krb5-1.15.1-55.0.2.el7.AXS7

エラータID: AXSA:2025-9717:01

Release date: 
Tuesday, March 4, 2025 - 14:03
Subject: 
krb5-1.15.1-55.0.2.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

improve your network's security by eliminating the insecure practice of
cleartext passwords.

Security fix(es):
- CVE-2024-3596: implement support for Message-Authenticator in libkrad

CVE(s):
CVE-2024-3596
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

Solution: 

Update packages.

CVEs: 
CVE-2024-3596
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
Additional Info: 

N/A

Download: 

Asianux Server 7 for x86_64
  1. krb5-devel-1.15.1-55.0.2.el7.AXS7.i686.rpm
    MD5: 9df751d32c0f08bb5fbb20439ec162c5
    SHA-256: a88d6520c82dcb97129a0ceb89937e130fa3de10446beb3e7c3787988623da11
    Size: 272.16 kB
  2. krb5-devel-1.15.1-55.0.2.el7.AXS7.x86_64.rpm
    MD5: ecf2fffb532fb4697616305dbba8724d
    SHA-256: e51ed33f507a0b34c6142cb93fd702811fdee0b0773361d84e6026f47281976d
    Size: 272.96 kB
  3. krb5-libs-1.15.1-55.0.2.el7.AXS7.i686.rpm
    MD5: f3e4458ccb5c5ebb7f6c530a523ee873
    SHA-256: 6f6e56de02c1b7016aff876d40f11abcd6c2fb3d3833ac7a6fd1ce24fdf3e5b5
    Size: 815.29 kB
  4. krb5-libs-1.15.1-55.0.2.el7.AXS7.x86_64.rpm
    MD5: df9b7a42f4598fb34f6b9d5f2cd3081e
    SHA-256: fc24778f1badfa48fe2ffcf2f663bee5a39ae1599eed79c6d60ac1101aee4601
    Size: 808.95 kB
  5. krb5-pkinit-1.15.1-55.0.2.el7.AXS7.x86_64.rpm
    MD5: cc17cc517e3f8069c5fa237dd7c7d780
    SHA-256: c8fd80e2d2f125b89d428f308ef4402643be856bc655733dc79010c0d967abd1
    Size: 166.68 kB
  6. krb5-server-1.15.1-55.0.2.el7.AXS7.x86_64.rpm
    MD5: 13f0eb2c761cb5f3259bf5a7d2318008
    SHA-256: ce96cce94eeee523ff3281b8a32d5a632066d74a5e9164a35600cd2d0462744b
    Size: 1.02 MB
  7. krb5-server-ldap-1.15.1-55.0.2.el7.AXS7.x86_64.rpm
    MD5: c4d517e07762c675dd14bac3076cdc01
    SHA-256: 1cd81043ddeae8db8a103861d9fe355a270206367dcaab908c341f08b347c704
    Size: 195.15 kB
  8. krb5-workstation-1.15.1-55.0.2.el7.AXS7.x86_64.rpm
    MD5: c72e4abcc2bac96a0d9014aeaa5090e4
    SHA-256: c1fd277a0981c431d67c837c7546b3dca0e7775af796f33b8f1a0d22edb0dd99
    Size: 820.44 kB
  9. libkadm5-1.15.1-55.0.2.el7.AXS7.i686.rpm
    MD5: 6796eb8d1c8b5ac76ba0d3a881d5c038
    SHA-256: 77475960958995464c4ba03b943d1fe710dcbbafc6ab65bca423e5110099b210
    Size: 179.70 kB
  10. libkadm5-1.15.1-55.0.2.el7.AXS7.x86_64.rpm
    MD5: 544a77fef91cda31cd6ce9e57b1df697
    SHA-256: 317e496228a52df737f8faa54888c6a451b578ad36db7e5e2a5d1ecd37930acd
    Size: 179.24 kB