Red Hat Security AdvisoryRHSA-2013:0656
krb5 security update
Released 2013-03-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.10.3-10.el6_4.1, krb5-libs-1.10.3-10.el6_4.1, krb5-pkinit-openssl-1.10.3-10.el6_4.1 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-1.10.3-10.el6_4.1, krb5-devel-1.10.3-10.el6_4.1, krb5-server-1.10.3-10.el6_4.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.10.3-10.el6_4.1, krb5-libs-1.10.3-10.el6_4.1, krb5-pkinit-openssl-1.10.3-10.el6_4.1 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-1.10.3-10.el6_4.1, krb5-devel-1.10.3-10.el6_4.1, krb5-server-1.10.3-10.el6_4.1 +1
- Red Hat Enterprise Linux Server (v. 6) krb5-1.10.3-10.el6_4.1, krb5-devel-1.10.3-10.el6_4.1, krb5-devel-1.10.3-10.el6_4.1.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.10.3-10.el6_4.1, krb5-devel-1.10.3-10.el6_4.1, krb5-libs-1.10.3-10.el6_4.1 +4
Fixes 2 records
Priority LOW 29
The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 d…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0366 · Published 2013-03-03 · Fixed CWE-476
Priority LOW 28
The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 attempts to find an agility KDF…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02576 · Published 2013-03-03 · Fixed CWE-476
