Synopsis

Moderate: krb5 security update

Type/Severity

Security Advisory: Moderate

Topic

Updated krb5 packages that fix one security issue are now available for Red
Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

Kerberos is an authentication system which allows clients and services to
authenticate to each other with the help of a trusted third party, a
Kerberos Key Distribution Center (KDC).

A buffer overflow was found in the KADM5 administration server (kadmind)
when it was used with an LDAP back end for the KDC database. A remote,
authenticated attacker could potentially use this flaw to execute arbitrary
code on the system running kadmind. (CVE-2014-4345)

All krb5 users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
updated packages, the krb5kdc and kadmind daemons will be restarted
automatically.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 1128157 - CVE-2014-4345 krb5: buffer overrun in kadmind with LDAP backend (MITKRB5-SA-2014-001)

CVEs

• CVE-2014-4345

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 5

SRPM
krb5-1.6.1-80.el5_11.src.rpm	SHA-256: 01574ac3fa80088a3027508a4f9b7e825ac61f21cebe78f54ad55803d11d5e39
x86_64
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-debuginfo-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 88d27dc43bbcbdfa9042273156f380971f1f704b3e5f66f0c5bcf858e7e58f2b
krb5-devel-1.6.1-80.el5_11.i386.rpm	SHA-256: 832bd9d7632a34dd1042fe543728775a567909258a5dd625feadef13dc9ec2fa
krb5-devel-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 8cfec8adc9fd6a0450528eac930acfcbab25c942872969a761586b95a71f7071
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-libs-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 97b120015a2e1dd7aa5ccd1f87d2faaa891dbec18b9a33ad05eeba0de7467911
krb5-server-1.6.1-80.el5_11.x86_64.rpm	SHA-256: d03df90b6b11d1e3b8d86b0f8b1832ecd7f3df42c09df00ad6d4ddcaeaca0918
krb5-server-ldap-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 1e50811880897b9ddf86b1a18571a92049d091b57c16e30e583f14820bcf4bab
krb5-workstation-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 6575df8d8d203e43e7fce29d08f2eff9006bf3e5c8446e8f974adbf1af599854
ia64
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-debuginfo-1.6.1-80.el5_11.ia64.rpm	SHA-256: b1f7241283439e351f59c551e2c95b0f9bd01a770ead15fc3dc53039b18031d6
krb5-devel-1.6.1-80.el5_11.ia64.rpm	SHA-256: c3d20bfb8a315902508d5263cf7594a66ed5ae3063ddd805c34adca363f03521
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-libs-1.6.1-80.el5_11.ia64.rpm	SHA-256: 03a77d25a00d4e40fc71684cb01a2b55cb3ef7b93c2dba55cc3e64aa9abcad0a
krb5-server-1.6.1-80.el5_11.ia64.rpm	SHA-256: 81dc5a5c4df8990f2d6473091ca54f03bb1498f25c9737b47561c4f11131cb85
krb5-server-ldap-1.6.1-80.el5_11.ia64.rpm	SHA-256: f2008a60cc874b1c8ae61b485625fbf2ce96640a621ff718f6d269867accef0f
krb5-workstation-1.6.1-80.el5_11.ia64.rpm	SHA-256: 0766f8d4d8fed3012d600b2a44b80325586f1dd189245c9deeec38d5246aa166
i386
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-devel-1.6.1-80.el5_11.i386.rpm	SHA-256: 832bd9d7632a34dd1042fe543728775a567909258a5dd625feadef13dc9ec2fa
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-server-1.6.1-80.el5_11.i386.rpm	SHA-256: abac9720741bdc315f13c8bc50cdbf41ab99c9d23948129d75f77d01b99ee59a
krb5-server-ldap-1.6.1-80.el5_11.i386.rpm	SHA-256: dcdfcb4b0e66eb98be155d74d5ecb55be09584ef1808a1144a12bdcb8778337c
krb5-workstation-1.6.1-80.el5_11.i386.rpm	SHA-256: 26e8fa300cedd940ca2dafb3b432a9ff9059ce8646732a9b227f515016ab59c8

Red Hat Enterprise Linux Workstation 5

SRPM
krb5-1.6.1-80.el5_11.src.rpm	SHA-256: 01574ac3fa80088a3027508a4f9b7e825ac61f21cebe78f54ad55803d11d5e39
x86_64
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-debuginfo-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 88d27dc43bbcbdfa9042273156f380971f1f704b3e5f66f0c5bcf858e7e58f2b
krb5-debuginfo-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 88d27dc43bbcbdfa9042273156f380971f1f704b3e5f66f0c5bcf858e7e58f2b
krb5-devel-1.6.1-80.el5_11.i386.rpm	SHA-256: 832bd9d7632a34dd1042fe543728775a567909258a5dd625feadef13dc9ec2fa
krb5-devel-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 8cfec8adc9fd6a0450528eac930acfcbab25c942872969a761586b95a71f7071
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-libs-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 97b120015a2e1dd7aa5ccd1f87d2faaa891dbec18b9a33ad05eeba0de7467911
krb5-server-1.6.1-80.el5_11.x86_64.rpm	SHA-256: d03df90b6b11d1e3b8d86b0f8b1832ecd7f3df42c09df00ad6d4ddcaeaca0918
krb5-server-ldap-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 1e50811880897b9ddf86b1a18571a92049d091b57c16e30e583f14820bcf4bab
krb5-workstation-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 6575df8d8d203e43e7fce29d08f2eff9006bf3e5c8446e8f974adbf1af599854
i386
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-devel-1.6.1-80.el5_11.i386.rpm	SHA-256: 832bd9d7632a34dd1042fe543728775a567909258a5dd625feadef13dc9ec2fa
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-server-1.6.1-80.el5_11.i386.rpm	SHA-256: abac9720741bdc315f13c8bc50cdbf41ab99c9d23948129d75f77d01b99ee59a
krb5-server-ldap-1.6.1-80.el5_11.i386.rpm	SHA-256: dcdfcb4b0e66eb98be155d74d5ecb55be09584ef1808a1144a12bdcb8778337c
krb5-workstation-1.6.1-80.el5_11.i386.rpm	SHA-256: 26e8fa300cedd940ca2dafb3b432a9ff9059ce8646732a9b227f515016ab59c8

Red Hat Enterprise Linux Desktop 5

SRPM
krb5-1.6.1-80.el5_11.src.rpm	SHA-256: 01574ac3fa80088a3027508a4f9b7e825ac61f21cebe78f54ad55803d11d5e39
x86_64
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-debuginfo-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 88d27dc43bbcbdfa9042273156f380971f1f704b3e5f66f0c5bcf858e7e58f2b
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-libs-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 97b120015a2e1dd7aa5ccd1f87d2faaa891dbec18b9a33ad05eeba0de7467911
krb5-workstation-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 6575df8d8d203e43e7fce29d08f2eff9006bf3e5c8446e8f974adbf1af599854
i386
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-workstation-1.6.1-80.el5_11.i386.rpm	SHA-256: 26e8fa300cedd940ca2dafb3b432a9ff9059ce8646732a9b227f515016ab59c8

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
krb5-1.6.1-80.el5_11.src.rpm	SHA-256: 01574ac3fa80088a3027508a4f9b7e825ac61f21cebe78f54ad55803d11d5e39
s390x
krb5-debuginfo-1.6.1-80.el5_11.s390.rpm	SHA-256: c927613e93222fc7b76002e58f91316942b4a9273af754caa3ff963467fdffcf
krb5-debuginfo-1.6.1-80.el5_11.s390x.rpm	SHA-256: be0b49bb5a84f346fb099eab817095bfec57287752f7e90bbde92aa30146862b
krb5-devel-1.6.1-80.el5_11.s390.rpm	SHA-256: 32917a9302506866c352eef4a0224d7c6a2be5f1bf180721c0ddcee17e795e7a
krb5-devel-1.6.1-80.el5_11.s390x.rpm	SHA-256: a86e6eb25183c9b83d627bef9e56b756c662ce3936af2ec3b8906f1028e195b0
krb5-libs-1.6.1-80.el5_11.s390.rpm	SHA-256: 0e9538b9df0f029ba8db6bf26dfcc94f768996c4f15c82787b7af4c977294fc9
krb5-libs-1.6.1-80.el5_11.s390x.rpm	SHA-256: 7ada5578bd95f690c453fca178c5b6dafc8f7087bf3c42e9c6466e67362c2903
krb5-server-1.6.1-80.el5_11.s390x.rpm	SHA-256: 873a0da9a684ae9c41e221eb8b2c82b8f805709d094f17c82a89617090ce944c
krb5-server-ldap-1.6.1-80.el5_11.s390x.rpm	SHA-256: fd167f72f7e22a52cc37636009bf917622a387d2d43cf797329e45c746fbb31a
krb5-workstation-1.6.1-80.el5_11.s390x.rpm	SHA-256: f4931055d577fa6458d443331e543af544ffd6ba33592bdecca23ff7aa05c871

Red Hat Enterprise Linux for Power, big endian 5

SRPM
krb5-1.6.1-80.el5_11.src.rpm	SHA-256: 01574ac3fa80088a3027508a4f9b7e825ac61f21cebe78f54ad55803d11d5e39
ppc
krb5-debuginfo-1.6.1-80.el5_11.ppc.rpm	SHA-256: 4e69baa54e598b3fd9df0bd988de6c797c2bf8eddc2858870046b3186f3c9c5c
krb5-debuginfo-1.6.1-80.el5_11.ppc64.rpm	SHA-256: 1f07d94780975fb6a9dfa5eaa03a12c041702a2f442f8db1a4ad06d6f7b52951
krb5-devel-1.6.1-80.el5_11.ppc.rpm	SHA-256: ba9904b576ebc59aa34c5f99a53dd375ee8b8440557673ab7b1ea3a3dd919b90
krb5-devel-1.6.1-80.el5_11.ppc64.rpm	SHA-256: fa4797400daa4703a31b97945e2b8304957cc3e240022beaa7a3d50c3ee625fd
krb5-libs-1.6.1-80.el5_11.ppc.rpm	SHA-256: c98f163aaff247545309e46c21bc452360d478a86ea37bdfcbbd4889e50233ea
krb5-libs-1.6.1-80.el5_11.ppc64.rpm	SHA-256: e660eb2e641f1d27b904820cfa1874848167e2a9a1853f807e37c769de06e77c
krb5-server-1.6.1-80.el5_11.ppc.rpm	SHA-256: 371e70f9d3d5b620f07dbd30bb6f7e6a2155843a78d479f594f31a7bc3d3cba9
krb5-server-ldap-1.6.1-80.el5_11.ppc.rpm	SHA-256: 5c4aa5d342b9c46a210c1a33a58daecc0d3f86c849f6e5a31580b9c32a797e93
krb5-workstation-1.6.1-80.el5_11.ppc.rpm	SHA-256: b783de83b54b719addc3bf64744383f5bf5ac92d7ff4a473d9bbc5d871e7c2df

Red Hat Enterprise Linux Server from RHUI 5

SRPM
krb5-1.6.1-80.el5_11.src.rpm	SHA-256: 01574ac3fa80088a3027508a4f9b7e825ac61f21cebe78f54ad55803d11d5e39
x86_64
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-debuginfo-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 88d27dc43bbcbdfa9042273156f380971f1f704b3e5f66f0c5bcf858e7e58f2b
krb5-devel-1.6.1-80.el5_11.i386.rpm	SHA-256: 832bd9d7632a34dd1042fe543728775a567909258a5dd625feadef13dc9ec2fa
krb5-devel-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 8cfec8adc9fd6a0450528eac930acfcbab25c942872969a761586b95a71f7071
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-libs-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 97b120015a2e1dd7aa5ccd1f87d2faaa891dbec18b9a33ad05eeba0de7467911
krb5-server-1.6.1-80.el5_11.x86_64.rpm	SHA-256: d03df90b6b11d1e3b8d86b0f8b1832ecd7f3df42c09df00ad6d4ddcaeaca0918
krb5-server-ldap-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 1e50811880897b9ddf86b1a18571a92049d091b57c16e30e583f14820bcf4bab
krb5-workstation-1.6.1-80.el5_11.x86_64.rpm	SHA-256: 6575df8d8d203e43e7fce29d08f2eff9006bf3e5c8446e8f974adbf1af599854
i386
krb5-debuginfo-1.6.1-80.el5_11.i386.rpm	SHA-256: c313c8db806b61da78b1f22951b128b6c2f1f7eb8b4b3501e24d7951829f891c
krb5-devel-1.6.1-80.el5_11.i386.rpm	SHA-256: 832bd9d7632a34dd1042fe543728775a567909258a5dd625feadef13dc9ec2fa
krb5-libs-1.6.1-80.el5_11.i386.rpm	SHA-256: de67020a31714bfa242404e03a51dd6d46d8cedfe9dedbea6297fbe02dc34358
krb5-server-1.6.1-80.el5_11.i386.rpm	SHA-256: abac9720741bdc315f13c8bc50cdbf41ab99c9d23948129d75f77d01b99ee59a
krb5-server-ldap-1.6.1-80.el5_11.i386.rpm	SHA-256: dcdfcb4b0e66eb98be155d74d5ecb55be09584ef1808a1144a12bdcb8778337c
krb5-workstation-1.6.1-80.el5_11.i386.rpm	SHA-256: 26e8fa300cedd940ca2dafb3b432a9ff9059ce8646732a9b227f515016ab59c8