            "3WS:krb5-debuginfo-0:1.2.7-68.s390x",
            "3WS:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3WS:krb5-devel-0:1.2.7-68.i386",
            "3WS:krb5-devel-0:1.2.7-68.ia64",
            "3WS:krb5-devel-0:1.2.7-68.ppc",
            "3WS:krb5-devel-0:1.2.7-68.s390",
            "3WS:krb5-devel-0:1.2.7-68.s390x",
            "3WS:krb5-devel-0:1.2.7-68.x86_64",
            "3WS:krb5-libs-0:1.2.7-68.i386",
            "3WS:krb5-libs-0:1.2.7-68.ia64",
            "3WS:krb5-libs-0:1.2.7-68.ppc",
            "3WS:krb5-libs-0:1.2.7-68.ppc64",
            "3WS:krb5-libs-0:1.2.7-68.s390",
            "3WS:krb5-libs-0:1.2.7-68.s390x",
            "3WS:krb5-libs-0:1.2.7-68.x86_64",
            "3WS:krb5-server-0:1.2.7-68.i386",
            "3WS:krb5-server-0:1.2.7-68.ia64",
            "3WS:krb5-server-0:1.2.7-68.ppc",
            "3WS:krb5-server-0:1.2.7-68.s390",
            "3WS:krb5-server-0:1.2.7-68.s390x",
            "3WS:krb5-server-0:1.2.7-68.x86_64",
            "3WS:krb5-workstation-0:1.2.7-68.i386",
            "3WS:krb5-workstation-0:1.2.7-68.ia64",
            "3WS:krb5-workstation-0:1.2.7-68.ppc",
            "3WS:krb5-workstation-0:1.2.7-68.s390",
            "3WS:krb5-workstation-0:1.2.7-68.s390x",
            "3WS:krb5-workstation-0:1.2.7-68.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0181"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "krb5: possible leak of sensitive data from krb5kdc using krb4 request"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0948",
      "discovery_date": "2008-02-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "435087"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: incorrect handling of high-numbered file descriptors in RPC library",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:krb5-0:1.2.2-48.src",
          "2.1AS:krb5-devel-0:1.2.2-48.i386",
          "2.1AS:krb5-devel-0:1.2.2-48.ia64",
          "2.1AS:krb5-libs-0:1.2.2-48.i386",
          "2.1AS:krb5-libs-0:1.2.2-48.ia64",
          "2.1AS:krb5-server-0:1.2.2-48.i386",
          "2.1AS:krb5-server-0:1.2.2-48.ia64",
          "2.1AS:krb5-workstation-0:1.2.2-48.i386",
          "2.1AS:krb5-workstation-0:1.2.2-48.ia64",
          "2.1AW:krb5-0:1.2.2-48.src",
          "2.1AW:krb5-devel-0:1.2.2-48.i386",
          "2.1AW:krb5-devel-0:1.2.2-48.ia64",
          "2.1AW:krb5-libs-0:1.2.2-48.i386",
          "2.1AW:krb5-libs-0:1.2.2-48.ia64",
          "2.1AW:krb5-server-0:1.2.2-48.i386",
          "2.1AW:krb5-server-0:1.2.2-48.ia64",
          "2.1AW:krb5-workstation-0:1.2.2-48.i386",
          "2.1AW:krb5-workstation-0:1.2.2-48.ia64",
          "2.1ES:krb5-0:1.2.2-48.src",
          "2.1ES:krb5-devel-0:1.2.2-48.i386",
          "2.1ES:krb5-devel-0:1.2.2-48.ia64",
          "2.1ES:krb5-libs-0:1.2.2-48.i386",
          "2.1ES:krb5-libs-0:1.2.2-48.ia64",
          "2.1ES:krb5-server-0:1.2.2-48.i386",
          "2.1ES:krb5-server-0:1.2.2-48.ia64",
          "2.1ES:krb5-workstation-0:1.2.2-48.i386",
          "2.1ES:krb5-workstation-0:1.2.2-48.ia64",
          "2.1WS:krb5-0:1.2.2-48.src",
          "2.1WS:krb5-devel-0:1.2.2-48.i386",
          "2.1WS:krb5-devel-0:1.2.2-48.ia64",
          "2.1WS:krb5-libs-0:1.2.2-48.i386",
          "2.1WS:krb5-libs-0:1.2.2-48.ia64",
          "2.1WS:krb5-server-0:1.2.2-48.i386",
          "2.1WS:krb5-server-0:1.2.2-48.ia64",
          "2.1WS:krb5-workstation-0:1.2.2-48.i386",
          "2.1WS:krb5-workstation-0:1.2.2-48.ia64",
          "3AS:krb5-0:1.2.7-68.src",
          "3AS:krb5-debuginfo-0:1.2.7-68.i386",
          "3AS:krb5-debuginfo-0:1.2.7-68.ia64",
          "3AS:krb5-debuginfo-0:1.2.7-68.ppc",
          "3AS:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3AS:krb5-debuginfo-0:1.2.7-68.s390",
          "3AS:krb5-debuginfo-0:1.2.7-68.s390x",
          "3AS:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3AS:krb5-devel-0:1.2.7-68.i386",
          "3AS:krb5-devel-0:1.2.7-68.ia64",
          "3AS:krb5-devel-0:1.2.7-68.ppc",
          "3AS:krb5-devel-0:1.2.7-68.s390",
          "3AS:krb5-devel-0:1.2.7-68.s390x",
          "3AS:krb5-devel-0:1.2.7-68.x86_64",
          "3AS:krb5-libs-0:1.2.7-68.i386",
          "3AS:krb5-libs-0:1.2.7-68.ia64",
          "3AS:krb5-libs-0:1.2.7-68.ppc",
          "3AS:krb5-libs-0:1.2.7-68.ppc64",
          "3AS:krb5-libs-0:1.2.7-68.s390",
          "3AS:krb5-libs-0:1.2.7-68.s390x",
          "3AS:krb5-libs-0:1.2.7-68.x86_64",
          "3AS:krb5-server-0:1.2.7-68.i386",
          "3AS:krb5-server-0:1.2.7-68.ia64",
          "3AS:krb5-server-0:1.2.7-68.ppc",
          "3AS:krb5-server-0:1.2.7-68.s390",
          "3AS:krb5-server-0:1.2.7-68.s390x",
          "3AS:krb5-server-0:1.2.7-68.x86_64",
          "3AS:krb5-workstation-0:1.2.7-68.i386",
          "3AS:krb5-workstation-0:1.2.7-68.ia64",
          "3AS:krb5-workstation-0:1.2.7-68.ppc",
          "3AS:krb5-workstation-0:1.2.7-68.s390",
          "3AS:krb5-workstation-0:1.2.7-68.s390x",
          "3AS:krb5-workstation-0:1.2.7-68.x86_64",
          "3Desktop:krb5-0:1.2.7-68.src",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.i386",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ia64",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.s390",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.s390x",
          "3Desktop:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3Desktop:krb5-devel-0:1.2.7-68.i386",
          "3Desktop:krb5-devel-0:1.2.7-68.ia64",
          "3Desktop:krb5-devel-0:1.2.7-68.ppc",
          "3Desktop:krb5-devel-0:1.2.7-68.s390",
          "3Desktop:krb5-devel-0:1.2.7-68.s390x",
          "3Desktop:krb5-devel-0:1.2.7-68.x86_64",
          "3Desktop:krb5-libs-0:1.2.7-68.i386",
          "3Desktop:krb5-libs-0:1.2.7-68.ia64",
          "3Desktop:krb5-libs-0:1.2.7-68.ppc",
          "3Desktop:krb5-libs-0:1.2.7-68.ppc64",
          "3Desktop:krb5-libs-0:1.2.7-68.s390",
          "3Desktop:krb5-libs-0:1.2.7-68.s390x",
          "3Desktop:krb5-libs-0:1.2.7-68.x86_64",
          "3Desktop:krb5-server-0:1.2.7-68.i386",
          "3Desktop:krb5-server-0:1.2.7-68.ia64",
          "3Desktop:krb5-server-0:1.2.7-68.ppc",
          "3Desktop:krb5-server-0:1.2.7-68.s390",
          "3Desktop:krb5-server-0:1.2.7-68.s390x",
          "3Desktop:krb5-server-0:1.2.7-68.x86_64",
          "3Desktop:krb5-workstation-0:1.2.7-68.i386",
          "3Desktop:krb5-workstation-0:1.2.7-68.ia64",
          "3Desktop:krb5-workstation-0:1.2.7-68.ppc",
          "3Desktop:krb5-workstation-0:1.2.7-68.s390",
          "3Desktop:krb5-workstation-0:1.2.7-68.s390x",
          "3Desktop:krb5-workstation-0:1.2.7-68.x86_64",
          "3ES:krb5-0:1.2.7-68.src",
          "3ES:krb5-debuginfo-0:1.2.7-68.i386",
          "3ES:krb5-debuginfo-0:1.2.7-68.ia64",
          "3ES:krb5-debuginfo-0:1.2.7-68.ppc",
          "3ES:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3ES:krb5-debuginfo-0:1.2.7-68.s390",
          "3ES:krb5-debuginfo-0:1.2.7-68.s390x",
          "3ES:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3ES:krb5-devel-0:1.2.7-68.i386",
          "3ES:krb5-devel-0:1.2.7-68.ia64",
          "3ES:krb5-devel-0:1.2.7-68.ppc",
          "3ES:krb5-devel-0:1.2.7-68.s390",
          "3ES:krb5-devel-0:1.2.7-68.s390x",
          "3ES:krb5-devel-0:1.2.7-68.x86_64",
          "3ES:krb5-libs-0:1.2.7-68.i386",
          "3ES:krb5-libs-0:1.2.7-68.ia64",
          "3ES:krb5-libs-0:1.2.7-68.ppc",
          "3ES:krb5-libs-0:1.2.7-68.ppc64",
          "3ES:krb5-libs-0:1.2.7-68.s390",
          "3ES:krb5-libs-0:1.2.7-68.s390x",
          "3ES:krb5-libs-0:1.2.7-68.x86_64",
          "3ES:krb5-server-0:1.2.7-68.i386",
          "3ES:krb5-server-0:1.2.7-68.ia64",
          "3ES:krb5-server-0:1.2.7-68.ppc",
          "3ES:krb5-server-0:1.2.7-68.s390",
          "3ES:krb5-server-0:1.2.7-68.s390x",
          "3ES:krb5-server-0:1.2.7-68.x86_64",
          "3ES:krb5-workstation-0:1.2.7-68.i386",
          "3ES:krb5-workstation-0:1.2.7-68.ia64",
          "3ES:krb5-workstation-0:1.2.7-68.ppc",
          "3ES:krb5-workstation-0:1.2.7-68.s390",
          "3ES:krb5-workstation-0:1.2.7-68.s390x",
          "3ES:krb5-workstation-0:1.2.7-68.x86_64",
          "3WS:krb5-0:1.2.7-68.src",
          "3WS:krb5-debuginfo-0:1.2.7-68.i386",
          "3WS:krb5-debuginfo-0:1.2.7-68.ia64",
          "3WS:krb5-debuginfo-0:1.2.7-68.ppc",
          "3WS:krb5-debuginfo-0:1.2.7-68.ppc64",
          "3WS:krb5-debuginfo-0:1.2.7-68.s390",
          "3WS:krb5-debuginfo-0:1.2.7-68.s390x",
          "3WS:krb5-debuginfo-0:1.2.7-68.x86_64",
          "3WS:krb5-devel-0:1.2.7-68.i386",
          "3WS:krb5-devel-0:1.2.7-68.ia64",
          "3WS:krb5-devel-0:1.2.7-68.ppc",
          "3WS:krb5-devel-0:1.2.7-68.s390",
          "3WS:krb5-devel-0:1.2.7-68.s390x",
          "3WS:krb5-devel-0:1.2.7-68.x86_64",
          "3WS:krb5-libs-0:1.2.7-68.i386",
          "3WS:krb5-libs-0:1.2.7-68.ia64",
          "3WS:krb5-libs-0:1.2.7-68.ppc",
          "3WS:krb5-libs-0:1.2.7-68.ppc64",
          "3WS:krb5-libs-0:1.2.7-68.s390",
          "3WS:krb5-libs-0:1.2.7-68.s390x",
          "3WS:krb5-libs-0:1.2.7-68.x86_64",
          "3WS:krb5-server-0:1.2.7-68.i386",
          "3WS:krb5-server-0:1.2.7-68.ia64",
          "3WS:krb5-server-0:1.2.7-68.ppc",
          "3WS:krb5-server-0:1.2.7-68.s390",
          "3WS:krb5-server-0:1.2.7-68.s390x",
          "3WS:krb5-server-0:1.2.7-68.x86_64",
          "3WS:krb5-workstation-0:1.2.7-68.i386",
          "3WS:krb5-workstation-0:1.2.7-68.ia64",
          "3WS:krb5-workstation-0:1.2.7-68.ppc",
          "3WS:krb5-workstation-0:1.2.7-68.s390",
          "3WS:krb5-workstation-0:1.2.7-68.s390x",
          "3WS:krb5-workstation-0:1.2.7-68.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0948"
        },
        {
          "category": "external",
          "summary": "RHBZ#435087",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=435087"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0948",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0948"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0948",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0948"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T18:54:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:krb5-0:1.2.2-48.src",
            "2.1AS:krb5-devel-0:1.2.2-48.i386",
            "2.1AS:krb5-devel-0:1.2.2-48.ia64",
            "2.1AS:krb5-libs-0:1.2.2-48.i386",
            "2.1AS:krb5-libs-0:1.2.2-48.ia64",
            "2.1AS:krb5-server-0:1.2.2-48.i386",
            "2.1AS:krb5-server-0:1.2.2-48.ia64",
            "2.1AS:krb5-workstation-0:1.2.2-48.i386",
            "2.1AS:krb5-workstation-0:1.2.2-48.ia64",
            "2.1AW:krb5-0:1.2.2-48.src",
            "2.1AW:krb5-devel-0:1.2.2-48.i386",
            "2.1AW:krb5-devel-0:1.2.2-48.ia64",
            "2.1AW:krb5-libs-0:1.2.2-48.i386",
            "2.1AW:krb5-libs-0:1.2.2-48.ia64",
            "2.1AW:krb5-server-0:1.2.2-48.i386",
            "2.1AW:krb5-server-0:1.2.2-48.ia64",
            "2.1AW:krb5-workstation-0:1.2.2-48.i386",
            "2.1AW:krb5-workstation-0:1.2.2-48.ia64",
            "2.1ES:krb5-0:1.2.2-48.src",
            "2.1ES:krb5-devel-0:1.2.2-48.i386",
            "2.1ES:krb5-devel-0:1.2.2-48.ia64",
            "2.1ES:krb5-libs-0:1.2.2-48.i386",
            "2.1ES:krb5-libs-0:1.2.2-48.ia64",
            "2.1ES:krb5-server-0:1.2.2-48.i386",
            "2.1ES:krb5-server-0:1.2.2-48.ia64",
            "2.1ES:krb5-workstation-0:1.2.2-48.i386",
            "2.1ES:krb5-workstation-0:1.2.2-48.ia64",
            "2.1WS:krb5-0:1.2.2-48.src",
            "2.1WS:krb5-devel-0:1.2.2-48.i386",
            "2.1WS:krb5-devel-0:1.2.2-48.ia64",
            "2.1WS:krb5-libs-0:1.2.2-48.i386",
            "2.1WS:krb5-libs-0:1.2.2-48.ia64",
            "2.1WS:krb5-server-0:1.2.2-48.i386",
            "2.1WS:krb5-server-0:1.2.2-48.ia64",
            "2.1WS:krb5-workstation-0:1.2.2-48.i386",
            "2.1WS:krb5-workstation-0:1.2.2-48.ia64",
            "3AS:krb5-0:1.2.7-68.src",
            "3AS:krb5-debuginfo-0:1.2.7-68.i386",
            "3AS:krb5-debuginfo-0:1.2.7-68.ia64",
            "3AS:krb5-debuginfo-0:1.2.7-68.ppc",
            "3AS:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3AS:krb5-debuginfo-0:1.2.7-68.s390",
            "3AS:krb5-debuginfo-0:1.2.7-68.s390x",
            "3AS:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3AS:krb5-devel-0:1.2.7-68.i386",
            "3AS:krb5-devel-0:1.2.7-68.ia64",
            "3AS:krb5-devel-0:1.2.7-68.ppc",
            "3AS:krb5-devel-0:1.2.7-68.s390",
            "3AS:krb5-devel-0:1.2.7-68.s390x",
            "3AS:krb5-devel-0:1.2.7-68.x86_64",
            "3AS:krb5-libs-0:1.2.7-68.i386",
            "3AS:krb5-libs-0:1.2.7-68.ia64",
            "3AS:krb5-libs-0:1.2.7-68.ppc",
            "3AS:krb5-libs-0:1.2.7-68.ppc64",
            "3AS:krb5-libs-0:1.2.7-68.s390",
            "3AS:krb5-libs-0:1.2.7-68.s390x",
            "3AS:krb5-libs-0:1.2.7-68.x86_64",
            "3AS:krb5-server-0:1.2.7-68.i386",
            "3AS:krb5-server-0:1.2.7-68.ia64",
            "3AS:krb5-server-0:1.2.7-68.ppc",
            "3AS:krb5-server-0:1.2.7-68.s390",
            "3AS:krb5-server-0:1.2.7-68.s390x",
            "3AS:krb5-server-0:1.2.7-68.x86_64",
            "3AS:krb5-workstation-0:1.2.7-68.i386",
            "3AS:krb5-workstation-0:1.2.7-68.ia64",
            "3AS:krb5-workstation-0:1.2.7-68.ppc",
            "3AS:krb5-workstation-0:1.2.7-68.s390",
            "3AS:krb5-workstation-0:1.2.7-68.s390x",
            "3AS:krb5-workstation-0:1.2.7-68.x86_64",
            "3Desktop:krb5-0:1.2.7-68.src",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.i386",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ia64",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.s390",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.s390x",
            "3Desktop:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3Desktop:krb5-devel-0:1.2.7-68.i386",
            "3Desktop:krb5-devel-0:1.2.7-68.ia64",
            "3Desktop:krb5-devel-0:1.2.7-68.ppc",
            "3Desktop:krb5-devel-0:1.2.7-68.s390",
            "3Desktop:krb5-devel-0:1.2.7-68.s390x",
            "3Desktop:krb5-devel-0:1.2.7-68.x86_64",
            "3Desktop:krb5-libs-0:1.2.7-68.i386",
            "3Desktop:krb5-libs-0:1.2.7-68.ia64",
            "3Desktop:krb5-libs-0:1.2.7-68.ppc",
            "3Desktop:krb5-libs-0:1.2.7-68.ppc64",
            "3Desktop:krb5-libs-0:1.2.7-68.s390",
            "3Desktop:krb5-libs-0:1.2.7-68.s390x",
            "3Desktop:krb5-libs-0:1.2.7-68.x86_64",
            "3Desktop:krb5-server-0:1.2.7-68.i386",
            "3Desktop:krb5-server-0:1.2.7-68.ia64",
            "3Desktop:krb5-server-0:1.2.7-68.ppc",
            "3Desktop:krb5-server-0:1.2.7-68.s390",
            "3Desktop:krb5-server-0:1.2.7-68.s390x",
            "3Desktop:krb5-server-0:1.2.7-68.x86_64",
            "3Desktop:krb5-workstation-0:1.2.7-68.i386",
            "3Desktop:krb5-workstation-0:1.2.7-68.ia64",
            "3Desktop:krb5-workstation-0:1.2.7-68.ppc",
            "3Desktop:krb5-workstation-0:1.2.7-68.s390",
            "3Desktop:krb5-workstation-0:1.2.7-68.s390x",
            "3Desktop:krb5-workstation-0:1.2.7-68.x86_64",
            "3ES:krb5-0:1.2.7-68.src",
            "3ES:krb5-debuginfo-0:1.2.7-68.i386",
            "3ES:krb5-debuginfo-0:1.2.7-68.ia64",
            "3ES:krb5-debuginfo-0:1.2.7-68.ppc",
            "3ES:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3ES:krb5-debuginfo-0:1.2.7-68.s390",
            "3ES:krb5-debuginfo-0:1.2.7-68.s390x",
            "3ES:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3ES:krb5-devel-0:1.2.7-68.i386",
            "3ES:krb5-devel-0:1.2.7-68.ia64",
            "3ES:krb5-devel-0:1.2.7-68.ppc",
            "3ES:krb5-devel-0:1.2.7-68.s390",
            "3ES:krb5-devel-0:1.2.7-68.s390x",
            "3ES:krb5-devel-0:1.2.7-68.x86_64",
            "3ES:krb5-libs-0:1.2.7-68.i386",
            "3ES:krb5-libs-0:1.2.7-68.ia64",
            "3ES:krb5-libs-0:1.2.7-68.ppc",
            "3ES:krb5-libs-0:1.2.7-68.ppc64",
            "3ES:krb5-libs-0:1.2.7-68.s390",
            "3ES:krb5-libs-0:1.2.7-68.s390x",
            "3ES:krb5-libs-0:1.2.7-68.x86_64",
            "3ES:krb5-server-0:1.2.7-68.i386",
            "3ES:krb5-server-0:1.2.7-68.ia64",
            "3ES:krb5-server-0:1.2.7-68.ppc",
            "3ES:krb5-server-0:1.2.7-68.s390",
            "3ES:krb5-server-0:1.2.7-68.s390x",
            "3ES:krb5-server-0:1.2.7-68.x86_64",
            "3ES:krb5-workstation-0:1.2.7-68.i386",
            "3ES:krb5-workstation-0:1.2.7-68.ia64",
            "3ES:krb5-workstation-0:1.2.7-68.ppc",
            "3ES:krb5-workstation-0:1.2.7-68.s390",
            "3ES:krb5-workstation-0:1.2.7-68.s390x",
            "3ES:krb5-workstation-0:1.2.7-68.x86_64",
            "3WS:krb5-0:1.2.7-68.src",
            "3WS:krb5-debuginfo-0:1.2.7-68.i386",
            "3WS:krb5-debuginfo-0:1.2.7-68.ia64",
            "3WS:krb5-debuginfo-0:1.2.7-68.ppc",
            "3WS:krb5-debuginfo-0:1.2.7-68.ppc64",
            "3WS:krb5-debuginfo-0:1.2.7-68.s390",
            "3WS:krb5-debuginfo-0:1.2.7-68.s390x",
            "3WS:krb5-debuginfo-0:1.2.7-68.x86_64",
            "3WS:krb5-devel-0:1.2.7-68.i386",
            "3WS:krb5-devel-0:1.2.7-68.ia64",
            "3WS:krb5-devel-0:1.2.7-68.ppc",
            "3WS:krb5-devel-0:1.2.7-68.s390",
            "3WS:krb5-devel-0:1.2.7-68.s390x",
            "3WS:krb5-devel-0:1.2.7-68.x86_64",
            "3WS:krb5-libs-0:1.2.7-68.i386",
            "3WS:krb5-libs-0:1.2.7-68.ia64",
            "3WS:krb5-libs-0:1.2.7-68.ppc",
            "3WS:krb5-libs-0:1.2.7-68.ppc64",
            "3WS:krb5-libs-0:1.2.7-68.s390",
            "3WS:krb5-libs-0:1.2.7-68.s390x",
            "3WS:krb5-libs-0:1.2.7-68.x86_64",
            "3WS:krb5-server-0:1.2.7-68.i386",
            "3WS:krb5-server-0:1.2.7-68.ia64",
            "3WS:krb5-server-0:1.2.7-68.ppc",
            "3WS:krb5-server-0:1.2.7-68.s390",
            "3WS:krb5-server-0:1.2.7-68.s390x",
            "3WS:krb5-server-0:1.2.7-68.x86_64",
            "3WS:krb5-workstation-0:1.2.7-68.i386",
            "3WS:krb5-workstation-0:1.2.7-68.ia64",
            "3WS:krb5-workstation-0:1.2.7-68.ppc",
            "3WS:krb5-workstation-0:1.2.7-68.s390",
            "3WS:krb5-workstation-0:1.2.7-68.s390x",
            "3WS:krb5-workstation-0:1.2.7-68.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0181"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "krb5: incorrect handling of high-numbered file descriptors in RPC library"
    }
  ]
}

rhsa-2008:0182

Vulnerability from csaf_redhat

Published

2008-03-18 19:22

Modified

2024-11-22 01:52

Summary

Red Hat Security Advisory: krb5 security update

Notes

Topic

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team.

Details

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated krb5 packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 4.5 Extended Update Support.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Kerberos is a network authentication system which allows clients and\nservers to authenticate to each other through use of symmetric encryption\nand a trusted third party, the KDC.\n\nA flaw was found in the way the MIT Kerberos Authentication Service and Key\nDistribution Center server (krb5kdc) handled Kerberos v4 protocol packets.\nAn unauthenticated remote attacker could use this flaw to crash the\nkrb5kdc daemon, disclose portions of its memory, or possibly execute\narbitrary code using malformed or truncated Kerberos v4 protocol\nrequests. (CVE-2008-0062, CVE-2008-0063)\n\nThis issue only affected krb5kdc with Kerberos v4 protocol compatibility\nenabled, which is the default setting on Red Hat Enterprise Linux 4.\nKerberos v4 protocol support can be disabled by adding \"v4_mode=none\"\n(without the quotes) to the \"[kdcdefaults]\" section of\n/var/kerberos/krb5kdc/kdc.conf.\n\nRed Hat would like to thank MIT for reporting these issues.\n\nAll krb5 users are advised to update to these erratum packages which\ncontain backported fixes to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0182",
        "url": "https://access.redhat.com/errata/RHSA-2008:0182"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "432620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
      },
      {
        "category": "external",
        "summary": "432621",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0182.json"
      }
    ],
    "title": "Red Hat Security Advisory: krb5 security update",
    "tracking": {
      "current_release_date": "2024-11-22T01:52:10+00:00",
      "generator": {
        "date": "2024-11-22T01:52:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2008:0182",
      "initial_release_date": "2008-03-18T19:22:00+00:00",
      "revision_history": [
        {
          "date": "2008-03-18T19:22:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-03-18T15:22:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T01:52:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS EUS (v. 4.5)",
                "product": {
                  "name": "Red Hat Enterprise Linux AS EUS (v. 4.5)",
                  "product_id": "4AS-4.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:4.5::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES EUS (v. 4.5)",
                "product": {
                  "name": "Red Hat Enterprise Linux ES EUS (v. 4.5)",
                  "product_id": "4ES-4.5.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_eus:4.5::es"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-49.el4_5.1.ia64",
                "product": {
                  "name": "krb5-devel-0:1.3.4-49.el4_5.1.ia64",
                  "product_id": "krb5-devel-0:1.3.4-49.el4_5.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-49.el4_5.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
                  "product_id": "krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-49.el4_5.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
                  "product_id": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-49.el4_5.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-49.el4_5.1.ia64",
                "product": {
                  "name": "krb5-libs-0:1.3.4-49.el4_5.1.ia64",
                  "product_id": "krb5-libs-0:1.3.4-49.el4_5.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-49.el4_5.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-49.el4_5.1.ia64",
                "product": {
                  "name": "krb5-server-0:1.3.4-49.el4_5.1.ia64",
                  "product_id": "krb5-server-0:1.3.4-49.el4_5.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-49.el4_5.1?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
                  "product_id": "krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-49.el4_5.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-49.el4_5.1.i386",
                "product": {
                  "name": "krb5-libs-0:1.3.4-49.el4_5.1.i386",
                  "product_id": "krb5-libs-0:1.3.4-49.el4_5.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-49.el4_5.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-49.el4_5.1.i386",
                "product": {
                  "name": "krb5-devel-0:1.3.4-49.el4_5.1.i386",
                  "product_id": "krb5-devel-0:1.3.4-49.el4_5.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-49.el4_5.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-49.el4_5.1.i386",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-49.el4_5.1.i386",
                  "product_id": "krb5-workstation-0:1.3.4-49.el4_5.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-49.el4_5.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-49.el4_5.1.i386",
                "product": {
                  "name": "krb5-server-0:1.3.4-49.el4_5.1.i386",
                  "product_id": "krb5-server-0:1.3.4-49.el4_5.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-49.el4_5.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
                "product": {
                  "name": "krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
                  "product_id": "krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-49.el4_5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
                  "product_id": "krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-49.el4_5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
                  "product_id": "krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-49.el4_5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
                "product": {
                  "name": "krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
                  "product_id": "krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-49.el4_5.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-49.el4_5.1.x86_64",
                "product": {
                  "name": "krb5-server-0:1.3.4-49.el4_5.1.x86_64",
                  "product_id": "krb5-server-0:1.3.4-49.el4_5.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-49.el4_5.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-0:1.3.4-49.el4_5.1.src",
                "product": {
                  "name": "krb5-0:1.3.4-49.el4_5.1.src",
                  "product_id": "krb5-0:1.3.4-49.el4_5.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5@1.3.4-49.el4_5.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-49.el4_5.1.ppc",
                "product": {
                  "name": "krb5-devel-0:1.3.4-49.el4_5.1.ppc",
                  "product_id": "krb5-devel-0:1.3.4-49.el4_5.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-49.el4_5.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
                  "product_id": "krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-49.el4_5.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
                  "product_id": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-49.el4_5.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-49.el4_5.1.ppc",
                "product": {
                  "name": "krb5-libs-0:1.3.4-49.el4_5.1.ppc",
                  "product_id": "krb5-libs-0:1.3.4-49.el4_5.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-49.el4_5.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-49.el4_5.1.ppc",
                "product": {
                  "name": "krb5-server-0:1.3.4-49.el4_5.1.ppc",
                  "product_id": "krb5-server-0:1.3.4-49.el4_5.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-49.el4_5.1?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
                  "product_id": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-49.el4_5.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
                "product": {
                  "name": "krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
                  "product_id": "krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-49.el4_5.1?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-49.el4_5.1.s390x",
                "product": {
                  "name": "krb5-devel-0:1.3.4-49.el4_5.1.s390x",
                  "product_id": "krb5-devel-0:1.3.4-49.el4_5.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-49.el4_5.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
                  "product_id": "krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-49.el4_5.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
                  "product_id": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-49.el4_5.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-49.el4_5.1.s390x",
                "product": {
                  "name": "krb5-libs-0:1.3.4-49.el4_5.1.s390x",
                  "product_id": "krb5-libs-0:1.3.4-49.el4_5.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-49.el4_5.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-49.el4_5.1.s390x",
                "product": {
                  "name": "krb5-server-0:1.3.4-49.el4_5.1.s390x",
                  "product_id": "krb5-server-0:1.3.4-49.el4_5.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-49.el4_5.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
                  "product_id": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-49.el4_5.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-49.el4_5.1.s390",
                "product": {
                  "name": "krb5-libs-0:1.3.4-49.el4_5.1.s390",
                  "product_id": "krb5-libs-0:1.3.4-49.el4_5.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-49.el4_5.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-49.el4_5.1.s390",
                "product": {
                  "name": "krb5-devel-0:1.3.4-49.el4_5.1.s390",
                  "product_id": "krb5-devel-0:1.3.4-49.el4_5.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-49.el4_5.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-49.el4_5.1.s390",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-49.el4_5.1.s390",
                  "product_id": "krb5-workstation-0:1.3.4-49.el4_5.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-49.el4_5.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-49.el4_5.1.s390",
                "product": {
                  "name": "krb5-server-0:1.3.4-49.el4_5.1.s390",
                  "product_id": "krb5-server-0:1.3.4-49.el4_5.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-49.el4_5.1?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.3.4-49.el4_5.1.src as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-0:1.3.4-49.el4_5.1.src"
        },
        "product_reference": "krb5-0:1.3.4-49.el4_5.1.src",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.ppc64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux AS EUS (v. 4.5)",
          "product_id": "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4AS-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.3.4-49.el4_5.1.src as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-0:1.3.4-49.el4_5.1.src"
        },
        "product_reference": "krb5-0:1.3.4-49.el4_5.1.src",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.ppc64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.i386 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.i386",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.ia64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.ppc as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.s390 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.s390",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.s390x as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
        "relates_to_product_reference": "4ES-4.5.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-49.el4_5.1.x86_64 as a component of Red Hat Enterprise Linux ES EUS (v. 4.5)",
          "product_id": "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
        "relates_to_product_reference": "4ES-4.5.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0062",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: uninitialized pointer use in krb5kdc",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-4.5.z:krb5-0:1.3.4-49.el4_5.1.src",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-0:1.3.4-49.el4_5.1.src",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "RHBZ#432620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0062",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-4.5.z:krb5-0:1.3.4-49.el4_5.1.src",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-0:1.3.4-49.el4_5.1.src",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0182"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "krb5: uninitialized pointer use in krb5kdc"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0063",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432621"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka \"Uninitialized stack values.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: possible leak of sensitive data from krb5kdc using krb4 request",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-4.5.z:krb5-0:1.3.4-49.el4_5.1.src",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
          "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-0:1.3.4-49.el4_5.1.src",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
          "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "RHBZ#432621",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:22:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS-4.5.z:krb5-0:1.3.4-49.el4_5.1.src",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
            "4AS-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-0:1.3.4-49.el4_5.1.src",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.ppc64",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-debuginfo-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-devel-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.ppc64",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-libs-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-server-0:1.3.4-49.el4_5.1.x86_64",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.i386",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ia64",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.ppc",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.s390x",
            "4ES-4.5.z:krb5-workstation-0:1.3.4-49.el4_5.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0182"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "krb5: possible leak of sensitive data from krb5kdc using krb4 request"
    }
  ]
}

rhsa-2008:0180

Vulnerability from csaf_redhat

Published

2008-03-18 18:35

Modified

2024-11-22 01:52

Summary

Red Hat Security Advisory: krb5 security update

Notes

Topic

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team.

Details

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated krb5 packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 4.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Kerberos is a network authentication system which allows clients and\nservers to authenticate to each other through use of symmetric encryption\nand a trusted third party, the KDC.\n\nA flaw was found in the way the MIT Kerberos Authentication Service and Key\nDistribution Center server (krb5kdc) handled Kerberos v4 protocol packets.\nAn unauthenticated remote attacker could use this flaw to crash the\nkrb5kdc daemon, disclose portions of its memory, or possibly execute\narbitrary code using malformed or truncated Kerberos v4 protocol\nrequests. (CVE-2008-0062, CVE-2008-0063)\n\nThis issue only affected krb5kdc with Kerberos v4 protocol compatibility\nenabled, which is the default setting on Red Hat Enterprise Linux 4.\nKerberos v4 protocol support can be disabled by adding \"v4_mode=none\"\n(without the quotes) to the \"[kdcdefaults]\" section of\n/var/kerberos/krb5kdc/kdc.conf.\n\nRed Hat would like to thank MIT for reporting these issues.\n\nA double-free flaw was discovered in the GSSAPI library used by MIT\nKerberos. This flaw could possibly cause a crash of the application using\nthe GSSAPI library. (CVE-2007-5971)\n\nAll krb5 users are advised to update to these erratum packages which\ncontain backported fixes to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0180",
        "url": "https://access.redhat.com/errata/RHSA-2008:0180"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "415351",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
      },
      {
        "category": "external",
        "summary": "432620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
      },
      {
        "category": "external",
        "summary": "432621",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0180.json"
      }
    ],
    "title": "Red Hat Security Advisory: krb5 security update",
    "tracking": {
      "current_release_date": "2024-11-22T01:52:02+00:00",
      "generator": {
        "date": "2024-11-22T01:52:02+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2008:0180",
      "initial_release_date": "2008-03-18T18:35:00+00:00",
      "revision_history": [
        {
          "date": "2008-03-18T18:35:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-03-18T14:47:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T01:52:02+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
                "product": {
                  "name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
                  "product_id": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
                "product": {
                  "name": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
                  "product_id": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
                  "product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
                  "product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
                "product": {
                  "name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
                  "product_id": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
                  "product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
                "product": {
                  "name": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
                  "product_id": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
                "product": {
                  "name": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
                  "product_id": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-54.el4_6.1.i386",
                "product": {
                  "name": "krb5-server-0:1.3.4-54.el4_6.1.i386",
                  "product_id": "krb5-server-0:1.3.4-54.el4_6.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
                  "product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
                "product": {
                  "name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
                  "product_id": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
                "product": {
                  "name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
                  "product_id": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
                  "product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
                  "product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
                "product": {
                  "name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
                  "product_id": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-0:1.3.4-54.el4_6.1.src",
                "product": {
                  "name": "krb5-0:1.3.4-54.el4_6.1.src",
                  "product_id": "krb5-0:1.3.4-54.el4_6.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5@1.3.4-54.el4_6.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
                "product": {
                  "name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
                  "product_id": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
                "product": {
                  "name": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
                  "product_id": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
                  "product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
                  "product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
                "product": {
                  "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
                  "product_id": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
                  "product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
                "product": {
                  "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
                  "product_id": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
                "product": {
                  "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
                  "product_id": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
                "product": {
                  "name": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
                  "product_id": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
                  "product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
                  "product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
                "product": {
                  "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
                  "product_id": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
                "product": {
                  "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
                  "product_id": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.3.4-54.el4_6.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
                "product": {
                  "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
                  "product_id": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.3.4-54.el4_6.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
                "product": {
                  "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
                  "product_id": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.3.4-54.el4_6.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.3.4-54.el4_6.1.s390",
                "product": {
                  "name": "krb5-server-0:1.3.4-54.el4_6.1.s390",
                  "product_id": "krb5-server-0:1.3.4-54.el4_6.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.3.4-54.el4_6.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
                "product": {
                  "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
                  "product_id": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.3.4-54.el4_6.1?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.3.4-54.el4_6.1.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-0:1.3.4-54.el4_6.1.src"
        },
        "product_reference": "krb5-0:1.3.4-54.el4_6.1.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.3.4-54.el4_6.1.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-0:1.3.4-54.el4_6.1.src"
        },
        "product_reference": "krb5-0:1.3.4-54.el4_6.1.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.3.4-54.el4_6.1.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-0:1.3.4-54.el4_6.1.src"
        },
        "product_reference": "krb5-0:1.3.4-54.el4_6.1.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.3.4-54.el4_6.1.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-0:1.3.4-54.el4_6.1.src"
        },
        "product_reference": "krb5-0:1.3.4-54.el4_6.1.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-5971",
      "discovery_date": "2007-11-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "415351"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: double free in gssapi lib",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. See https://marc.info/?m=119743235325151",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:krb5-0:1.3.4-54.el4_6.1.src",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-0:1.3.4-54.el4_6.1.src",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-0:1.3.4-54.el4_6.1.src",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-5971"
        },
        {
          "category": "external",
          "summary": "RHBZ#415351",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-5971",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971"
        }
      ],
      "release_date": "2007-11-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T18:35:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:krb5-0:1.3.4-54.el4_6.1.src",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-0:1.3.4-54.el4_6.1.src",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-0:1.3.4-54.el4_6.1.src",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0180"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "krb5: double free in gssapi lib"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0062",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: uninitialized pointer use in krb5kdc",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:krb5-0:1.3.4-54.el4_6.1.src",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-0:1.3.4-54.el4_6.1.src",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-0:1.3.4-54.el4_6.1.src",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "RHBZ#432620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0062",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T18:35:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:krb5-0:1.3.4-54.el4_6.1.src",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-0:1.3.4-54.el4_6.1.src",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-0:1.3.4-54.el4_6.1.src",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0180"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "krb5: uninitialized pointer use in krb5kdc"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0063",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432621"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka \"Uninitialized stack values.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: possible leak of sensitive data from krb5kdc using krb4 request",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:krb5-0:1.3.4-54.el4_6.1.src",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-0:1.3.4-54.el4_6.1.src",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-0:1.3.4-54.el4_6.1.src",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
          "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "RHBZ#432621",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T18:35:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:krb5-0:1.3.4-54.el4_6.1.src",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4AS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-0:1.3.4-54.el4_6.1.src",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4Desktop:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-0:1.3.4-54.el4_6.1.src",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4ES:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-0:1.3.4-54.el4_6.1.src",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.ppc64",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-debuginfo-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-devel-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.ppc64",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-libs-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-server-0:1.3.4-54.el4_6.1.x86_64",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.i386",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ia64",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.ppc",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.s390x",
            "4WS:krb5-workstation-0:1.3.4-54.el4_6.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0180"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "krb5: possible leak of sensitive data from krb5kdc using krb4 request"
    }
  ]
}

rhsa-2008:0164

Vulnerability from csaf_redhat

Published

2008-03-18 19:26

Modified

2024-11-22 01:51

Summary

Red Hat Security Advisory: krb5 security and bugfix update

Notes

Topic

Updated krb5 packages that resolve several issues and fix multiple bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team.

Details

Kerberos is a network authentication system which allows clients and servers to authenticate to each other through use of symmetric encryption and a trusted third party, the KDC. A flaw was found in the way the MIT Kerberos Authentication Service and Key Distribution Center server (krb5kdc) handled Kerberos v4 protocol packets. An unauthenticated remote attacker could use this flaw to crash the krb5kdc daemon, disclose portions of its memory, or possibly execute arbitrary code using malformed or truncated Kerberos v4 protocol requests. (CVE-2008-0062, CVE-2008-0063) This issue only affected krb5kdc with Kerberos v4 protocol compatibility enabled, which is the default setting on Red Hat Enterprise Linux 4. Kerberos v4 protocol support can be disabled by adding "v4_mode=none" (without the quotes) to the "[kdcdefaults]" section of /var/kerberos/krb5kdc/kdc.conf. Jeff Altman of Secure Endpoints discovered a flaw in the RPC library as used by MIT Kerberos kadmind server. An unauthenticated remote attacker could use this flaw to crash kadmind or possibly execute arbitrary code. This issue only affected systems with certain resource limits configured and did not affect systems using default resource limits used by Red Hat Enterprise Linux 5. (CVE-2008-0947) Red Hat would like to thank MIT for reporting these issues. Multiple memory management flaws were discovered in the GSSAPI library used by MIT Kerberos. These flaws could possibly result in use of already freed memory or an attempt to free already freed memory blocks (double-free flaw), possibly causing a crash or arbitrary code execution. (CVE-2007-5901, CVE-2007-5971) In addition to the security issues resolved above, the following bugs were also fixed: * delegated krb5 credentials were not properly stored when SPNEGO was the underlying mechanism during GSSAPI authentication. Consequently, applications attempting to copy delegated Kerberos 5 credentials into a credential cache received an "Invalid credential was supplied" message rather than a copy of the delegated credentials. With this update, SPNEGO credentials can be properly searched, allowing applications to copy delegated credentials as expected. * applications can initiate context acceptance (via gss_accept_sec_context) without passing a ret_flags value that would indicate that credentials were delegated. A delegated credential handle should have been returned in such instances. This updated package adds a temp_ret_flag that stores the credential status in the event no other ret_flags value is passed by an application calling gss_accept_sec_context. * kpasswd did not fallback to TCP on receipt of certain errors, or when a packet was too big for UDP. This update corrects this. * when the libkrb5 password-routine generated a set-password or change-password request, incorrect sequence numbers were generated for all requests subsequent to the first request. This caused password change requests to fail if the primary server was unavailable. This updated package corrects this by saving the sequence number value after the AP-REQ data is built and restoring this value before the request is generated. * when a user's password expired, kinit would not prompt that user to change the password, instead simply informing the user their password had expired. This update corrects this behavior: kinit now prompts for a new password to be set when a password has expired. All krb5 users are advised to upgrade to these updated packages, which contain backported fixes to address these vulnerabilities and fix these bugs.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated krb5 packages that resolve several issues and fix multiple bugs are\nnow available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Kerberos is a network authentication system which allows clients and\nservers to authenticate to each other through use of symmetric encryption\nand a trusted third party, the KDC.\n\nA flaw was found in the way the MIT Kerberos Authentication Service and Key\nDistribution Center server (krb5kdc) handled Kerberos v4 protocol packets.\nAn unauthenticated remote attacker could use this flaw to crash the\nkrb5kdc daemon, disclose portions of its memory, or possibly execute\narbitrary code using malformed or truncated Kerberos v4 protocol requests.\n(CVE-2008-0062, CVE-2008-0063)\n\nThis issue only affected krb5kdc with Kerberos v4 protocol compatibility\nenabled, which is the default setting on Red Hat Enterprise Linux 4.\nKerberos v4 protocol support can be disabled by adding \"v4_mode=none\"\n(without the quotes) to the \"[kdcdefaults]\" section of\n/var/kerberos/krb5kdc/kdc.conf.\n\nJeff Altman of Secure Endpoints discovered a flaw in the RPC library as\nused by MIT Kerberos kadmind server. An unauthenticated remote attacker\ncould use this flaw to crash kadmind or possibly execute arbitrary code.\nThis issue only affected systems with certain resource limits configured\nand did not affect systems using default resource limits used by Red Hat\nEnterprise Linux 5. (CVE-2008-0947)\n\nRed Hat would like to thank MIT for reporting these issues.\n\nMultiple memory management flaws were discovered in the GSSAPI library used\nby MIT Kerberos. These flaws could possibly result in use of already freed\nmemory or an attempt to free already freed memory blocks (double-free\nflaw), possibly causing a crash or arbitrary code execution.\n(CVE-2007-5901, CVE-2007-5971)\n\nIn addition to the security issues resolved above, the following bugs were\nalso fixed:\n\n* delegated krb5 credentials were not properly stored when SPNEGO was the\nunderlying mechanism during GSSAPI authentication. Consequently,\napplications attempting to copy delegated Kerberos 5 credentials into a\ncredential cache received an \"Invalid credential was supplied\" message\nrather than a copy of the delegated credentials. With this update, SPNEGO\ncredentials can be properly searched, allowing applications to copy\ndelegated credentials as expected.\n\n* applications can initiate context acceptance (via gss_accept_sec_context)\nwithout passing a ret_flags value that would indicate that credentials were\ndelegated. A delegated credential handle should have been returned in such\ninstances. This updated package adds a temp_ret_flag that stores the\ncredential status in the event no other ret_flags value is passed by an\napplication calling gss_accept_sec_context.\n\n* kpasswd did not fallback to TCP on receipt of certain errors, or when a\npacket was too big for UDP. This update corrects this.\n\n* when the libkrb5 password-routine generated a set-password or\nchange-password request, incorrect sequence numbers were generated for all\nrequests subsequent to the first request. This caused password change\nrequests to fail if the primary server was unavailable. This updated\npackage corrects this by saving the sequence number value after the AP-REQ\ndata is built and restoring this value before the request is generated.\n\n* when a user\u0027s password expired, kinit would not prompt that user to\nchange the password, instead simply informing the user their password had\nexpired. This update corrects this behavior: kinit now prompts for a new\npassword to be set when a password has expired.\n\nAll krb5 users are advised to upgrade to these updated packages, which\ncontain backported fixes to address these vulnerabilities and fix these\nbugs.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0164",
        "url": "https://access.redhat.com/errata/RHSA-2008:0164"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "415321",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415321"
      },
      {
        "category": "external",
        "summary": "415351",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
      },
      {
        "category": "external",
        "summary": "432620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
      },
      {
        "category": "external",
        "summary": "432621",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
      },
      {
        "category": "external",
        "summary": "433596",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=433596"
      },
      {
        "category": "external",
        "summary": "436460",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436460"
      },
      {
        "category": "external",
        "summary": "436465",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436465"
      },
      {
        "category": "external",
        "summary": "436467",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436467"
      },
      {
        "category": "external",
        "summary": "436468",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436468"
      },
      {
        "category": "external",
        "summary": "436470",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436470"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0164.json"
      }
    ],
    "title": "Red Hat Security Advisory: krb5 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-22T01:51:57+00:00",
      "generator": {
        "date": "2024-11-22T01:51:57+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2008:0164",
      "initial_release_date": "2008-03-18T19:26:00+00:00",
      "revision_history": [
        {
          "date": "2008-03-18T19:26:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-03-18T15:26:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T01:51:57+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                  "product_id": "5Client-Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-0:1.6.1-17.el5_1.1.src",
                "product": {
                  "name": "krb5-0:1.6.1-17.el5_1.1.src",
                  "product_id": "krb5-0:1.6.1-17.el5_1.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5@1.6.1-17.el5_1.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src"
        },
        "product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-0:1.6.1-17.el5_1.1.src"
        },
        "product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-0:1.6.1-17.el5_1.1.src"
        },
        "product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-5901",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2007-11-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "415321"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.  NOTE: this might be the result of a typo in the source code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: use-after-free in gssapi lib",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5901\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-5901"
        },
        {
          "category": "external",
          "summary": "RHBZ#415321",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415321"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-5901",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-5901"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5901",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5901"
        }
      ],
      "release_date": "2007-11-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "krb5: use-after-free in gssapi lib"
    },
    {
      "cve": "CVE-2007-5971",
      "discovery_date": "2007-11-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "415351"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: double free in gssapi lib",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. See https://marc.info/?m=119743235325151",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-5971"
        },
        {
          "category": "external",
          "summary": "RHBZ#415351",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-5971",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971"
        }
      ],
      "release_date": "2007-11-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "krb5: double free in gssapi lib"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0062",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: uninitialized pointer use in krb5kdc",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "RHBZ#432620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0062",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "krb5: uninitialized pointer use in krb5kdc"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0063",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432621"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka \"Uninitialized stack values.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: possible leak of sensitive data from krb5kdc using krb4 request",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "RHBZ#432621",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "krb5: possible leak of sensitive data from krb5kdc using krb4 request"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        },
        {
          "names": [
            "Jeff Altman"
          ],
          "organization": "Secure Endpoints"
        }
      ],
      "cve": "CVE-2008-0947",
      "discovery_date": "2008-02-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "433596"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: file descriptor array overflow in RPC library",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0947"
        },
        {
          "category": "external",
          "summary": "RHBZ#433596",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=433596"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0947",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0947"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0947",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0947"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "krb5: file descriptor array overflow in RPC library"
    }
  ]
}

ghsa-f6c2-j3p8-vxvv

Vulnerability from github

Published

2022-05-01 23:27

Modified

2023-12-28 18:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2008-0062"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-665"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2008-03-19T10:44:00Z",
    "severity": "HIGH"
  },
  "details": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
  "id": "GHSA-f6c2-j3p8-vxvv",
  "modified": "2023-12-28T18:30:29Z",
  "published": "2022-05-01T23:27:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
    },
    {
      "type": "WEB",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
    },
    {
      "type": "WEB",
      "url": "http://docs.info.apple.com/article.html?artnum=307562"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29420"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29423"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29424"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29428"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29435"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29438"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29450"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29451"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29457"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29462"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29464"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29516"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/29663"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/30535"
    },
    {
      "type": "WEB",
      "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
    },
    {
      "type": "WEB",
      "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
    },
    {
      "type": "WEB",
      "url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
    },
    {
      "type": "WEB",
      "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
    },
    {
      "type": "WEB",
      "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2008/dsa-1524"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/895609"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/489761"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/28303"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1019626"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-587-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/0922/references"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/0924/references"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/1102/references"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2008/1744"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

fkie_cve-2008-0062

Vulnerability from fkie_nvd

Published

2008-03-19 10:44

Modified

2025-04-09 00:30

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
cve@mitre.org	http://docs.info.apple.com/article.html?artnum=307562	Broken Link
cve@mitre.org	http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html	Mailing List
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html	Mailing List
cve@mitre.org	http://marc.info/?l=bugtraq&m=130497213107107&w=2	Mailing List
cve@mitre.org	http://marc.info/?l=bugtraq&m=130497213107107&w=2	Mailing List
cve@mitre.org	http://secunia.com/advisories/29420	Broken Link
cve@mitre.org	http://secunia.com/advisories/29423	Broken Link
cve@mitre.org	http://secunia.com/advisories/29424	Broken Link
cve@mitre.org	http://secunia.com/advisories/29428	Broken Link
cve@mitre.org	http://secunia.com/advisories/29435	Broken Link
cve@mitre.org	http://secunia.com/advisories/29438	Broken Link
cve@mitre.org	http://secunia.com/advisories/29450	Broken Link
cve@mitre.org	http://secunia.com/advisories/29451	Broken Link
cve@mitre.org	http://secunia.com/advisories/29457	Broken Link
cve@mitre.org	http://secunia.com/advisories/29462	Broken Link
cve@mitre.org	http://secunia.com/advisories/29464	Broken Link
cve@mitre.org	http://secunia.com/advisories/29516	Broken Link
cve@mitre.org	http://secunia.com/advisories/29663	Broken Link
cve@mitre.org	http://secunia.com/advisories/30535	Broken Link
cve@mitre.org	http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html	Broken Link
cve@mitre.org	http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html	Broken Link
cve@mitre.org	http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt	Third Party Advisory
cve@mitre.org	http://wiki.rpath.com/Advisories:rPSA-2008-0112	Broken Link
cve@mitre.org	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112	Broken Link
cve@mitre.org	http://www.debian.org/security/2008/dsa-1524	Third Party Advisory
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml	Third Party Advisory
cve@mitre.org	http://www.kb.cert.org/vuls/id/895609	Third Party Advisory, US Government Resource
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDVSA-2008:069	Broken Link
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDVSA-2008:070	Broken Link
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDVSA-2008:071	Broken Link
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2008-0164.html	Broken Link
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2008-0180.html	Broken Link
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2008-0181.html	Broken Link
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2008-0182.html	Broken Link
cve@mitre.org	http://www.securityfocus.com/archive/1/489761	Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securityfocus.com/archive/1/489883/100/0/threaded	Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securityfocus.com/archive/1/493080/100/0/threaded	Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securityfocus.com/bid/28303	Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securitytracker.com/id?1019626	Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org	http://www.ubuntu.com/usn/usn-587-1	Third Party Advisory
cve@mitre.org	http://www.vmware.com/security/advisories/VMSA-2008-0009.html	Third Party Advisory
cve@mitre.org	http://www.vupen.com/english/advisories/2008/0922/references	Broken Link
cve@mitre.org	http://www.vupen.com/english/advisories/2008/0924/references	Broken Link
cve@mitre.org	http://www.vupen.com/english/advisories/2008/1102/references	Broken Link
cve@mitre.org	http://www.vupen.com/english/advisories/2008/1744	Broken Link
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/41275	Third Party Advisory, VDB Entry
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496	Broken Link
cve@mitre.org	https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html	Mailing List
cve@mitre.org	https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html	Mailing List
af854a3a-2127-422b-91ae-364da2661108	http://docs.info.apple.com/article.html?artnum=307562	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html	Mailing List
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html	Mailing List
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=130497213107107&w=2	Mailing List
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=130497213107107&w=2	Mailing List
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29420	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29423	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29424	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29428	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29435	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29438	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29450	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29451	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29457	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29462	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29464	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29516	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/29663	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/30535	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://wiki.rpath.com/Advisories:rPSA-2008-0112	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2008/dsa-1524	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/895609	Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDVSA-2008:069	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDVSA-2008:070	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDVSA-2008:071	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2008-0164.html	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2008-0180.html	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2008-0181.html	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2008-0182.html	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/489761	Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/489883/100/0/threaded	Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/493080/100/0/threaded	Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/28303	Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1019626	Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/usn-587-1	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.vmware.com/security/advisories/VMSA-2008-0009.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2008/0922/references	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2008/0924/references	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2008/1102/references	Broken Link
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2008/1744	Broken Link
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/41275	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496	Broken Link
af854a3a-2127-422b-91ae-364da2661108	https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html	Mailing List
af854a3a-2127-422b-91ae-364da2661108	https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html	Mailing List

Impacted products

Vendor	Product	Version
mit	kerberos_5	*
debian	debian_linux	3.1
debian	debian_linux	4.0
canonical	ubuntu_linux	6.06
canonical	ubuntu_linux	6.10
canonical	ubuntu_linux	7.04
canonical	ubuntu_linux	7.10
fedoraproject	fedora	7
fedoraproject	fedora	8

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "904FBF9F-9269-4088-BD5A-3C773E6F841E",
              "versionEndIncluding": "1.6.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
              "matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "823BF8BE-2309-4F67-A5E2-EAD98F723468",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3EFD171-01F7-450B-B6F3-0F7E443A2337",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*",
              "matchCriteriaId": "72E4DB7F-07C3-46BB-AAA2-05CD0312C57F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."
    },
    {
      "lang": "es",
      "value": "KDC en MIT Kerberos 5 (krb5kdc) no fija variable global alguna para determinados tipos de mensaje krb4, la cual permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n mediante mensajes manipulados que disparan una referencia a un puntero nulo o doble liberaci\u00f3n de memoria (double-free)."
    }
  ],
  "id": "CVE-2008-0062",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2008-03-19T10:44:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://docs.info.apple.com/article.html?artnum=307562"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List"
      ],
      "url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List"
      ],
      "url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29420"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29423"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29424"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29428"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29435"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29438"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29450"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29451"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29457"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29462"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29464"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29516"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29663"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/30535"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2008/dsa-1524"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/895609"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/archive/1/489761"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/28303"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id?1019626"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/usn-587-1"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/0922/references"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/0924/references"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/1102/references"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/1744"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Broken Link"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List"
      ],
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List"
      ],
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://docs.info.apple.com/article.html?artnum=307562"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29420"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29423"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29424"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29428"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29435"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29438"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29450"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29451"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29457"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29462"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29464"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29516"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/29663"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://secunia.com/advisories/30535"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.debian.org/security/2008/dsa-1524"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/895609"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/archive/1/489761"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/28303"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id?1019626"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/usn-587-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/0922/references"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/0924/references"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/1102/references"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "http://www.vupen.com/english/advisories/2008/1744"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link"
      ],
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List"
      ],
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-665"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

gsd-2008-0062

Vulnerability from gsd

Modified

2023-12-13 01:22

Details

Aliases

CVE-2008-0062

Aliases

CVE-2008-0062

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2008-0062",
    "description": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
    "id": "GSD-2008-0062",
    "references": [
      "https://www.suse.com/security/cve/CVE-2008-0062.html",
      "https://www.debian.org/security/2008/dsa-1524",
      "https://access.redhat.com/errata/RHSA-2008:0182",
      "https://access.redhat.com/errata/RHSA-2008:0181",
      "https://access.redhat.com/errata/RHSA-2008:0180",
      "https://access.redhat.com/errata/RHSA-2008:0164",
      "https://linux.oracle.com/cve/CVE-2008-0062.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2008-0062"
      ],
      "details": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
      "id": "GSD-2008-0062",
      "modified": "2023-12-13T01:22:58.393542Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2008-0062",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "ADV-2008-1744",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/1744"
          },
          {
            "name": "29457",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29457"
          },
          {
            "name": "MDVSA-2008:069",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
          },
          {
            "name": "29464",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29464"
          },
          {
            "name": "GLSA-200803-31",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
          },
          {
            "name": "FEDORA-2008-2637",
            "refsource": "FEDORA",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
          },
          {
            "name": "MDVSA-2008:071",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
          },
          {
            "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0112",
            "refsource": "CONFIRM",
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
          },
          {
            "name": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html",
            "refsource": "CONFIRM",
            "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
          },
          {
            "name": "SSRT100495",
            "refsource": "HP",
            "url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
          },
          {
            "name": "29451",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29451"
          },
          {
            "name": "29663",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29663"
          },
          {
            "name": "FEDORA-2008-2647",
            "refsource": "FEDORA",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
          },
          {
            "name": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112",
            "refsource": "CONFIRM",
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
          },
          {
            "name": "29438",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29438"
          },
          {
            "name": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html",
            "refsource": "CONFIRM",
            "url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9496",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
          },
          {
            "name": "ADV-2008-0924",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/0924/references"
          },
          {
            "name": "RHSA-2008:0164",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
          },
          {
            "name": "MDVSA-2008:070",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
          },
          {
            "name": "ADV-2008-0922",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/0922/references"
          },
          {
            "name": "29450",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29450"
          },
          {
            "name": "29435",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29435"
          },
          {
            "name": "krb5-kdc-code-execution(41275)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
          },
          {
            "name": "1019626",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1019626"
          },
          {
            "name": "20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
          },
          {
            "name": "29428",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29428"
          },
          {
            "name": "29420",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29420"
          },
          {
            "name": "DSA-1524",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2008/dsa-1524"
          },
          {
            "name": "30535",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/30535"
          },
          {
            "name": "APPLE-SA-2008-03-18",
            "refsource": "APPLE",
            "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
          },
          {
            "name": "RHSA-2008:0182",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
          },
          {
            "name": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html",
            "refsource": "CONFIRM",
            "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
          },
          {
            "name": "20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
          },
          {
            "name": "RHSA-2008:0180",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
          },
          {
            "name": "SUSE-SA:2008:016",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
          },
          {
            "name": "29516",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29516"
          },
          {
            "name": "29462",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29462"
          },
          {
            "name": "29424",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29424"
          },
          {
            "name": "http://docs.info.apple.com/article.html?artnum=307562",
            "refsource": "CONFIRM",
            "url": "http://docs.info.apple.com/article.html?artnum=307562"
          },
          {
            "name": "RHSA-2008:0181",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
          },
          {
            "name": "29423",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/29423"
          },
          {
            "name": "USN-587-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-587-1"
          },
          {
            "name": "ADV-2008-1102",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2008/1102/references"
          },
          {
            "name": "28303",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/28303"
          },
          {
            "name": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt",
            "refsource": "CONFIRM",
            "url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
          },
          {
            "name": "20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/489761"
          },
          {
            "name": "HPSBOV02682",
            "refsource": "HP",
            "url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
          },
          {
            "name": "VU#895609",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/895609"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "904FBF9F-9269-4088-BD5A-3C773E6F841E",
                    "versionEndIncluding": "1.6.3",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0F92AB32-E7DE-43F4-B877-1F41FA162EC7",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*",
                    "matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "23E304C9-F780-4358-A58D-1E4C93977704",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6EBDAFF8-DE44-4E80-B6BD-E341F767F501",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "823BF8BE-2309-4F67-A5E2-EAD98F723468",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E3EFD171-01F7-450B-B6F3-0F7E443A2337",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "72E4DB7F-07C3-46BB-AAA2-05CD0312C57F",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free."
          },
          {
            "lang": "es",
            "value": "KDC en MIT Kerberos 5 (krb5kdc) no fija variable global alguna para determinados tipos de mensaje krb4, la cual permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n mediante mensajes manipulados que disparan una referencia a un puntero nulo o doble liberaci\u00f3n de memoria (double-free)."
          }
        ],
        "id": "CVE-2008-0062",
        "lastModified": "2024-02-09T00:42:52.807",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2008-03-19T10:44:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=307562"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=130497213107107\u0026w=2"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29420"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29423"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29424"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29428"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29435"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29438"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29450"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29451"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29457"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29462"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29464"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29516"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/29663"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://secunia.com/advisories/30535"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0112"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1524"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/895609"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:069"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:070"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:071"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0164.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0180.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0181.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0182.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/archive/1/489761"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/archive/1/489883/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/archive/1/493080/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/28303"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securitytracker.com/id?1019626"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.ubuntu.com/usn/usn-587-1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2008-0009.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0922/references"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0924/references"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1102/references"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1744"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41275"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Broken Link"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Mailing List"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-665"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

opensuse-su-2024:10899-1

Vulnerability from csaf_opensuse

Published

2024-06-15 00:00

Modified

2024-06-15 00:00

Summary

krb5-1.19.2-2.2 on GA media

Notes

Title of the patch

krb5-1.19.2-2.2 on GA media

Description of the patch

These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-10899

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "krb5-1.19.2-2.2 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10899",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10899-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2006-6143 page",
        "url": "https://www.suse.com/security/cve/CVE-2006-6143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2006-6144 page",
        "url": "https://www.suse.com/security/cve/CVE-2006-6144/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-0956 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-0956/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-0957 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-0957/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-1216 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-1216/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-2442 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-2442/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-2798 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-2798/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-3999 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-3999/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-4000 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-4000/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-5894 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-5894/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-5902 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-5902/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-5971 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-5971/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2007-5972 page",
        "url": "https://www.suse.com/security/cve/CVE-2007-5972/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2008-0062 page",
        "url": "https://www.suse.com/security/cve/CVE-2008-0062/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2008-0947 page",
        "url": "https://www.suse.com/security/cve/CVE-2008-0947/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-11368 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-11368/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-11462 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-11462/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5729 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5729/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-36222 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-36222/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37750 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37750/"
      }
    ],
    "title": "krb5-1.19.2-2.2 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10899-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-1.19.2-2.2.aarch64",
                  "product_id": "krb5-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-32bit-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-32bit-1.19.2-2.2.aarch64",
                  "product_id": "krb5-32bit-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-client-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-client-1.19.2-2.2.aarch64",
                  "product_id": "krb5-client-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-devel-1.19.2-2.2.aarch64",
                  "product_id": "krb5-devel-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-32bit-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-devel-32bit-1.19.2-2.2.aarch64",
                  "product_id": "krb5-devel-32bit-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
                  "product_id": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
                  "product_id": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
                  "product_id": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
                  "product_id": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-1.19.2-2.2.aarch64",
                "product": {
                  "name": "krb5-server-1.19.2-2.2.aarch64",
                  "product_id": "krb5-server-1.19.2-2.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-32bit-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-32bit-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-32bit-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-client-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-client-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-client-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-devel-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-devel-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-32bit-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-devel-32bit-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-devel-32bit-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-1.19.2-2.2.ppc64le",
                "product": {
                  "name": "krb5-server-1.19.2-2.2.ppc64le",
                  "product_id": "krb5-server-1.19.2-2.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-1.19.2-2.2.s390x",
                  "product_id": "krb5-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-32bit-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-32bit-1.19.2-2.2.s390x",
                  "product_id": "krb5-32bit-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-client-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-client-1.19.2-2.2.s390x",
                  "product_id": "krb5-client-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-devel-1.19.2-2.2.s390x",
                  "product_id": "krb5-devel-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-32bit-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-devel-32bit-1.19.2-2.2.s390x",
                  "product_id": "krb5-devel-32bit-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
                  "product_id": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
                  "product_id": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
                  "product_id": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
                  "product_id": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-1.19.2-2.2.s390x",
                "product": {
                  "name": "krb5-server-1.19.2-2.2.s390x",
                  "product_id": "krb5-server-1.19.2-2.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-1.19.2-2.2.x86_64",
                  "product_id": "krb5-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-32bit-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-32bit-1.19.2-2.2.x86_64",
                  "product_id": "krb5-32bit-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-client-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-client-1.19.2-2.2.x86_64",
                  "product_id": "krb5-client-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-devel-1.19.2-2.2.x86_64",
                  "product_id": "krb5-devel-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-32bit-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-devel-32bit-1.19.2-2.2.x86_64",
                  "product_id": "krb5-devel-32bit-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
                  "product_id": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
                  "product_id": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
                  "product_id": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
                  "product_id": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-1.19.2-2.2.x86_64",
                "product": {
                  "name": "krb5-server-1.19.2-2.2.x86_64",
                  "product_id": "krb5-server-1.19.2-2.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-32bit-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-32bit-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-32bit-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-32bit-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-32bit-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-32bit-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-32bit-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-32bit-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-client-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-client-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-client-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-client-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-client-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-client-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-client-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-client-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-devel-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-devel-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-devel-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-devel-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-32bit-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-devel-32bit-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-32bit-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-devel-32bit-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-32bit-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-devel-32bit-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-32bit-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-devel-32bit-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-1.19.2-2.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64"
        },
        "product_reference": "krb5-server-1.19.2-2.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-1.19.2-2.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le"
        },
        "product_reference": "krb5-server-1.19.2-2.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-1.19.2-2.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x"
        },
        "product_reference": "krb5-server-1.19.2-2.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-1.19.2-2.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        },
        "product_reference": "krb5-server-1.19.2-2.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-6143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2006-6143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2006-6143",
          "url": "https://www.suse.com/security/cve/CVE-2006-6143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 225990 for CVE-2006-6143",
          "url": "https://bugzilla.suse.com/225990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 225992 for CVE-2006-6143",
          "url": "https://bugzilla.suse.com/225992"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2006-6143"
    },
    {
      "cve": "CVE-2006-6144",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2006-6144"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"mechglue\" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2006-6144",
          "url": "https://www.suse.com/security/cve/CVE-2006-6144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 225990 for CVE-2006-6144",
          "url": "https://bugzilla.suse.com/225990"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 225992 for CVE-2006-6144",
          "url": "https://bugzilla.suse.com/225992"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2006-6144"
    },
    {
      "cve": "CVE-2007-0956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-0956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a \u0027-\u0027 character, a similar issue to CVE-2007-0882.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-0956",
          "url": "https://www.suse.com/security/cve/CVE-2007-0956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 247765 for CVE-2007-0956",
          "url": "https://bugzilla.suse.com/247765"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 256319 for CVE-2007-0956",
          "url": "https://bugzilla.suse.com/256319"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2007-0956"
    },
    {
      "cve": "CVE-2007-0957",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-0957"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-0957",
          "url": "https://www.suse.com/security/cve/CVE-2007-0957"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 253548 for CVE-2007-0957",
          "url": "https://bugzilla.suse.com/253548"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 256319 for CVE-2007-0957",
          "url": "https://bugzilla.suse.com/256319"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2007-0957"
    },
    {
      "cve": "CVE-2007-1216",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-1216"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an \"an invalid direction encoding\".",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-1216",
          "url": "https://www.suse.com/security/cve/CVE-2007-1216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 252487 for CVE-2007-1216",
          "url": "https://bugzilla.suse.com/252487"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 256319 for CVE-2007-1216",
          "url": "https://bugzilla.suse.com/256319"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2007-1216"
    },
    {
      "cve": "CVE-2007-2442",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-2442"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-2442",
          "url": "https://www.suse.com/security/cve/CVE-2007-2442"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 271191 for CVE-2007-2442",
          "url": "https://bugzilla.suse.com/271191"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 283681 for CVE-2007-2442",
          "url": "https://bugzilla.suse.com/283681"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2007-2442"
    },
    {
      "cve": "CVE-2007-2798",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-2798"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-2798",
          "url": "https://www.suse.com/security/cve/CVE-2007-2798"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 278689 for CVE-2007-2798",
          "url": "https://bugzilla.suse.com/278689"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 283681 for CVE-2007-2798",
          "url": "https://bugzilla.suse.com/283681"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2007-2798"
    },
    {
      "cve": "CVE-2007-3999",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-3999"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-3999",
          "url": "https://www.suse.com/security/cve/CVE-2007-3999"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 302377 for CVE-2007-3999",
          "url": "https://bugzilla.suse.com/302377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 305261 for CVE-2007-3999",
          "url": "https://bugzilla.suse.com/305261"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2007-3999"
    },
    {
      "cve": "CVE-2007-4000",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-4000"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the \"modify policy\" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-4000",
          "url": "https://www.suse.com/security/cve/CVE-2007-4000"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 302377 for CVE-2007-4000",
          "url": "https://bugzilla.suse.com/302377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 305261 for CVE-2007-4000",
          "url": "https://bugzilla.suse.com/305261"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2007-4000"
    },
    {
      "cve": "CVE-2007-5894",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-5894"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors.  NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used.  NOTE: the vendor disputes this issue, stating \" The \u0027length\u0027 variable is only uninitialized if \u0027auth_type\u0027 is neither the \u0027KERBEROS_V4\u0027 nor \u0027GSSAPI\u0027; this condition cannot occur in the unmodified source code.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-5894",
          "url": "https://www.suse.com/security/cve/CVE-2007-5894"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 346745 for CVE-2007-5894",
          "url": "https://bugzilla.suse.com/346745"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 346749 for CVE-2007-5894",
          "url": "https://bugzilla.suse.com/346749"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2007-5894"
    },
    {
      "cve": "CVE-2007-5902",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-5902"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (krb5) allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-5902",
          "url": "https://www.suse.com/security/cve/CVE-2007-5902"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 346747 for CVE-2007-5902",
          "url": "https://bugzilla.suse.com/346747"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 346749 for CVE-2007-5902",
          "url": "https://bugzilla.suse.com/346749"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2007-5902"
    },
    {
      "cve": "CVE-2007-5971",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-5971"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-5971",
          "url": "https://www.suse.com/security/cve/CVE-2007-5971"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 346748 for CVE-2007-5971",
          "url": "https://bugzilla.suse.com/346748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 346749 for CVE-2007-5971",
          "url": "https://bugzilla.suse.com/346749"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2007-5971"
    },
    {
      "cve": "CVE-2007-5972",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2007-5972"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors.  NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2007-5972",
          "url": "https://www.suse.com/security/cve/CVE-2007-5972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 346749 for CVE-2007-5972",
          "url": "https://bugzilla.suse.com/346749"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2007-5972"
    },
    {
      "cve": "CVE-2008-0062",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2008-0062"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2008-0062",
          "url": "https://www.suse.com/security/cve/CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 361373 for CVE-2008-0062",
          "url": "https://bugzilla.suse.com/361373"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2008-0062"
    },
    {
      "cve": "CVE-2008-0947",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2008-0947"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2008-0947",
          "url": "https://www.suse.com/security/cve/CVE-2008-0947"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 363151 for CVE-2008-0947",
          "url": "https://bugzilla.suse.com/363151"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2008-0947"
    },
    {
      "cve": "CVE-2017-11368",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-11368"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-11368",
          "url": "https://www.suse.com/security/cve/CVE-2017-11368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1049819 for CVE-2017-11368",
          "url": "https://bugzilla.suse.com/1049819"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-11368"
    },
    {
      "cve": "CVE-2017-11462",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-11462"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-11462",
          "url": "https://www.suse.com/security/cve/CVE-2017-11462"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056995 for CVE-2017-11462",
          "url": "https://bugzilla.suse.com/1056995"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1122468 for CVE-2017-11462",
          "url": "https://bugzilla.suse.com/1122468"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-11462"
    },
    {
      "cve": "CVE-2018-5729",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5729"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5729",
          "url": "https://www.suse.com/security/cve/CVE-2018-5729"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076211 for CVE-2018-5729",
          "url": "https://bugzilla.suse.com/1076211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083926 for CVE-2018-5729",
          "url": "https://bugzilla.suse.com/1083926"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1122468 for CVE-2018-5729",
          "url": "https://bugzilla.suse.com/1122468"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5729"
    },
    {
      "cve": "CVE-2021-36222",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-36222"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-36222",
          "url": "https://www.suse.com/security/cve/CVE-2021-36222"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188571 for CVE-2021-36222",
          "url": "https://bugzilla.suse.com/1188571"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-36222"
    },
    {
      "cve": "CVE-2021-37750",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37750"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
          "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37750",
          "url": "https://www.suse.com/security/cve/CVE-2021-37750"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189929 for CVE-2021-37750",
          "url": "https://bugzilla.suse.com/1189929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-client-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-devel-32bit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-kdb-ldap-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-otp-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-pkinit-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-plugin-preauth-spake-1.19.2-2.2.x86_64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.aarch64",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.ppc64le",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.s390x",
            "openSUSE Tumbleweed:krb5-server-1.19.2-2.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-37750"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2008-0062 (GCVE-0-2008-0062)

Vulnerability from cvelistv5

Vulnerability from csaf_redhat

Vulnerability from csaf_redhat

Vulnerability from csaf_redhat

Vulnerability from csaf_redhat

Vulnerability from github

Vulnerability from fkie_nvd

Vulnerability from gsd

Vulnerability from csaf_opensuse

Tags

Sightings

Nomenclature