Red Hat Product Errata RHSA-2022:8663 - Security Advisory
Issued:
2022-11-29
Updated:
2022-11-29

RHSA-2022:8663 - Security Advisory

Synopsis

Important: krb5 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for krb5 is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: integer overflow vulnerabilities in PAC parsing (CVE-2022-42898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, running Kerberos services (krb5kdc, kadmin, and kprop) will be restarted automatically.

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 2140960 - CVE-2022-42898 krb5: integer overflow vulnerabilities in PAC parsing

Red Hat Enterprise Linux Server 6

SRPM
krb5-1.10.3-66.el6_10.src.rpm SHA-256: 0118c88565e3836d75dd60b824aa5d7a8764e0353c997c592033c402896f2695
x86_64
krb5-debuginfo-1.10.3-66.el6_10.i686.rpm SHA-256: d1eb9fe63463ec458dc02df381a2b7737b398a7639766366989f3e01383f61aa
krb5-debuginfo-1.10.3-66.el6_10.x86_64.rpm SHA-256: a2ec55f1ca536847ee23150ac39beb41f3925091131ced4ff9e023b43f76c0a3
krb5-devel-1.10.3-66.el6_10.i686.rpm SHA-256: 4fbb901e61bc8a1f5b4498a178189af89c64ece515a35476a33432a5679f01b6
krb5-devel-1.10.3-66.el6_10.x86_64.rpm SHA-256: 960304bd315d5f93c52d7c714618309e21af6fdf9eac9884d322b7bae877fae2
krb5-libs-1.10.3-66.el6_10.i686.rpm SHA-256: ab825e937941fad2b3e27bfec3d08cd24ceeaf5586923482bc424bcf78071468
krb5-libs-1.10.3-66.el6_10.x86_64.rpm SHA-256: af10336c294fddb72d77f0a22047f14bf8a0779620842e154fbdb1fcdc105923
krb5-pkinit-openssl-1.10.3-66.el6_10.x86_64.rpm SHA-256: 3ef3e6c8795b8f55acfe4098356d5f052c98d91ce243dc5dcafef568c8f2ad86
krb5-server-1.10.3-66.el6_10.x86_64.rpm SHA-256: 127c16ee41c6de5f30390bc46a3195ce6fa445ef221b70e312348ae3dd623c12
krb5-server-ldap-1.10.3-66.el6_10.i686.rpm SHA-256: 13b375ef11a59bec96be2d9d9caa5889809a43a42159c0ed8bd6393cd01415a0
krb5-server-ldap-1.10.3-66.el6_10.x86_64.rpm SHA-256: eb445d2ca7a6f4dd910f394e8623f8a9905a0cbbd69937e59269ceaa39ade953
krb5-workstation-1.10.3-66.el6_10.x86_64.rpm SHA-256: 95ac3e3098be516a8c01e74a6da9f830a91d4d770938200ffcbd2452b132388e
libkadm5-1.10.3-66.el6_10.i686.rpm SHA-256: b2e0313aa499a4d3f75e46a3685a4b98e998361e3919829f6a43beb04a4fba84
libkadm5-1.10.3-66.el6_10.x86_64.rpm SHA-256: df9b3ff0be63a6df9a06dec1e99186042f046dbf51d7f3a087802d6c824b2f0d

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
krb5-1.10.3-66.el6_10.src.rpm SHA-256: 0118c88565e3836d75dd60b824aa5d7a8764e0353c997c592033c402896f2695
x86_64
krb5-debuginfo-1.10.3-66.el6_10.i686.rpm SHA-256: d1eb9fe63463ec458dc02df381a2b7737b398a7639766366989f3e01383f61aa
krb5-debuginfo-1.10.3-66.el6_10.x86_64.rpm SHA-256: a2ec55f1ca536847ee23150ac39beb41f3925091131ced4ff9e023b43f76c0a3
krb5-devel-1.10.3-66.el6_10.i686.rpm SHA-256: 4fbb901e61bc8a1f5b4498a178189af89c64ece515a35476a33432a5679f01b6
krb5-devel-1.10.3-66.el6_10.x86_64.rpm SHA-256: 960304bd315d5f93c52d7c714618309e21af6fdf9eac9884d322b7bae877fae2
krb5-libs-1.10.3-66.el6_10.i686.rpm SHA-256: ab825e937941fad2b3e27bfec3d08cd24ceeaf5586923482bc424bcf78071468
krb5-libs-1.10.3-66.el6_10.x86_64.rpm SHA-256: af10336c294fddb72d77f0a22047f14bf8a0779620842e154fbdb1fcdc105923
krb5-pkinit-openssl-1.10.3-66.el6_10.x86_64.rpm SHA-256: 3ef3e6c8795b8f55acfe4098356d5f052c98d91ce243dc5dcafef568c8f2ad86
krb5-server-1.10.3-66.el6_10.x86_64.rpm SHA-256: 127c16ee41c6de5f30390bc46a3195ce6fa445ef221b70e312348ae3dd623c12
krb5-server-ldap-1.10.3-66.el6_10.i686.rpm SHA-256: 13b375ef11a59bec96be2d9d9caa5889809a43a42159c0ed8bd6393cd01415a0
krb5-server-ldap-1.10.3-66.el6_10.x86_64.rpm SHA-256: eb445d2ca7a6f4dd910f394e8623f8a9905a0cbbd69937e59269ceaa39ade953
krb5-workstation-1.10.3-66.el6_10.x86_64.rpm SHA-256: 95ac3e3098be516a8c01e74a6da9f830a91d4d770938200ffcbd2452b132388e
libkadm5-1.10.3-66.el6_10.i686.rpm SHA-256: b2e0313aa499a4d3f75e46a3685a4b98e998361e3919829f6a43beb04a4fba84
libkadm5-1.10.3-66.el6_10.x86_64.rpm SHA-256: df9b3ff0be63a6df9a06dec1e99186042f046dbf51d7f3a087802d6c824b2f0d
i386
krb5-debuginfo-1.10.3-66.el6_10.i686.rpm SHA-256: d1eb9fe63463ec458dc02df381a2b7737b398a7639766366989f3e01383f61aa
krb5-devel-1.10.3-66.el6_10.i686.rpm SHA-256: 4fbb901e61bc8a1f5b4498a178189af89c64ece515a35476a33432a5679f01b6
krb5-libs-1.10.3-66.el6_10.i686.rpm SHA-256: ab825e937941fad2b3e27bfec3d08cd24ceeaf5586923482bc424bcf78071468
krb5-pkinit-openssl-1.10.3-66.el6_10.i686.rpm SHA-256: 7c6584d7bd587d4309cd02be9a22a82f39c9818a2b7b46e493bed2fbc83745f6
krb5-server-1.10.3-66.el6_10.i686.rpm SHA-256: 96d25d950a6cda6aa714efae611c6ad2272dcb82860b193a15662ed71b5d4528
krb5-server-ldap-1.10.3-66.el6_10.i686.rpm SHA-256: 13b375ef11a59bec96be2d9d9caa5889809a43a42159c0ed8bd6393cd01415a0
krb5-workstation-1.10.3-66.el6_10.i686.rpm SHA-256: 3ebf7892400db78e3ec79e2153e779f0616833af1ed8bd4ab64496f0364c7fad
libkadm5-1.10.3-66.el6_10.i686.rpm SHA-256: b2e0313aa499a4d3f75e46a3685a4b98e998361e3919829f6a43beb04a4fba84

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
krb5-1.10.3-66.el6_10.src.rpm SHA-256: 0118c88565e3836d75dd60b824aa5d7a8764e0353c997c592033c402896f2695
s390x
krb5-debuginfo-1.10.3-66.el6_10.s390.rpm SHA-256: 5da9ba8bebcd12d431e5be13518307798d119af16f7f585051ae254955bc8f06
krb5-debuginfo-1.10.3-66.el6_10.s390x.rpm SHA-256: 283987d221920db895c32b4296ae35eec7f1565fc0b0daef372a630877d0b650
krb5-devel-1.10.3-66.el6_10.s390.rpm SHA-256: c4f0a6eb8689dd914af4451b5fd3c2ee698ae8813f23ac5e15657a0a6f5115f0
krb5-devel-1.10.3-66.el6_10.s390x.rpm SHA-256: 1d1245c779c2d7d7b1bca0813be5734bb5fd05f8a97ecf0c1a854f7cc9493a45
krb5-libs-1.10.3-66.el6_10.s390.rpm SHA-256: 5a8a926d50361564abe07c248129aaf5fd6ddbb173be7a4a48b65be4816a8345
krb5-libs-1.10.3-66.el6_10.s390x.rpm SHA-256: e45790881b003f2bbb786aaf3aaa6190bbc558dfa00455146d646c46f7dcb757
krb5-pkinit-openssl-1.10.3-66.el6_10.s390x.rpm SHA-256: 2f7ea8c5a1e5f9dda8149c68564d65c557e6562e12081f6f71b62cd4472f70eb
krb5-server-1.10.3-66.el6_10.s390x.rpm SHA-256: 3066545e92a029fbad799de470d9483475b0b14a979de8e7b089e743accf0b96
krb5-server-ldap-1.10.3-66.el6_10.s390.rpm SHA-256: 229fdb6619ce9a51e95f0adc8f1bf413858123acf9e3dc4984323b1ac87c0f2d
krb5-server-ldap-1.10.3-66.el6_10.s390x.rpm SHA-256: 22ed1b8614ef36f89bf69e364f0d12f5bb6acb68eaf7e87999b4f808cc907ad1
krb5-workstation-1.10.3-66.el6_10.s390x.rpm SHA-256: 34480b691fc63b3fb343c3576a057a6947e44024713782b6e225cb1bf3550de9
libkadm5-1.10.3-66.el6_10.s390.rpm SHA-256: e730c563568c83437ceeaa85600d119a016b251e25e84ef25b1d8d63179fb0f3
libkadm5-1.10.3-66.el6_10.s390x.rpm SHA-256: 1d5522ec9c40c0bf054de3d2149ffa69ba50809c66ae4bb5629b29c551e1704c

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
krb5-1.10.3-66.el6_10.src.rpm SHA-256: 0118c88565e3836d75dd60b824aa5d7a8764e0353c997c592033c402896f2695
x86_64
krb5-debuginfo-1.10.3-66.el6_10.i686.rpm SHA-256: d1eb9fe63463ec458dc02df381a2b7737b398a7639766366989f3e01383f61aa
krb5-debuginfo-1.10.3-66.el6_10.x86_64.rpm SHA-256: a2ec55f1ca536847ee23150ac39beb41f3925091131ced4ff9e023b43f76c0a3
krb5-devel-1.10.3-66.el6_10.i686.rpm SHA-256: 4fbb901e61bc8a1f5b4498a178189af89c64ece515a35476a33432a5679f01b6
krb5-devel-1.10.3-66.el6_10.x86_64.rpm SHA-256: 960304bd315d5f93c52d7c714618309e21af6fdf9eac9884d322b7bae877fae2
krb5-libs-1.10.3-66.el6_10.i686.rpm SHA-256: ab825e937941fad2b3e27bfec3d08cd24ceeaf5586923482bc424bcf78071468
krb5-libs-1.10.3-66.el6_10.x86_64.rpm SHA-256: af10336c294fddb72d77f0a22047f14bf8a0779620842e154fbdb1fcdc105923
krb5-pkinit-openssl-1.10.3-66.el6_10.x86_64.rpm SHA-256: 3ef3e6c8795b8f55acfe4098356d5f052c98d91ce243dc5dcafef568c8f2ad86
krb5-server-1.10.3-66.el6_10.x86_64.rpm SHA-256: 127c16ee41c6de5f30390bc46a3195ce6fa445ef221b70e312348ae3dd623c12
krb5-server-ldap-1.10.3-66.el6_10.i686.rpm SHA-256: 13b375ef11a59bec96be2d9d9caa5889809a43a42159c0ed8bd6393cd01415a0
krb5-server-ldap-1.10.3-66.el6_10.x86_64.rpm SHA-256: eb445d2ca7a6f4dd910f394e8623f8a9905a0cbbd69937e59269ceaa39ade953
krb5-workstation-1.10.3-66.el6_10.x86_64.rpm SHA-256: 95ac3e3098be516a8c01e74a6da9f830a91d4d770938200ffcbd2452b132388e
libkadm5-1.10.3-66.el6_10.i686.rpm SHA-256: b2e0313aa499a4d3f75e46a3685a4b98e998361e3919829f6a43beb04a4fba84
libkadm5-1.10.3-66.el6_10.x86_64.rpm SHA-256: df9b3ff0be63a6df9a06dec1e99186042f046dbf51d7f3a087802d6c824b2f0d
i386
krb5-debuginfo-1.10.3-66.el6_10.i686.rpm SHA-256: d1eb9fe63463ec458dc02df381a2b7737b398a7639766366989f3e01383f61aa
krb5-devel-1.10.3-66.el6_10.i686.rpm SHA-256: 4fbb901e61bc8a1f5b4498a178189af89c64ece515a35476a33432a5679f01b6
krb5-libs-1.10.3-66.el6_10.i686.rpm SHA-256: ab825e937941fad2b3e27bfec3d08cd24ceeaf5586923482bc424bcf78071468
krb5-pkinit-openssl-1.10.3-66.el6_10.i686.rpm SHA-256: 7c6584d7bd587d4309cd02be9a22a82f39c9818a2b7b46e493bed2fbc83745f6
krb5-server-1.10.3-66.el6_10.i686.rpm SHA-256: 96d25d950a6cda6aa714efae611c6ad2272dcb82860b193a15662ed71b5d4528
krb5-server-ldap-1.10.3-66.el6_10.i686.rpm SHA-256: 13b375ef11a59bec96be2d9d9caa5889809a43a42159c0ed8bd6393cd01415a0
krb5-workstation-1.10.3-66.el6_10.i686.rpm SHA-256: 3ebf7892400db78e3ec79e2153e779f0616833af1ed8bd4ab64496f0364c7fad
libkadm5-1.10.3-66.el6_10.i686.rpm SHA-256: b2e0313aa499a4d3f75e46a3685a4b98e998361e3919829f6a43beb04a4fba84

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
krb5-1.10.3-66.el6_10.src.rpm SHA-256: 0118c88565e3836d75dd60b824aa5d7a8764e0353c997c592033c402896f2695
s390x
krb5-debuginfo-1.10.3-66.el6_10.s390.rpm SHA-256: 5da9ba8bebcd12d431e5be13518307798d119af16f7f585051ae254955bc8f06
krb5-debuginfo-1.10.3-66.el6_10.s390x.rpm SHA-256: 283987d221920db895c32b4296ae35eec7f1565fc0b0daef372a630877d0b650
krb5-devel-1.10.3-66.el6_10.s390.rpm SHA-256: c4f0a6eb8689dd914af4451b5fd3c2ee698ae8813f23ac5e15657a0a6f5115f0
krb5-devel-1.10.3-66.el6_10.s390x.rpm SHA-256: 1d1245c779c2d7d7b1bca0813be5734bb5fd05f8a97ecf0c1a854f7cc9493a45
krb5-libs-1.10.3-66.el6_10.s390.rpm SHA-256: 5a8a926d50361564abe07c248129aaf5fd6ddbb173be7a4a48b65be4816a8345
krb5-libs-1.10.3-66.el6_10.s390x.rpm SHA-256: e45790881b003f2bbb786aaf3aaa6190bbc558dfa00455146d646c46f7dcb757
krb5-pkinit-openssl-1.10.3-66.el6_10.s390x.rpm SHA-256: 2f7ea8c5a1e5f9dda8149c68564d65c557e6562e12081f6f71b62cd4472f70eb
krb5-server-1.10.3-66.el6_10.s390x.rpm SHA-256: 3066545e92a029fbad799de470d9483475b0b14a979de8e7b089e743accf0b96
krb5-server-ldap-1.10.3-66.el6_10.s390.rpm SHA-256: 229fdb6619ce9a51e95f0adc8f1bf413858123acf9e3dc4984323b1ac87c0f2d
krb5-server-ldap-1.10.3-66.el6_10.s390x.rpm SHA-256: 22ed1b8614ef36f89bf69e364f0d12f5bb6acb68eaf7e87999b4f808cc907ad1
krb5-workstation-1.10.3-66.el6_10.s390x.rpm SHA-256: 34480b691fc63b3fb343c3576a057a6947e44024713782b6e225cb1bf3550de9
libkadm5-1.10.3-66.el6_10.s390.rpm SHA-256: e730c563568c83437ceeaa85600d119a016b251e25e84ef25b1d8d63179fb0f3
libkadm5-1.10.3-66.el6_10.s390x.rpm SHA-256: 1d5522ec9c40c0bf054de3d2149ffa69ba50809c66ae4bb5629b29c551e1704c

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.