krb5 bug fix update

Updated krb5 packages that resolve several issues are now available.

Kerberos is a network authentication system which allows clients and
servers to authenticate to each other through the use of symmetric
encryption and a trusted third party: the Key Distribution Center (KDC).

These updated krb5 packages provide fixes for the following bugs:

* a user with an expired password who logged in to the system using the
Kerberos-aware telnet protocol was correctly prompted to change their
password. However, it was then possible for that user to change their
password to a new but insecure password such as "aaa". With this update,
the Pluggable Authentication Modules (PAM) system enforces quality checks
on passwords which are changed over the Kerberos-aware telnet protocol,
thus solving this potential problem.

* attempting to log in to a remote host using the rlogin command failed
when the user's password was expired. With this update, users are able to
log in successfully to the system with rlogin and change their expired
password.

* when copying data to a full NFS directory, rcp failed silently and did
not report an error, which led to silent data loss. With this update, rcp
does report an error under this condition.

* PAM modules use PAM_RHOST, PAM_USER and PAM_SERVICE, among other items,
as factors when making access control decisions. However, certain Kerberos
utilities did not correctly set the item which PAM modules read when
determining from which host a remote connection was being attempted. This
has been corrected in this update so that the necessary Kerberos utilities
set PAM items correctly and appropriately, which is needed for a
PAM-enabled Kerberos 5.

All users of krb5 are advised to upgrade to these updated packages, which
resolve these issues.

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

461900 - rcp does not return ENOSPC error on full NFS-File system
479082 - user can set insecure password using PAMified telnet
479083 - can not login with rlogin as an user with expired password