Bug Fix Advisory krb5 bug fix update

Advisory: RHBA-2007:0886-2
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2007-09-05
Last updated on: 2007-09-05
Affected Products: Red Hat Desktop (v. 3)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux WS (v. 3)
OVAL: N/A

Details

Updated krb5 packages, which fix an error in the receipt of forwarded
credentials in login.krb5, are now available.

Kerberos is a network authentication system which uses a trusted third
party to authenticate clients and servers to each other.

When logging in to a remote system using the Kerberos-aware versions of the
rlogin or telnet servers, it is possible to forward a ticket-granting
ticket to the remote system, forwarding the associated credentials for use
by said remote system. On some architectures, when the user chose to
forward credentials, login.krb5 would erroneously mark the forwarded
credentials as invalid and discard them.

Note: this bug is not present in later versions of Red Hat Enterprise
Linux.

Anyone using Kerberos-aware rlogin and telnet services should install these
packages, which resolve this issue.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

Red Hat Desktop (v. 3)
SRPMS:
krb5-1.2.7-67.src.rpm
File outdated by:  RHSA-2008:0181		     3a401545643e8fa004b0c18b03a60478
 
IA-32:
krb5-devel-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     779d3a7336fecb503759451c299cb128
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-server-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     d3afeaba2b1758ba0a971a590da43cd5
krb5-workstation-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     0d7ba44f08e32196d67ae2b284b2f8fe
 
x86_64:
krb5-devel-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     2caa29401bf700a33112d1c6c99c888c
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-libs-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     8df1f7097e6ba41391d96ecd0f771a03
krb5-server-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     14569e9cda95f45d2795e78c4df3909f
krb5-workstation-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     b668c94c937fb0a85c69360d2a355cf0
 
Red Hat Enterprise Linux AS (v. 3)
SRPMS:
krb5-1.2.7-67.src.rpm
File outdated by:  RHSA-2008:0181		     3a401545643e8fa004b0c18b03a60478
 
IA-32:
krb5-devel-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     779d3a7336fecb503759451c299cb128
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-server-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     d3afeaba2b1758ba0a971a590da43cd5
krb5-workstation-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     0d7ba44f08e32196d67ae2b284b2f8fe
 
IA-64:
krb5-devel-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     58cfda04ed98e01b042f9e0d6c772357
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-libs-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     4978eb05dc3d1b70751b4b3ceb55b149
krb5-server-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     d404385f38672104c2eaf27cc7c57be0
krb5-workstation-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     126282612b9eaf1e600c2175f7262d0c
 
PPC:
krb5-devel-1.2.7-67.ppc.rpm
File outdated by:  RHSA-2008:0181		     75b445613c785dbaf62c596bc072cb31
krb5-libs-1.2.7-67.ppc.rpm
File outdated by:  RHSA-2008:0181		     4b88f13ed852f3fc2bfcb56c72ed3cbb
krb5-libs-1.2.7-67.ppc64.rpm
File outdated by:  RHSA-2008:0181		     17fd926d0144b3039b5c6fa77b0679dd
krb5-server-1.2.7-67.ppc.rpm
File outdated by:  RHSA-2008:0181		     731db6b82da9adebe8f69fc7813cc3e2
krb5-workstation-1.2.7-67.ppc.rpm
File outdated by:  RHSA-2008:0181		     4a80378662c6da836d6af3599b4449d3
 
s390:
krb5-devel-1.2.7-67.s390.rpm
File outdated by:  RHSA-2008:0181		     b528511bd50781f0e4266507ae4b7de3
krb5-libs-1.2.7-67.s390.rpm
File outdated by:  RHSA-2008:0181		     b66eb16223c1b96072727a1d2cf73f8c
krb5-server-1.2.7-67.s390.rpm
File outdated by:  RHSA-2008:0181		     0d20bac39bab89376364a7641aeb2ffc
krb5-workstation-1.2.7-67.s390.rpm
File outdated by:  RHSA-2008:0181		     b3cb23c3bd408b3142d9d74df1e2269d
 
s390x:
krb5-devel-1.2.7-67.s390x.rpm
File outdated by:  RHSA-2008:0181		     d3ce19cc225e43f68a0f38372925f88c
krb5-libs-1.2.7-67.s390.rpm
File outdated by:  RHSA-2008:0181		     b66eb16223c1b96072727a1d2cf73f8c
krb5-libs-1.2.7-67.s390x.rpm
File outdated by:  RHSA-2008:0181		     adadeeb792a6fefb0235fe36afc05b51
krb5-server-1.2.7-67.s390x.rpm
File outdated by:  RHSA-2008:0181		     7d71896c379e434713cfe0ded5e31782
krb5-workstation-1.2.7-67.s390x.rpm
File outdated by:  RHSA-2008:0181		     24ad6bdc5f74ea45fba23addbff981cd
 
x86_64:
krb5-devel-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     2caa29401bf700a33112d1c6c99c888c
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-libs-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     8df1f7097e6ba41391d96ecd0f771a03
krb5-server-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     14569e9cda95f45d2795e78c4df3909f
krb5-workstation-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     b668c94c937fb0a85c69360d2a355cf0
 
Red Hat Enterprise Linux ES (v. 3)
SRPMS:
krb5-1.2.7-67.src.rpm
File outdated by:  RHSA-2008:0181		     3a401545643e8fa004b0c18b03a60478
 
IA-32:
krb5-devel-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     779d3a7336fecb503759451c299cb128
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-server-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     d3afeaba2b1758ba0a971a590da43cd5
krb5-workstation-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     0d7ba44f08e32196d67ae2b284b2f8fe
 
IA-64:
krb5-devel-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     58cfda04ed98e01b042f9e0d6c772357
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-libs-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     4978eb05dc3d1b70751b4b3ceb55b149
krb5-server-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     d404385f38672104c2eaf27cc7c57be0
krb5-workstation-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     126282612b9eaf1e600c2175f7262d0c
 
x86_64:
krb5-devel-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     2caa29401bf700a33112d1c6c99c888c
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-libs-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     8df1f7097e6ba41391d96ecd0f771a03
krb5-server-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     14569e9cda95f45d2795e78c4df3909f
krb5-workstation-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     b668c94c937fb0a85c69360d2a355cf0
 
Red Hat Enterprise Linux WS (v. 3)
SRPMS:
krb5-1.2.7-67.src.rpm
File outdated by:  RHSA-2008:0181		     3a401545643e8fa004b0c18b03a60478
 
IA-32:
krb5-devel-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     779d3a7336fecb503759451c299cb128
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-server-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     d3afeaba2b1758ba0a971a590da43cd5
krb5-workstation-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     0d7ba44f08e32196d67ae2b284b2f8fe
 
IA-64:
krb5-devel-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     58cfda04ed98e01b042f9e0d6c772357
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-libs-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     4978eb05dc3d1b70751b4b3ceb55b149
krb5-server-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     d404385f38672104c2eaf27cc7c57be0
krb5-workstation-1.2.7-67.ia64.rpm
File outdated by:  RHSA-2008:0181		     126282612b9eaf1e600c2175f7262d0c
 
x86_64:
krb5-devel-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     2caa29401bf700a33112d1c6c99c888c
krb5-libs-1.2.7-67.i386.rpm
File outdated by:  RHSA-2008:0181		     329fe93c0870cd7c6c8aad8b64375201
krb5-libs-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     8df1f7097e6ba41391d96ecd0f771a03
krb5-server-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     14569e9cda95f45d2795e78c4df3909f
krb5-workstation-1.2.7-67.x86_64.rpm
File outdated by:  RHSA-2008:0181		     b668c94c937fb0a85c69360d2a355cf0
 
(The unlinked packages above are only available from the Red Hat Network)

Keywords

credential, forwarding, telnet

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/