krb5-1.6.1-55.AXS3.1

エラータID: AXSA:2011-25:01

Release date: 
Thursday, February 10, 2011 - 21:20
Subject: 
krb5-1.6.1-55.AXS3.1
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords.
Security issues fixed with this release:
CVE-2011-0281
CVE-2011-0282
No description available at the time of writing, please use the CVE links below.

Solution: 

Update packages.

CVEs: 
CVE-2011-0281
The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.
CVE-2011-0282
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.
Additional Info: 

N/A

Download: 

SRPMS
  1. krb5-1.6.1-55.AXS3.1.src.rpm
    MD5: e0d729577f538d76ca039cc348a7d016
    SHA-256: a416fffc026b4368c000ccd4d93fb0eafbdfd8488253c2f1fbc4650f50410b16
    Size: 14.98 MB

Asianux Server 3 for x86
  1. krb5-devel-1.6.1-55.AXS3.1.i386.rpm
    MD5: 6219c16ad0a59f7d66791e308e378538
    SHA-256: 34cc0665376b054fe932e72dba19e783134b1ac0c6fde4d747252bc6ca74734b
    Size: 1.85 MB
  2. krb5-libs-1.6.1-55.AXS3.1.i386.rpm
    MD5: 0d9ae36e1205894d74c5c3cf56cdef34
    SHA-256: c13eca17b987355967f65c18f645c9be0ef7ae42b5cc45e915ae9f5f0ae6bda7
    Size: 666.96 kB
  3. krb5-server-1.6.1-55.AXS3.1.i386.rpm
    MD5: c5e18520a9470e643b55502c226457ee
    SHA-256: ba500cc1a00b27a5d76f0f2b10e00ff82f481996b3764176b0e2ba05504bbbee
    Size: 911.29 kB
  4. krb5-workstation-1.6.1-55.AXS3.1.i386.rpm
    MD5: c40f1edd3bb17e16d80e1fb704498c5b
    SHA-256: 671dbf637d5dced6e3ab43805936865ca729ad5d944ad58ece081d24c69e49ec
    Size: 827.57 kB

Asianux Server 3 for x86_64
  1. krb5-devel-1.6.1-55.AXS3.1.x86_64.rpm
    MD5: f53b6163b3e09f8fc21d9652246cd6c2
    SHA-256: 799393496ceb2c3efd15c2b3916554b60f7a0f800bdd0ab52e959f59692dc2e8
    Size: 1.87 MB
  2. krb5-libs-1.6.1-55.AXS3.1.x86_64.rpm
    MD5: 6f0ddda213dac9777b9a6a25f2dafb2f
    SHA-256: 097dda2b48c227c901908c7bd1bf720db58b63c6b800788d78678a5f5c0f29ce
    Size: 679.47 kB
  3. krb5-server-1.6.1-55.AXS3.1.x86_64.rpm
    MD5: ed1b120bd2d4055146f15084e8474b97
    SHA-256: 884b994b3bc412bedce0f10a8fb33d9b8ad0891a411c176526dfaaf594159994
    Size: 919.16 kB
  4. krb5-workstation-1.6.1-55.AXS3.1.x86_64.rpm
    MD5: 52b5398d8f5607f062721944a4dc0978
    SHA-256: b00216d0b19fb10ce87b9dc4e001278f6ee542d79836c08b7bd7363426e41e46
    Size: 853.29 kB