Synopsis

mod_auth_kerb bug fix update

Type/Severity

Bug Fix Advisory

Topic

An updated mod_auth_kerb package that fixes one bug is now available for Red Hat
Enterprise Linux 5.

Description

The mod_auth_kerb package provides a module for the Apache HTTP Server designed
to provide Kerberos authentication over HTTP. The module supports the Negotiate
authentication method, which performs full Kerberos authentication based on
ticket exchanges.

This update fixes the following bug:

• The mod_auth_kerb module did not use the Kerberos libraries in a thread-safe
  way. Therefore, if mod_auth_kerb ran under a multi-threaded Apache HTTP Server,
  authentication requests could terminate unexpectedly with a segmentation fault.
  With this update, the thread-safety problem has been fixed, and thread crashes
  no longer occur under these circumstances. (BZ#783228)
  

All users of mod_auth_kerb are advised to upgrade to this updated package, which
fixes this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
mod_auth_kerb-5.1-3.el5_7.1.src.rpm	SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6
x86_64
mod_auth_kerb-5.1-3.el5_7.1.x86_64.rpm	SHA-256: 0747ce7df4756de03553fc79eab4d428839fa38da5fa054e38bf37e5dba9d0bb
ia64
mod_auth_kerb-5.1-3.el5_7.1.ia64.rpm	SHA-256: 77569d245e06f04ad88495bb26a34b2eed666ca77f4b3325e91b0c538cd9cd8b
i386
mod_auth_kerb-5.1-3.el5_7.1.i386.rpm	SHA-256: f54f49e7fb44999fde3e5fde9819097f9871b9131d995d9c8bb38caeb592e9c9

Red Hat Enterprise Linux Workstation 5

SRPM
mod_auth_kerb-5.1-3.el5_7.1.src.rpm	SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6
x86_64
mod_auth_kerb-5.1-3.el5_7.1.x86_64.rpm	SHA-256: 0747ce7df4756de03553fc79eab4d428839fa38da5fa054e38bf37e5dba9d0bb
i386
mod_auth_kerb-5.1-3.el5_7.1.i386.rpm	SHA-256: f54f49e7fb44999fde3e5fde9819097f9871b9131d995d9c8bb38caeb592e9c9

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
mod_auth_kerb-5.1-3.el5_7.1.src.rpm	SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6
s390x
mod_auth_kerb-5.1-3.el5_7.1.s390x.rpm	SHA-256: c0dc7702e24a6cf4e3e9d4e006701fa27523bd9be341b195d5f1cea0da90ae43

Red Hat Enterprise Linux for Power, big endian 5

SRPM
mod_auth_kerb-5.1-3.el5_7.1.src.rpm	SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6
ppc
mod_auth_kerb-5.1-3.el5_7.1.ppc.rpm	SHA-256: 983fb623a43a1b6b1aa5110e03a7417349f17083b13d58965849c7e730436a49

Red Hat Enterprise Linux Server from RHUI 5

SRPM
mod_auth_kerb-5.1-3.el5_7.1.src.rpm	SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6
x86_64
mod_auth_kerb-5.1-3.el5_7.1.x86_64.rpm	SHA-256: 0747ce7df4756de03553fc79eab4d428839fa38da5fa054e38bf37e5dba9d0bb
i386
mod_auth_kerb-5.1-3.el5_7.1.i386.rpm	SHA-256: f54f49e7fb44999fde3e5fde9819097f9871b9131d995d9c8bb38caeb592e9c9