krb5-1.6.1-36.AXS3.4

エラータID: AXSA:2010-278:03

Release date: 
Thursday, May 20, 2010 - 14:23
Subject: 
krb5-1.6.1-36.AXS3.4
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of clear text passwords.
Security issues fixed with this release
CVE-2010-1321
No description available at the time of writing, please follow the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2010-1321
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an AP-REQ message in which the authenticator's checksum field is missing.


Additional Info: 

N/A

Download: 

SRPMS
  1. krb5-1.6.1-36.AXS3.4.src.rpm
    MD5: 22470ef209a416b870991194599337d5
    SHA-256: e257164bfc9ea5f39f2765aba36322069180e059294ecc816707a92a10914ba4
    Size: 14.96 MB

Asianux Server 3 for x86
  1. krb5-devel-1.6.1-36.AXS3.4.i386.rpm
    MD5: dc709a6e2d7c177193ef48eda121d9c1
    SHA-256: d18b6f9e1b3519b1afbf3f9f92d5520d7207375981f04eed6e945d4adbf8c986
    Size: 1.85 MB
  2. krb5-libs-1.6.1-36.AXS3.4.i386.rpm
    MD5: cd26fd2fe5da164fae7251621bf22ff7
    SHA-256: b11c306bcdaa98889056c5c9198c3c36ceace9a8ec5b15b7e18eef2629b48600
    Size: 663.03 kB
  3. krb5-server-1.6.1-36.AXS3.4.i386.rpm
    MD5: fd500f16af39e008ae28d7be05ef7e54
    SHA-256: 93153c7fa1279c89ca1b2b6de8202032edfa8bebad89b46aff7524bfcddabad2
    Size: 907.57 kB
  4. krb5-workstation-1.6.1-36.AXS3.4.i386.rpm
    MD5: 155b289cdc1b66de4f3cb37af9253cbe
    SHA-256: 90976c110adde6f05db01e9ba3870e477cdd79fe1560ae7202889b3a6aff5cf6
    Size: 824.02 kB

Asianux Server 3 for x86_64
  1. krb5-devel-1.6.1-36.AXS3.4.x86_64.rpm
    MD5: 0df4dd45fb56bec56a6bdbc9fe7378d7
    SHA-256: f8c3655cf5a05001e399180e38394e8ab186cd1ae5626990d5fff3464d202f24
    Size: 1.87 MB
  2. krb5-libs-1.6.1-36.AXS3.4.x86_64.rpm
    MD5: 85085c945a03fd69f07e813c641d6771
    SHA-256: d6e92763e3c133b21fab6500a2a47aff65b6fc07bd87f5727147290b98ed2d39
    Size: 675.57 kB
  3. krb5-server-1.6.1-36.AXS3.4.x86_64.rpm
    MD5: f5e24dc8e619e67d6ed2841f88e570a8
    SHA-256: e7be01ffe752ef74952c1afff1309c1d9e9daee50b451db17438943fb03ae457
    Size: 915.80 kB
  4. krb5-workstation-1.6.1-36.AXS3.4.x86_64.rpm
    MD5: fd6a8f7ce77400f6ffd82bf25453f677
    SHA-256: 0162c9792767afab5cad5f38b0380807bfa2b5c0630e6f32f4000f7bf26b1e9c
    Size: 850.87 kB