Red Hat Product Errata RHBA-2008:1034 - Bug Fix Advisory
Issued:
2009-01-12
Updated:
2009-01-12

RHBA-2008:1034 - Bug Fix Advisory

Synopsis

krb5 bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated krb5 packages which fix a bug are now available.

Description

Kerberos is a network authentication system, which allows clients and
servers to authenticate to each other through the use of symmetric
encryption and a trusted third party: the Key Distribution Center (KDC).

These updated krb5 packages fix a bug that occurred when certain
applications which use Kerberos to authenticate to services had specific
requirements on which types of keys can be used for the authentication
process. When such an application attempted to narrow the set of key types
which could be obtained through a TGS request by calling the
krb5_set_default_tgs_enctypes() function, it would in many cases still
obtain credentials which used an undesirable key type.

All users of krb5 are advised to upgrade to these updated packages, which
backports the fix for this bug from the 1.6.3 release.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.2 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.2 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.2 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.2 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.2 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

  • BZ - 473104 - CRM #1813976 Enable Kerberos NFS authentication without decreasing general Kerberos security

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
krb5-1.6.1-25.el5_2.2.src.rpm SHA-256: d5e19db7e1ffb4bf479bff11a58cb7e934c5d434043ba90b3745f3e8bbc21ae8
x86_64
krb5-devel-1.6.1-25.el5_2.2.i386.rpm SHA-256: ce00cbcb1352bb92b475c249783b0ea93bc15a450c73ee45af57962bbc9a144d
krb5-devel-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 4cc75a82fc771fd6d85d45133fc1ddd24772ce660b0e5ae3f0cef7e4486e2d34
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-libs-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 5c4532802625ffc1f7824a81a44ffca8ed72f56a8d941297132e5827fa9baa73
krb5-server-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 41968fcde50cc040230c9af32b0800c2f4f763d88489ceacfc03b95667433646
krb5-workstation-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 5ac2875fe23f6d057b7247d46dc1abd8de96757e8555fc1fc0948f497db77071
ia64
krb5-devel-1.6.1-25.el5_2.2.ia64.rpm SHA-256: 5d2d5557bc09905ddbd24aef938776c35b9cbc8526742e21384a268a9c72b2d0
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-libs-1.6.1-25.el5_2.2.ia64.rpm SHA-256: 6cc12fb03521f55570d0cad043748a6b32500a9bc3fa91d0b5e79ef3f66cb2e7
krb5-server-1.6.1-25.el5_2.2.ia64.rpm SHA-256: 9546df912badee6ee9b8406a1c30fef25d3c0ae5e29fa2c97c4b775a6332c496
krb5-workstation-1.6.1-25.el5_2.2.ia64.rpm SHA-256: 82dbbd7de283e542c66924a5701064a1d3c66e39c7cb2951bbd194a1f0be1b3b
i386
krb5-devel-1.6.1-25.el5_2.2.i386.rpm SHA-256: ce00cbcb1352bb92b475c249783b0ea93bc15a450c73ee45af57962bbc9a144d
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-server-1.6.1-25.el5_2.2.i386.rpm SHA-256: cc72c020bc14dffe51ac915e28e3b6c7824d29a47ce05752da925d8c8da5b410
krb5-workstation-1.6.1-25.el5_2.2.i386.rpm SHA-256: 4a6de6bf3ac88c0893a8beae93af2d99ac0ec18bbcb958a9e62f1ac10b917cc6

Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.2

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Workstation 5

SRPM
krb5-1.6.1-25.el5_2.2.src.rpm SHA-256: d5e19db7e1ffb4bf479bff11a58cb7e934c5d434043ba90b3745f3e8bbc21ae8
x86_64
krb5-devel-1.6.1-25.el5_2.2.i386.rpm SHA-256: ce00cbcb1352bb92b475c249783b0ea93bc15a450c73ee45af57962bbc9a144d
krb5-devel-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 4cc75a82fc771fd6d85d45133fc1ddd24772ce660b0e5ae3f0cef7e4486e2d34
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-libs-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 5c4532802625ffc1f7824a81a44ffca8ed72f56a8d941297132e5827fa9baa73
krb5-server-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 41968fcde50cc040230c9af32b0800c2f4f763d88489ceacfc03b95667433646
krb5-workstation-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 5ac2875fe23f6d057b7247d46dc1abd8de96757e8555fc1fc0948f497db77071
i386
krb5-devel-1.6.1-25.el5_2.2.i386.rpm SHA-256: ce00cbcb1352bb92b475c249783b0ea93bc15a450c73ee45af57962bbc9a144d
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-server-1.6.1-25.el5_2.2.i386.rpm SHA-256: cc72c020bc14dffe51ac915e28e3b6c7824d29a47ce05752da925d8c8da5b410
krb5-workstation-1.6.1-25.el5_2.2.i386.rpm SHA-256: 4a6de6bf3ac88c0893a8beae93af2d99ac0ec18bbcb958a9e62f1ac10b917cc6

Red Hat Enterprise Linux Desktop 5

SRPM
krb5-1.6.1-25.el5_2.2.src.rpm SHA-256: d5e19db7e1ffb4bf479bff11a58cb7e934c5d434043ba90b3745f3e8bbc21ae8
x86_64
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-libs-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 5c4532802625ffc1f7824a81a44ffca8ed72f56a8d941297132e5827fa9baa73
krb5-workstation-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 5ac2875fe23f6d057b7247d46dc1abd8de96757e8555fc1fc0948f497db77071
i386
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-workstation-1.6.1-25.el5_2.2.i386.rpm SHA-256: 4a6de6bf3ac88c0893a8beae93af2d99ac0ec18bbcb958a9e62f1ac10b917cc6

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
krb5-1.6.1-25.el5_2.2.src.rpm SHA-256: d5e19db7e1ffb4bf479bff11a58cb7e934c5d434043ba90b3745f3e8bbc21ae8
s390x
krb5-devel-1.6.1-25.el5_2.2.s390.rpm SHA-256: a9b2167b3a0e535484c073ffde12917be50bf9c0f82bc077250ad95942d91a43
krb5-devel-1.6.1-25.el5_2.2.s390x.rpm SHA-256: 6e8ec6b02b60157b34c8a4a4d9a9a16de1452379fd5c38a3d13f23b0e8142d77
krb5-libs-1.6.1-25.el5_2.2.s390.rpm SHA-256: d772ec8881d04a4b0984824a3b40a3b4316d20a4ac2e1708a1644c2a077dd6d9
krb5-libs-1.6.1-25.el5_2.2.s390x.rpm SHA-256: 1cbaf812502ef8d50ff367b37db53b8cba3c07915b5555a2127144abf5cfeae2
krb5-server-1.6.1-25.el5_2.2.s390x.rpm SHA-256: cf705e2948874a430160eacc3bcaeab839fe78a3f708354320891c318ad916c3
krb5-workstation-1.6.1-25.el5_2.2.s390x.rpm SHA-256: 8c847a92b83e5d8dfabe6d662e43740b241fc654b0e11ea08ea65c9ad7690d79

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.2

SRPM
s390x

Red Hat Enterprise Linux for Power, big endian 5

SRPM
krb5-1.6.1-25.el5_2.2.src.rpm SHA-256: d5e19db7e1ffb4bf479bff11a58cb7e934c5d434043ba90b3745f3e8bbc21ae8
ppc
krb5-devel-1.6.1-25.el5_2.2.ppc.rpm SHA-256: 34dd45c8dadb8519a978b43b4009615f5bc332cc34c0e6dca6a933e25cd573a2
krb5-devel-1.6.1-25.el5_2.2.ppc64.rpm SHA-256: a08952d0fd9d4358709f3c5e0c32a64ff28fac10a18154860068fa4df1509e3c
krb5-libs-1.6.1-25.el5_2.2.ppc.rpm SHA-256: 152e510b81c4bc47f48b4e8ecf8f40c301e7dfce54c8e06f0ab14c7969f61377
krb5-libs-1.6.1-25.el5_2.2.ppc64.rpm SHA-256: 55cf4295cb101ac2b12ca537270ebda0c7e20dd7a10e881402a7a5f89180d96f
krb5-server-1.6.1-25.el5_2.2.ppc.rpm SHA-256: 6ddbbe29daacfcb8de65337e96028344bedfafaa25b8ba2cdcbff7c7abe546e2
krb5-workstation-1.6.1-25.el5_2.2.ppc.rpm SHA-256: d1d4b0b6da07844abbd4b24daf83e310b21b02e428a277e2ec165049eca7408b

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.2

SRPM
ppc

Red Hat Enterprise Linux Server from RHUI 5

SRPM
krb5-1.6.1-25.el5_2.2.src.rpm SHA-256: d5e19db7e1ffb4bf479bff11a58cb7e934c5d434043ba90b3745f3e8bbc21ae8
x86_64
krb5-devel-1.6.1-25.el5_2.2.i386.rpm SHA-256: ce00cbcb1352bb92b475c249783b0ea93bc15a450c73ee45af57962bbc9a144d
krb5-devel-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 4cc75a82fc771fd6d85d45133fc1ddd24772ce660b0e5ae3f0cef7e4486e2d34
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-libs-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 5c4532802625ffc1f7824a81a44ffca8ed72f56a8d941297132e5827fa9baa73
krb5-server-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 41968fcde50cc040230c9af32b0800c2f4f763d88489ceacfc03b95667433646
krb5-workstation-1.6.1-25.el5_2.2.x86_64.rpm SHA-256: 5ac2875fe23f6d057b7247d46dc1abd8de96757e8555fc1fc0948f497db77071
i386
krb5-devel-1.6.1-25.el5_2.2.i386.rpm SHA-256: ce00cbcb1352bb92b475c249783b0ea93bc15a450c73ee45af57962bbc9a144d
krb5-libs-1.6.1-25.el5_2.2.i386.rpm SHA-256: 74df41a75189d01b7d278d4d69605e3c140825916f44b83f24e42078f3a19ce4
krb5-server-1.6.1-25.el5_2.2.i386.rpm SHA-256: cc72c020bc14dffe51ac915e28e3b6c7824d29a47ce05752da925d8c8da5b410
krb5-workstation-1.6.1-25.el5_2.2.i386.rpm SHA-256: 4a6de6bf3ac88c0893a8beae93af2d99ac0ec18bbcb958a9e62f1ac10b917cc6

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.