Synopsis:          Important: Openafs Security Update
Advisory ID:       OPENAFS-SA-2017-001
Issue Date:        2017-12-06

--

Security Fix(es):
* Certain values transmitted in RX ACK packets were not sanity checked by OpenAFS receiving peers, which could lead to an assertion being triggered during construction of outgoing packets on the same connection, resulting in server process crashes or client kernel panics.
--

SL6
  x86_64
    openafs-kpasswd-1.6.20-257.sl6.x86_64.rpm
    openafs-client-1.6.20-257.sl6.x86_64.rpm
    openafs-1.6.20-257.sl6.x86_64.rpm
    openafs-krb5-1.6.20-257.sl6.x86_64.rpm
    openafs-authlibs-1.6.20-257.sl6.x86_64.rpm
    openafs-devel-1.6.20-257.sl6.x86_64.rpm
    openafs-plumbing-tools-1.6.20-257.sl6.x86_64.rpm
    openafs-server-1.6.20-257.sl6.x86_64.rpm
    openafs-module-tools-1.6.20-257.sl6.x86_64.rpm
    openafs-compat-1.6.20-257.sl6.x86_64.rpm
    kmod-openafs-696-1.6.20-257.sl6.696.x86_64.rpm
    openafs-authlibs-devel-1.6.20-257.sl6.x86_64.rpm
    openafs-kernel-source-1.6.20-257.sl6.x86_64.rpm
  i386
    openafs-client-1.6.20-257.sl6.i686.rpm
    openafs-authlibs-1.6.20-257.sl6.i686.rpm
    kmod-openafs-696-1.6.20-257.sl6.696.i686.rpm
    openafs-module-tools-1.6.20-257.sl6.i686.rpm
    openafs-authlibs-devel-1.6.20-257.sl6.i686.rpm
    openafs-devel-1.6.20-257.sl6.i686.rpm
    openafs-1.6.20-257.sl6.i686.rpm
    openafs-compat-1.6.20-257.sl6.i686.rpm
    openafs-server-1.6.20-257.sl6.i686.rpm
    openafs-plumbing-tools-1.6.20-257.sl6.i686.rpm
    openafs-krb5-1.6.20-257.sl6.i686.rpm
    openafs-kpasswd-1.6.20-257.sl6.i686.rpm
    openafs-kernel-source-1.6.20-257.sl6.i686.rpm
SL7
  x86_64
    openafs-1.6-sl-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-authlibs-devel-1.6.22-278.sl7.x86_64.rpm
    kmod-openafs-1.6-sl-693-1.6.22-278.sl7.693.11.1.x86_64.rpm
    openafs-1.6-sl-authlibs-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-krb5-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-client-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-plumbing-tools-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-kernel-source-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-kpasswd-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-compat-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-devel-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-module-tools-1.6.22-278.sl7.x86_64.rpm
    openafs-1.6-sl-server-1.6.22-278.sl7.x86_64.rpm

- Scientific Linux Development Team