Skip to navigation

Security Advisory Important: krb5 security and bug fix update

Advisory: RHSA-2010:0925-1
Type: Security Advisory
Severity: Important
Issued on: 2010-11-30
Last updated on: 2010-11-30
Affected Products: Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Server EUS (v. 6.0.z)
Red Hat Enterprise Linux Workstation (v. 6)
CVEs (cve.mitre.org): CVE-2010-1323
CVE-2010-1324
CVE-2010-4020

Details

Updated krb5 packages that fix multiple security issues and one bug are now
available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.

Kerberos is a network authentication system which allows clients and
servers to authenticate to each other using symmetric encryption and a
trusted third party, the Key Distribution Center (KDC).

Multiple checksum validation flaws were discovered in the MIT Kerberos
implementation. A remote attacker could use these flaws to tamper with
certain Kerberos protocol packets and, possibly, bypass authentication or
authorization mechanisms and escalate their privileges. (CVE-2010-1323,
CVE-2010-1324, CVE-2010-4020)

Red Hat would like to thank the MIT Kerberos Team for reporting these
issues.

This update also fixes the following bug:

* When attempting to perform PKINIT pre-authentication, if the client had
more than one possible candidate certificate the client could fail to
select the certificate and key to use. This usually occurred if certificate
selection was configured to use the value of the keyUsage extension, or if
any of the candidate certificates did not contain a subjectAltName
extension. Consequently, the client attempted to perform pre-authentication
using a different (usually password-based) mechanism. (BZ#644825)

All krb5 users should upgrade to these updated packages, which contain
backported patches to correct these issues. After installing the updated
packages, the krb5kdc daemon will be restarted automatically.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Updated packages

Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
krb5-1.8.2-3.el6_0.3.src.rpm
File outdated by:  RHBA-2014:0359
    MD5: ed4a7dae400dd3492c7684150983833d
SHA-256: 363b096a9b0dbd9de399874adeb48796ea273095e141f5a849713869f3a87a2c
 
IA-32:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-pkinit-openssl-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 24e75a5821c198d159522c3d4d1408ed
SHA-256: 71e80392b9fcb2693846ab2f0e4a11eff37fd540a8f54ff87a03f7daa8eb4a68
krb5-server-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 589c7ab0d582cd96dda4c5c46c77ccf7
SHA-256: 2a4ce99b44671aa90a7ecc46b9363ab93f2aa70e2b32a5409319a733d18c898f
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-workstation-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: b30cbd69645ab00de42f7442c89401d3
SHA-256: c16f43d167d20efc31788c89373e00143ca44c320e63271fa48aa4c1aa057aea
 
x86_64:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-debuginfo-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 7006f2fef01a1b73565a921b4795e534
SHA-256: 89e9a65905702a061177625a03d581d6214c6d26cb061652c3fdb52b90aa5980
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-devel-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: efec4b9f458a15aff82559015507282a
SHA-256: 3377312426e5dc7f825ac1820662008897be48f97373edc5974acb61c37f9978
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-libs-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: cb0f4ae89430264a3381ad9be04972cd
SHA-256: a1f0acfda8d87971702ccacd9473597957ea7f7d8f9f04d89555db6600f1dae8
krb5-pkinit-openssl-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 1d94fd1c67d281cc0ba051f0dc0e0de6
SHA-256: 6c4bea9be7bbfb467a92eb4ee64cf51b40d028d8f8416ae4f30f40137cbcdaac
krb5-server-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 79f33198b78dc9facb6df8e8345d790c
SHA-256: 21f1607328a0c0715a38e170b345cb0ec35cfe76f8f8b71cd1982b250a7372fc
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-server-ldap-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 57a1d242ea8122fee249c90e2f8faa0c
SHA-256: 1fc8bc70e9ac925eddce5e9a130fb8fc018343391a297e00fb6dfb761c566887
krb5-workstation-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: a060f9ade59df5d1c558797ac3b31319
SHA-256: 1e0b9936377f93f4f61467cd492fb3cc644abb1f299d1df4bc5aac56fd480548
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
krb5-1.8.2-3.el6_0.3.src.rpm
File outdated by:  RHBA-2014:0359
    MD5: ed4a7dae400dd3492c7684150983833d
SHA-256: 363b096a9b0dbd9de399874adeb48796ea273095e141f5a849713869f3a87a2c
 
x86_64:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-debuginfo-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 7006f2fef01a1b73565a921b4795e534
SHA-256: 89e9a65905702a061177625a03d581d6214c6d26cb061652c3fdb52b90aa5980
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-devel-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: efec4b9f458a15aff82559015507282a
SHA-256: 3377312426e5dc7f825ac1820662008897be48f97373edc5974acb61c37f9978
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-libs-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: cb0f4ae89430264a3381ad9be04972cd
SHA-256: a1f0acfda8d87971702ccacd9473597957ea7f7d8f9f04d89555db6600f1dae8
krb5-pkinit-openssl-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:1379
    MD5: 1d94fd1c67d281cc0ba051f0dc0e0de6
SHA-256: 6c4bea9be7bbfb467a92eb4ee64cf51b40d028d8f8416ae4f30f40137cbcdaac
krb5-server-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 79f33198b78dc9facb6df8e8345d790c
SHA-256: 21f1607328a0c0715a38e170b345cb0ec35cfe76f8f8b71cd1982b250a7372fc
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-server-ldap-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 57a1d242ea8122fee249c90e2f8faa0c
SHA-256: 1fc8bc70e9ac925eddce5e9a130fb8fc018343391a297e00fb6dfb761c566887
krb5-workstation-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:1379
    MD5: a060f9ade59df5d1c558797ac3b31319
SHA-256: 1e0b9936377f93f4f61467cd492fb3cc644abb1f299d1df4bc5aac56fd480548
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
krb5-1.8.2-3.el6_0.3.src.rpm
File outdated by:  RHBA-2014:0359
    MD5: ed4a7dae400dd3492c7684150983833d
SHA-256: 363b096a9b0dbd9de399874adeb48796ea273095e141f5a849713869f3a87a2c
 
IA-32:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-pkinit-openssl-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 24e75a5821c198d159522c3d4d1408ed
SHA-256: 71e80392b9fcb2693846ab2f0e4a11eff37fd540a8f54ff87a03f7daa8eb4a68
krb5-server-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 589c7ab0d582cd96dda4c5c46c77ccf7
SHA-256: 2a4ce99b44671aa90a7ecc46b9363ab93f2aa70e2b32a5409319a733d18c898f
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-workstation-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: b30cbd69645ab00de42f7442c89401d3
SHA-256: c16f43d167d20efc31788c89373e00143ca44c320e63271fa48aa4c1aa057aea
 
PPC:
krb5-debuginfo-1.8.2-3.el6_0.3.ppc.rpm
File outdated by:  RHBA-2014:0359
    MD5: 56cb6b9095fceee7ffa7ecd0288155c4
SHA-256: c5d8987102fb2bb2e6f9db9466c4db037f9058bddee3dceeb0b02a5d0a3e7485
krb5-debuginfo-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHBA-2014:0359
    MD5: b4b87df9e9cae27057bec9e155db48d5
SHA-256: 66d0cf146eb280179fdc665f0d9e27ed329ea06ac2b8702c63c109191ea1f518
krb5-devel-1.8.2-3.el6_0.3.ppc.rpm
File outdated by:  RHBA-2014:0359
    MD5: 7d5b3d999bc92c90851853a327b85961
SHA-256: c21ab575efb48fbeb2209fc0ea80e16b081e34e01f79a32a77213051e3b6f72f
krb5-devel-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 45959c51ebe900d1bb2b78b4a6db368a
SHA-256: 9d9cce0a059b2701babf5de54fce74a4636b6a23b3b8764e83b89c2d32b7b503
krb5-libs-1.8.2-3.el6_0.3.ppc.rpm
File outdated by:  RHBA-2014:0359
    MD5: 4e83a61ba3378544fb704788ca15d5c2
SHA-256: bd6bd39a0b37b7412a5c621d457214f65748213fb74a179508f7791843aab18b
krb5-libs-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 35219b010568b00171f5520784e906ba
SHA-256: 22ad1beda2e36d869d14025635516205dd171332c0b66956f3d66c62f2227284
krb5-pkinit-openssl-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 39353bf06a017f4f3e6270a37bddd7ae
SHA-256: 492a6bfb9a46b5666769b6629716ccd040ce7215990c182515e493576d2c30ba
krb5-server-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHBA-2014:0359
    MD5: bbee78429dfb6c4b74ac73b117675a85
SHA-256: 138c2f33ba96ba6855dcf21bbcd8693c7741bf4c79f5d30ead71a9a1c7e7bf6c
krb5-server-ldap-1.8.2-3.el6_0.3.ppc.rpm
File outdated by:  RHBA-2014:0359
    MD5: b442241154a8e7f1d4ad5f81adc8aec2
SHA-256: 8dd4ca011cfb2980415b27e1e3fe61adf6d624033d2afb858d70235ae69ed766
krb5-server-ldap-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 4e39298d3edcedfa02dbcfaf05f49c15
SHA-256: b9a64f26c5e7a275d73371f8a77062e4efb2acf84b7ecedad3a891f87d37e14d
krb5-workstation-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 27fe2b2ff03b6f13df325c19d25f5377
SHA-256: 92c363b1097352f89c3ab1723b3019a5d407d60d9651d9a2dd329b9edf049954
 
s390x:
krb5-debuginfo-1.8.2-3.el6_0.3.s390.rpm
File outdated by:  RHBA-2014:0359
    MD5: 9d5d59bf039dbd2d861c1cfc48f88821
SHA-256: ba52b9abadfa1066981f78f73b550e06e5819d978690592138df8ffe276e9751
krb5-debuginfo-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHBA-2014:0359
    MD5: c23d3896d968a77f5233246104eec8f2
SHA-256: 1a53cb9d9e028a1a6902b35fa4c884cb1e9b1121d17184dacaede01de7f09410
krb5-devel-1.8.2-3.el6_0.3.s390.rpm
File outdated by:  RHBA-2014:0359
    MD5: ff49d023fc784984df4c69a6f02958ae
SHA-256: 0f3d91556b043b5585005c2b74e10e24353d5f5c9aeef62643de2f28c44f4099
krb5-devel-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHBA-2014:0359
    MD5: 522911586cdd508f092176508c1ac3e0
SHA-256: 6a52d0d39c43aa08964d98fdef41236345c8cf20a0efd897e39ab579cf544a20
krb5-libs-1.8.2-3.el6_0.3.s390.rpm
File outdated by:  RHBA-2014:0359
    MD5: 537381f20ef2d942054bb2cf2063a95b
SHA-256: 527d1a353e439d2aecc828954d1d91266ae109e791f72b933e54930cccf6a7e0
krb5-libs-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHBA-2014:0359
    MD5: 0171e8d0039d93572988d373d1ae6fe4
SHA-256: 6cb32b4c3f3756f6abe782fb0f7219fee01a6018926503372b2df5d5df3f354b
krb5-pkinit-openssl-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHBA-2014:0359
    MD5: 8eb7e2d4eb3bc7c90115eefd91051b75
SHA-256: 205547e586c95cf5e7121763f4791e277cea524a32694e6dd4108f01900c830a
krb5-server-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHBA-2014:0359
    MD5: c4983bb39e63b5ba386a2029c726ebaf
SHA-256: 913a3678d9a440442405962056921f32f73d47c1d5e3aa777f4051f1ff3c21f1
krb5-server-ldap-1.8.2-3.el6_0.3.s390.rpm
File outdated by:  RHBA-2014:0359
    MD5: 44661fc848b2746bc082e983930c1b56
SHA-256: eb11a6cbfad7b24d18477a191f792148cf7890f2340e3df8da3d51b93264fa4a
krb5-server-ldap-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHBA-2014:0359
    MD5: 64bd154818ca060fda35d1b557c4ae36
SHA-256: c784644ab779616f12a14a02ef9dd3831f75b3474baf738ddf2e750c0f836f27
krb5-workstation-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHBA-2014:0359
    MD5: e9244892a883d40929e10d6f3244ba74
SHA-256: f1c152b08ba3bafef862557a054810b37925ca7e15fc74aa216b8037300efad0
 
x86_64:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-debuginfo-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 7006f2fef01a1b73565a921b4795e534
SHA-256: 89e9a65905702a061177625a03d581d6214c6d26cb061652c3fdb52b90aa5980
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-devel-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: efec4b9f458a15aff82559015507282a
SHA-256: 3377312426e5dc7f825ac1820662008897be48f97373edc5974acb61c37f9978
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-libs-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: cb0f4ae89430264a3381ad9be04972cd
SHA-256: a1f0acfda8d87971702ccacd9473597957ea7f7d8f9f04d89555db6600f1dae8
krb5-pkinit-openssl-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 1d94fd1c67d281cc0ba051f0dc0e0de6
SHA-256: 6c4bea9be7bbfb467a92eb4ee64cf51b40d028d8f8416ae4f30f40137cbcdaac
krb5-server-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 79f33198b78dc9facb6df8e8345d790c
SHA-256: 21f1607328a0c0715a38e170b345cb0ec35cfe76f8f8b71cd1982b250a7372fc
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-server-ldap-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 57a1d242ea8122fee249c90e2f8faa0c
SHA-256: 1fc8bc70e9ac925eddce5e9a130fb8fc018343391a297e00fb6dfb761c566887
krb5-workstation-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: a060f9ade59df5d1c558797ac3b31319
SHA-256: 1e0b9936377f93f4f61467cd492fb3cc644abb1f299d1df4bc5aac56fd480548
 
Red Hat Enterprise Linux Server EUS (v. 6.0.z)

SRPMS:
krb5-1.8.2-3.el6_0.3.src.rpm
File outdated by:  RHBA-2014:0359
    MD5: ed4a7dae400dd3492c7684150983833d
SHA-256: 363b096a9b0dbd9de399874adeb48796ea273095e141f5a849713869f3a87a2c
 
IA-32:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-pkinit-openssl-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: 24e75a5821c198d159522c3d4d1408ed
SHA-256: 71e80392b9fcb2693846ab2f0e4a11eff37fd540a8f54ff87a03f7daa8eb4a68
krb5-server-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: 589c7ab0d582cd96dda4c5c46c77ccf7
SHA-256: 2a4ce99b44671aa90a7ecc46b9363ab93f2aa70e2b32a5409319a733d18c898f
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-workstation-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: b30cbd69645ab00de42f7442c89401d3
SHA-256: c16f43d167d20efc31788c89373e00143ca44c320e63271fa48aa4c1aa057aea
 
PPC:
krb5-debuginfo-1.8.2-3.el6_0.3.ppc.rpm
File outdated by:  RHSA-2011:0447
    MD5: 56cb6b9095fceee7ffa7ecd0288155c4
SHA-256: c5d8987102fb2bb2e6f9db9466c4db037f9058bddee3dceeb0b02a5d0a3e7485
krb5-debuginfo-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHSA-2011:0447
    MD5: b4b87df9e9cae27057bec9e155db48d5
SHA-256: 66d0cf146eb280179fdc665f0d9e27ed329ea06ac2b8702c63c109191ea1f518
krb5-devel-1.8.2-3.el6_0.3.ppc.rpm
File outdated by:  RHSA-2011:0447
    MD5: 7d5b3d999bc92c90851853a327b85961
SHA-256: c21ab575efb48fbeb2209fc0ea80e16b081e34e01f79a32a77213051e3b6f72f
krb5-devel-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 45959c51ebe900d1bb2b78b4a6db368a
SHA-256: 9d9cce0a059b2701babf5de54fce74a4636b6a23b3b8764e83b89c2d32b7b503
krb5-libs-1.8.2-3.el6_0.3.ppc.rpm
File outdated by:  RHSA-2011:0447
    MD5: 4e83a61ba3378544fb704788ca15d5c2
SHA-256: bd6bd39a0b37b7412a5c621d457214f65748213fb74a179508f7791843aab18b
krb5-libs-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 35219b010568b00171f5520784e906ba
SHA-256: 22ad1beda2e36d869d14025635516205dd171332c0b66956f3d66c62f2227284
krb5-pkinit-openssl-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 39353bf06a017f4f3e6270a37bddd7ae
SHA-256: 492a6bfb9a46b5666769b6629716ccd040ce7215990c182515e493576d2c30ba
krb5-server-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHSA-2011:0447
    MD5: bbee78429dfb6c4b74ac73b117675a85
SHA-256: 138c2f33ba96ba6855dcf21bbcd8693c7741bf4c79f5d30ead71a9a1c7e7bf6c
krb5-server-ldap-1.8.2-3.el6_0.3.ppc.rpm
File outdated by:  RHSA-2011:0447
    MD5: b442241154a8e7f1d4ad5f81adc8aec2
SHA-256: 8dd4ca011cfb2980415b27e1e3fe61adf6d624033d2afb858d70235ae69ed766
krb5-server-ldap-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 4e39298d3edcedfa02dbcfaf05f49c15
SHA-256: b9a64f26c5e7a275d73371f8a77062e4efb2acf84b7ecedad3a891f87d37e14d
krb5-workstation-1.8.2-3.el6_0.3.ppc64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 27fe2b2ff03b6f13df325c19d25f5377
SHA-256: 92c363b1097352f89c3ab1723b3019a5d407d60d9651d9a2dd329b9edf049954
 
s390x:
krb5-debuginfo-1.8.2-3.el6_0.3.s390.rpm
File outdated by:  RHSA-2011:0447
    MD5: 9d5d59bf039dbd2d861c1cfc48f88821
SHA-256: ba52b9abadfa1066981f78f73b550e06e5819d978690592138df8ffe276e9751
krb5-debuginfo-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHSA-2011:0447
    MD5: c23d3896d968a77f5233246104eec8f2
SHA-256: 1a53cb9d9e028a1a6902b35fa4c884cb1e9b1121d17184dacaede01de7f09410
krb5-devel-1.8.2-3.el6_0.3.s390.rpm
File outdated by:  RHSA-2011:0447
    MD5: ff49d023fc784984df4c69a6f02958ae
SHA-256: 0f3d91556b043b5585005c2b74e10e24353d5f5c9aeef62643de2f28c44f4099
krb5-devel-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHSA-2011:0447
    MD5: 522911586cdd508f092176508c1ac3e0
SHA-256: 6a52d0d39c43aa08964d98fdef41236345c8cf20a0efd897e39ab579cf544a20
krb5-libs-1.8.2-3.el6_0.3.s390.rpm
File outdated by:  RHSA-2011:0447
    MD5: 537381f20ef2d942054bb2cf2063a95b
SHA-256: 527d1a353e439d2aecc828954d1d91266ae109e791f72b933e54930cccf6a7e0
krb5-libs-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHSA-2011:0447
    MD5: 0171e8d0039d93572988d373d1ae6fe4
SHA-256: 6cb32b4c3f3756f6abe782fb0f7219fee01a6018926503372b2df5d5df3f354b
krb5-pkinit-openssl-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHSA-2011:0447
    MD5: 8eb7e2d4eb3bc7c90115eefd91051b75
SHA-256: 205547e586c95cf5e7121763f4791e277cea524a32694e6dd4108f01900c830a
krb5-server-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHSA-2011:0447
    MD5: c4983bb39e63b5ba386a2029c726ebaf
SHA-256: 913a3678d9a440442405962056921f32f73d47c1d5e3aa777f4051f1ff3c21f1
krb5-server-ldap-1.8.2-3.el6_0.3.s390.rpm
File outdated by:  RHSA-2011:0447
    MD5: 44661fc848b2746bc082e983930c1b56
SHA-256: eb11a6cbfad7b24d18477a191f792148cf7890f2340e3df8da3d51b93264fa4a
krb5-server-ldap-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHSA-2011:0447
    MD5: 64bd154818ca060fda35d1b557c4ae36
SHA-256: c784644ab779616f12a14a02ef9dd3831f75b3474baf738ddf2e750c0f836f27
krb5-workstation-1.8.2-3.el6_0.3.s390x.rpm
File outdated by:  RHSA-2011:0447
    MD5: e9244892a883d40929e10d6f3244ba74
SHA-256: f1c152b08ba3bafef862557a054810b37925ca7e15fc74aa216b8037300efad0
 
x86_64:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-debuginfo-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 7006f2fef01a1b73565a921b4795e534
SHA-256: 89e9a65905702a061177625a03d581d6214c6d26cb061652c3fdb52b90aa5980
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-devel-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:0447
    MD5: efec4b9f458a15aff82559015507282a
SHA-256: 3377312426e5dc7f825ac1820662008897be48f97373edc5974acb61c37f9978
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-libs-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:0447
    MD5: cb0f4ae89430264a3381ad9be04972cd
SHA-256: a1f0acfda8d87971702ccacd9473597957ea7f7d8f9f04d89555db6600f1dae8
krb5-pkinit-openssl-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 1d94fd1c67d281cc0ba051f0dc0e0de6
SHA-256: 6c4bea9be7bbfb467a92eb4ee64cf51b40d028d8f8416ae4f30f40137cbcdaac
krb5-server-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 79f33198b78dc9facb6df8e8345d790c
SHA-256: 21f1607328a0c0715a38e170b345cb0ec35cfe76f8f8b71cd1982b250a7372fc
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHSA-2011:0447
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-server-ldap-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:0447
    MD5: 57a1d242ea8122fee249c90e2f8faa0c
SHA-256: 1fc8bc70e9ac925eddce5e9a130fb8fc018343391a297e00fb6dfb761c566887
krb5-workstation-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHSA-2011:0447
    MD5: a060f9ade59df5d1c558797ac3b31319
SHA-256: 1e0b9936377f93f4f61467cd492fb3cc644abb1f299d1df4bc5aac56fd480548
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
krb5-1.8.2-3.el6_0.3.src.rpm
File outdated by:  RHBA-2014:0359
    MD5: ed4a7dae400dd3492c7684150983833d
SHA-256: 363b096a9b0dbd9de399874adeb48796ea273095e141f5a849713869f3a87a2c
 
IA-32:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-pkinit-openssl-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 24e75a5821c198d159522c3d4d1408ed
SHA-256: 71e80392b9fcb2693846ab2f0e4a11eff37fd540a8f54ff87a03f7daa8eb4a68
krb5-server-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 589c7ab0d582cd96dda4c5c46c77ccf7
SHA-256: 2a4ce99b44671aa90a7ecc46b9363ab93f2aa70e2b32a5409319a733d18c898f
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-workstation-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: b30cbd69645ab00de42f7442c89401d3
SHA-256: c16f43d167d20efc31788c89373e00143ca44c320e63271fa48aa4c1aa057aea
 
x86_64:
krb5-debuginfo-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 9400129c732f08e0b1eb54470688f17d
SHA-256: 32fa18fd3f7dcd8b56143a5088b8bfbe6c388b15ba339d23b8500b1a3c23348e
krb5-debuginfo-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 7006f2fef01a1b73565a921b4795e534
SHA-256: 89e9a65905702a061177625a03d581d6214c6d26cb061652c3fdb52b90aa5980
krb5-devel-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 532808ea9a2fa7e5501cc768c2971032
SHA-256: dbea0fb031194eb3dde9840caf45543dd287d43d08374360a2b0dc755a59cb13
krb5-devel-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: efec4b9f458a15aff82559015507282a
SHA-256: 3377312426e5dc7f825ac1820662008897be48f97373edc5974acb61c37f9978
krb5-libs-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: 62ffdb657e2ce8e1729728bebd00f878
SHA-256: 97fd807150a77cddb6bc36a9a6c2a26b6a634f669d88264825a27471e9e5df4b
krb5-libs-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: cb0f4ae89430264a3381ad9be04972cd
SHA-256: a1f0acfda8d87971702ccacd9473597957ea7f7d8f9f04d89555db6600f1dae8
krb5-pkinit-openssl-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 1d94fd1c67d281cc0ba051f0dc0e0de6
SHA-256: 6c4bea9be7bbfb467a92eb4ee64cf51b40d028d8f8416ae4f30f40137cbcdaac
krb5-server-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 79f33198b78dc9facb6df8e8345d790c
SHA-256: 21f1607328a0c0715a38e170b345cb0ec35cfe76f8f8b71cd1982b250a7372fc
krb5-server-ldap-1.8.2-3.el6_0.3.i686.rpm
File outdated by:  RHBA-2014:0359
    MD5: d8956f758dc61c42ba9879c290ed0997
SHA-256: 93c16662955db6c72b80eb4291112abe85873ca5c7ec9cba5dddcc88d5dbd139
krb5-server-ldap-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: 57a1d242ea8122fee249c90e2f8faa0c
SHA-256: 1fc8bc70e9ac925eddce5e9a130fb8fc018343391a297e00fb6dfb761c566887
krb5-workstation-1.8.2-3.el6_0.3.x86_64.rpm
File outdated by:  RHBA-2014:0359
    MD5: a060f9ade59df5d1c558797ac3b31319
SHA-256: 1e0b9936377f93f4f61467cd492fb3cc644abb1f299d1df4bc5aac56fd480548
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

644825 - 'kinit' with smart card login fails to authenticate to the kdc using the cert and its private key.
648674 - CVE-2010-1324 krb5: multiple checksum handling vulnerabilities (MITKRB5-SA-2010-007)
648734 - CVE-2010-1323 krb5: incorrect acceptance of certain checksums (MITKRB5-SA-2010-007)
648735 - CVE-2010-4020 krb5: krb5 may accept authdata checksums with low-entropy derived keys (MITKRB5-SA-2010-007)


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/