Red Hat Security Advisory

RHSA-2010:0029

krb5 security update

Released 2010-01-12 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 3 krb5-1.2.7-71, krb5-devel-1.2.7-71, krb5-devel-1.2.7-71.i386 +6
Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-36.el5_4.1, krb5-devel-1.6.1-36.el5_4.1, krb5-devel-1.6.1-36.el5_4.1.i386 +14
Red Hat Enterprise Linux AS EUS (v. 4.7) krb5-1.3.4-60.el4_7.3, krb5-devel-1.3.4-60.el4_7.3, krb5-devel-1.3.4-60.el4_7.3.i386 +14
Red Hat Enterprise Linux AS version 3 krb5-1.2.7-71, krb5-devel-1.2.7-71, krb5-devel-1.2.7-71.i386 +14
Red Hat Enterprise Linux AS version 4 krb5-1.3.4-62.el4_8.1, krb5-devel-1.3.4-62.el4_8.1, krb5-devel-1.3.4-62.el4_8.1.i386 +14
Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-36.el5_4.1, krb5-libs-1.6.1-36.el5_4.1, krb5-libs-1.6.1-36.el5_4.1.i386 +2
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.6.1-36.el5_4.1, krb5-devel-1.6.1-36.el5_4.1, krb5-devel-1.6.1-36.el5_4.1.i386 +2
Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-62.el4_8.1, krb5-devel-1.3.4-62.el4_8.1, krb5-devel-1.3.4-62.el4_8.1.i386 +6
Red Hat Enterprise Linux ES EUS (v. 4.7) krb5-1.3.4-60.el4_7.3, krb5-devel-1.3.4-60.el4_7.3, krb5-devel-1.3.4-60.el4_7.3.i386 +10
Red Hat Enterprise Linux ES version 3 krb5-1.2.7-71, krb5-devel-1.2.7-71, krb5-devel-1.2.7-71.i386 +10
Red Hat Enterprise Linux ES version 4 krb5-1.3.4-62.el4_8.1, krb5-devel-1.3.4-62.el4_8.1, krb5-devel-1.3.4-62.el4_8.1.i386 +10
Red Hat Enterprise Linux EUS (v. 5.2 server) krb5-1.6.1-25.el5_2.3, krb5-devel-1.6.1-25.el5_2.3, krb5-devel-1.6.1-25.el5_2.3.i386 +14
Red Hat Enterprise Linux EUS (v. 5.3 server) krb5-1.6.1-31.el5_3.4, krb5-devel-1.6.1-31.el5_3.4, krb5-devel-1.6.1-31.el5_3.4.i386 +14
Red Hat Enterprise Linux WS version 3 krb5-1.2.7-71, krb5-devel-1.2.7-71, krb5-devel-1.2.7-71.i386 +10
Red Hat Enterprise Linux WS version 4 krb5-1.3.4-62.el4_8.1, krb5-devel-1.3.4-62.el4_8.1, krb5-devel-1.3.4-62.el4_8.1.i386 +10

Fixes 1 record

TI-2009-03997 CVE-2009-4212 · GHSA-39cv-j24w-8wvf

Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the…

MEDIUM 53

Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of serv…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07553 Published 2010-01-13 Fixed CWE-189