- Issued:
- 2012-01-24
- Updated:
- 2012-01-24
RHBA-2012:0057 - Bug Fix Advisory
Synopsis
mod_auth_kerb bug fix update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An updated mod_auth_kerb package that fixes one bug is now available for Red Hat
Enterprise Linux 5.
Description
The mod_auth_kerb package provides a module for the Apache HTTP Server designed
to provide Kerberos authentication over HTTP. The module supports the Negotiate
authentication method, which performs full Kerberos authentication based on
ticket exchanges.
This update fixes the following bug:
- The mod_auth_kerb module did not use the Kerberos libraries in a thread-safe
way. Therefore, if mod_auth_kerb ran under a multi-threaded Apache HTTP Server,
authentication requests could terminate unexpectedly with a segmentation fault.
With this update, the thread-safety problem has been fixed, and thread crashes
no longer occur under these circumstances. (BZ#783228)
All users of mod_auth_kerb are advised to upgrade to this updated package, which
fixes this bug.
Solution
Before applying this update, make sure all previously-released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259
Affected Products
- Red Hat Enterprise Linux Server 5 x86_64
- Red Hat Enterprise Linux Server 5 ia64
- Red Hat Enterprise Linux Server 5 i386
- Red Hat Enterprise Linux Workstation 5 x86_64
- Red Hat Enterprise Linux Workstation 5 i386
- Red Hat Enterprise Linux for IBM z Systems 5 s390x
- Red Hat Enterprise Linux for Power, big endian 5 ppc
- Red Hat Enterprise Linux Server from RHUI 5 x86_64
- Red Hat Enterprise Linux Server from RHUI 5 i386
Fixes
(none)CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 5
SRPM | |
---|---|
mod_auth_kerb-5.1-3.el5_7.1.src.rpm | SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6 |
x86_64 | |
mod_auth_kerb-5.1-3.el5_7.1.x86_64.rpm | SHA-256: 0747ce7df4756de03553fc79eab4d428839fa38da5fa054e38bf37e5dba9d0bb |
ia64 | |
mod_auth_kerb-5.1-3.el5_7.1.ia64.rpm | SHA-256: 77569d245e06f04ad88495bb26a34b2eed666ca77f4b3325e91b0c538cd9cd8b |
i386 | |
mod_auth_kerb-5.1-3.el5_7.1.i386.rpm | SHA-256: f54f49e7fb44999fde3e5fde9819097f9871b9131d995d9c8bb38caeb592e9c9 |
Red Hat Enterprise Linux Workstation 5
SRPM | |
---|---|
mod_auth_kerb-5.1-3.el5_7.1.src.rpm | SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6 |
x86_64 | |
mod_auth_kerb-5.1-3.el5_7.1.x86_64.rpm | SHA-256: 0747ce7df4756de03553fc79eab4d428839fa38da5fa054e38bf37e5dba9d0bb |
i386 | |
mod_auth_kerb-5.1-3.el5_7.1.i386.rpm | SHA-256: f54f49e7fb44999fde3e5fde9819097f9871b9131d995d9c8bb38caeb592e9c9 |
Red Hat Enterprise Linux for IBM z Systems 5
SRPM | |
---|---|
mod_auth_kerb-5.1-3.el5_7.1.src.rpm | SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6 |
s390x | |
mod_auth_kerb-5.1-3.el5_7.1.s390x.rpm | SHA-256: c0dc7702e24a6cf4e3e9d4e006701fa27523bd9be341b195d5f1cea0da90ae43 |
Red Hat Enterprise Linux for Power, big endian 5
SRPM | |
---|---|
mod_auth_kerb-5.1-3.el5_7.1.src.rpm | SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6 |
ppc | |
mod_auth_kerb-5.1-3.el5_7.1.ppc.rpm | SHA-256: 983fb623a43a1b6b1aa5110e03a7417349f17083b13d58965849c7e730436a49 |
Red Hat Enterprise Linux Server from RHUI 5
SRPM | |
---|---|
mod_auth_kerb-5.1-3.el5_7.1.src.rpm | SHA-256: 9d06f61aeaa3bc03b752c367c9b7166b867921d88e6b34d592eb91d06b441fd6 |
x86_64 | |
mod_auth_kerb-5.1-3.el5_7.1.x86_64.rpm | SHA-256: 0747ce7df4756de03553fc79eab4d428839fa38da5fa054e38bf37e5dba9d0bb |
i386 | |
mod_auth_kerb-5.1-3.el5_7.1.i386.rpm | SHA-256: f54f49e7fb44999fde3e5fde9819097f9871b9131d995d9c8bb38caeb592e9c9 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.