-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:100 http://www.mandriva.com/security/ _______________________________________________________________________ Package : krb5 Date : May 19, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 _______________________________________________________________________ Problem Description: A vulnerability has been found and corrected in krb5: Certain invalid GSS-API tokens can cause a GSS-API acceptor (server) to crash due to a null pointer dereference in the GSS-API library (CVE-2010-1321). Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. The updated packages have been patched to correct this issue. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-005.txt _______________________________________________________________________ Updated Packages: Mandriva Linux 2008.0: 2520c8f32483e397282d8efc9f7a9575 2008.0/i586/ftp-client-krb5-1.6.2-7.6mdv2008.0.i586.rpm 22b32fc5f9baca5e11e6732bc1fa915b 2008.0/i586/ftp-server-krb5-1.6.2-7.6mdv2008.0.i586.rpm d393113b6af975d0b39fe9a4d65cf7e8 2008.0/i586/krb5-1.6.2-7.6mdv2008.0.i586.rpm e33072b8a3b6224f5aecf7011218cd1f 2008.0/i586/krb5-server-1.6.2-7.6mdv2008.0.i586.rpm 0c9f8c605686f6520bf2478ae25bb105 2008.0/i586/krb5-workstation-1.6.2-7.6mdv2008.0.i586.rpm 4792b7d9585bb91f4143848160831459 2008.0/i586/libkrb53-1.6.2-7.6mdv2008.0.i586.rpm 6108a96de40deaad64893aaec2e9169b 2008.0/i586/libkrb53-devel-1.6.2-7.6mdv2008.0.i586.rpm 6647c6d8323324f4f89c8e15f5abc184 2008.0/i586/telnet-client-krb5-1.6.2-7.6mdv2008.0.i586.rpm e3f73dd8b66154eef8df85f068f45a32 2008.0/i586/telnet-server-krb5-1.6.2-7.6mdv2008.0.i586.rpm 462548c305077345e9cca8cea9b2e07c 2008.0/SRPMS/krb5-1.6.2-7.6mdv2008.0.src.rpm Mandriva Linux 2008.0/X86_64: 4169daff665cacc305b2e4460ae34b8b 2008.0/x86_64/ftp-client-krb5-1.6.2-7.6mdv2008.0.x86_64.rpm 5ffc8e8939414ec5fc44408ae5a3263e 2008.0/x86_64/ftp-server-krb5-1.6.2-7.6mdv2008.0.x86_64.rpm 70ef16ef90a1e8d1c061f68126b99695 2008.0/x86_64/krb5-1.6.2-7.6mdv2008.0.x86_64.rpm 51a7698ce79eee2017ba11e8fa710a5a 2008.0/x86_64/krb5-server-1.6.2-7.6mdv2008.0.x86_64.rpm a8e4fc325e3d603895651e6f8b6faacb 2008.0/x86_64/krb5-workstation-1.6.2-7.6mdv2008.0.x86_64.rpm 807b5d4e6f97715f54ccf7de0234277c 2008.0/x86_64/lib64krb53-1.6.2-7.6mdv2008.0.x86_64.rpm 1574a131535b6f7daed77b9d75335d5f 2008.0/x86_64/lib64krb53-devel-1.6.2-7.6mdv2008.0.x86_64.rpm aedf0e161faaa2c697d9f389e1c6ccdd 2008.0/x86_64/telnet-client-krb5-1.6.2-7.6mdv2008.0.x86_64.rpm 33921c3b9d483ee531637b85bdf2f9f7 2008.0/x86_64/telnet-server-krb5-1.6.2-7.6mdv2008.0.x86_64.rpm 462548c305077345e9cca8cea9b2e07c 2008.0/SRPMS/krb5-1.6.2-7.6mdv2008.0.src.rpm Mandriva Linux 2009.0: 8348b4c0e2fcaeadf561d89a9bc30eff 2009.0/i586/ftp-client-krb5-1.6.3-6.5mdv2009.0.i586.rpm ec446d86c4d0ca38e6627d20a3b5b062 2009.0/i586/ftp-server-krb5-1.6.3-6.5mdv2009.0.i586.rpm bbf43873ea9b64c7d39e7ed3a3fe3af9 2009.0/i586/krb5-1.6.3-6.5mdv2009.0.i586.rpm bf03084dce6b6663eb8cace3d8f575ed 2009.0/i586/krb5-server-1.6.3-6.5mdv2009.0.i586.rpm c97d923cf9676702f61fa9abe7cc6d6e 2009.0/i586/krb5-workstation-1.6.3-6.5mdv2009.0.i586.rpm 23879f2dc505a4b5e1cdd47c615dfbdc 2009.0/i586/libkrb53-1.6.3-6.5mdv2009.0.i586.rpm 8d54be1d19731ee34c6151e354261ace 2009.0/i586/libkrb53-devel-1.6.3-6.5mdv2009.0.i586.rpm a14c815a5ee87e3d93dc9df1775e0d28 2009.0/i586/telnet-client-krb5-1.6.3-6.5mdv2009.0.i586.rpm 868455eb75ec804f5355b0be763e9857 2009.0/i586/telnet-server-krb5-1.6.3-6.5mdv2009.0.i586.rpm 548a22a46ab58c305f1a2f3ccbe45605 2009.0/SRPMS/krb5-1.6.3-6.5mdv2009.0.src.rpm Mandriva Linux 2009.0/X86_64: ffb2cc7d487b28f298d83f41cb5042cd 2009.0/x86_64/ftp-client-krb5-1.6.3-6.5mdv2009.0.x86_64.rpm d003a3957d8a93f81ec3e8c408d41aed 2009.0/x86_64/ftp-server-krb5-1.6.3-6.5mdv2009.0.x86_64.rpm 1cfc7fb186531bc674485b831f65e99e 2009.0/x86_64/krb5-1.6.3-6.5mdv2009.0.x86_64.rpm 2ba9ee4fa6fee4dbb356cc8d2e2e1caa 2009.0/x86_64/krb5-server-1.6.3-6.5mdv2009.0.x86_64.rpm 55b750acf97f15ebcc005c587635d658 2009.0/x86_64/krb5-workstation-1.6.3-6.5mdv2009.0.x86_64.rpm 76d3c4a434f9551be3623eabd051105e 2009.0/x86_64/lib64krb53-1.6.3-6.5mdv2009.0.x86_64.rpm ea7072c168ef6b8726bb9d6956aa8d10 2009.0/x86_64/lib64krb53-devel-1.6.3-6.5mdv2009.0.x86_64.rpm c470271cb9895c4733561b6084c46399 2009.0/x86_64/telnet-client-krb5-1.6.3-6.5mdv2009.0.x86_64.rpm 2e8a9f79a7a8821bd313e74f915e5dfa 2009.0/x86_64/telnet-server-krb5-1.6.3-6.5mdv2009.0.x86_64.rpm 548a22a46ab58c305f1a2f3ccbe45605 2009.0/SRPMS/krb5-1.6.3-6.5mdv2009.0.src.rpm Mandriva Linux 2009.1: 0461fef49b6e6990c6351421c7b49400 2009.1/i586/ftp-client-krb5-1.6.3-9.3mdv2009.1.i586.rpm 2079c269a882a5d217c93f0a7d0a3f2e 2009.1/i586/ftp-server-krb5-1.6.3-9.3mdv2009.1.i586.rpm 26d7cce15de17218237f99a98a156d3e 2009.1/i586/krb5-1.6.3-9.3mdv2009.1.i586.rpm 5809edeb53147ad4ac807637d5ce77ca 2009.1/i586/krb5-server-1.6.3-9.3mdv2009.1.i586.rpm 0ebf738e81cd9539f9806e561a002f6b 2009.1/i586/krb5-workstation-1.6.3-9.3mdv2009.1.i586.rpm dae6d71e81fee5f6f4908d10e1e33ad7 2009.1/i586/libkrb53-1.6.3-9.3mdv2009.1.i586.rpm 238c953aff7ff92287f4cc9b99ceafd7 2009.1/i586/libkrb53-devel-1.6.3-9.3mdv2009.1.i586.rpm 74f7d4c3b8312a8a8cebbd0afb08276b 2009.1/i586/telnet-client-krb5-1.6.3-9.3mdv2009.1.i586.rpm 550b2308d05d74a4e001e59093582c36 2009.1/i586/telnet-server-krb5-1.6.3-9.3mdv2009.1.i586.rpm a831559162fce01ef507fc1feb73e9a3 2009.1/SRPMS/krb5-1.6.3-9.3mdv2009.1.src.rpm Mandriva Linux 2009.1/X86_64: f9aaff955bfe4b09cd719b53ef578154 2009.1/x86_64/ftp-client-krb5-1.6.3-9.3mdv2009.1.x86_64.rpm 8e9a4eaa2d4472912de043b703f787fa 2009.1/x86_64/ftp-server-krb5-1.6.3-9.3mdv2009.1.x86_64.rpm b819737bd6ecb850192af853056c336d 2009.1/x86_64/krb5-1.6.3-9.3mdv2009.1.x86_64.rpm fa2ff36617c3bd6354fd9abb57a72fb0 2009.1/x86_64/krb5-server-1.6.3-9.3mdv2009.1.x86_64.rpm 132df6e2791be5e227020c3cacbad37c 2009.1/x86_64/krb5-workstation-1.6.3-9.3mdv2009.1.x86_64.rpm 7896f2aad05f97b3810609f741d740d6 2009.1/x86_64/lib64krb53-1.6.3-9.3mdv2009.1.x86_64.rpm 420acd75c5f1fb967e4e44fbcac421a9 2009.1/x86_64/lib64krb53-devel-1.6.3-9.3mdv2009.1.x86_64.rpm d5bbeb4daa9ed044dadb66fbd6041ead 2009.1/x86_64/telnet-client-krb5-1.6.3-9.3mdv2009.1.x86_64.rpm 9e4c89357ffa2cb57f13016463162103 2009.1/x86_64/telnet-server-krb5-1.6.3-9.3mdv2009.1.x86_64.rpm a831559162fce01ef507fc1feb73e9a3 2009.1/SRPMS/krb5-1.6.3-9.3mdv2009.1.src.rpm Mandriva Linux 2010.0: 4f33d6e1a070ddc10a1193a575d2c62a 2010.0/i586/ftp-client-krb5-1.6.3-10.3mdv2010.0.i586.rpm 291f4429160419c3db509469a7886125 2010.0/i586/ftp-server-krb5-1.6.3-10.3mdv2010.0.i586.rpm 37931a40e27fefa202d794880f352b84 2010.0/i586/krb5-1.6.3-10.3mdv2010.0.i586.rpm 04897cc980635327d46e7318a0342f90 2010.0/i586/krb5-server-1.6.3-10.3mdv2010.0.i586.rpm ab418fa061a440f6ac044edf15101df6 2010.0/i586/krb5-workstation-1.6.3-10.3mdv2010.0.i586.rpm 674a6102c46b7126eb5c73d7872c3cc3 2010.0/i586/libkrb53-1.6.3-10.3mdv2010.0.i586.rpm 210e2ac26cdd2d28349245677218a01b 2010.0/i586/libkrb53-devel-1.6.3-10.3mdv2010.0.i586.rpm b400e04778bb788dc33970b01b4c137e 2010.0/i586/telnet-client-krb5-1.6.3-10.3mdv2010.0.i586.rpm da8114785174c01dceeab63359822b68 2010.0/i586/telnet-server-krb5-1.6.3-10.3mdv2010.0.i586.rpm 9c68770f7cf1e801cfd2a3bb48fa3bf9 2010.0/SRPMS/krb5-1.6.3-10.3mdv2010.0.src.rpm Mandriva Linux 2010.0/X86_64: 607227ab277d30a67b0f04e00fac6beb 2010.0/x86_64/ftp-client-krb5-1.6.3-10.3mdv2010.0.x86_64.rpm 4894ebd2a03755a100dd4b28e6dc75e9 2010.0/x86_64/ftp-server-krb5-1.6.3-10.3mdv2010.0.x86_64.rpm 33051fb650eb78d70311f0fd0da690bd 2010.0/x86_64/krb5-1.6.3-10.3mdv2010.0.x86_64.rpm b5e1a5dbdfcbb509713edce5531e5ec3 2010.0/x86_64/krb5-server-1.6.3-10.3mdv2010.0.x86_64.rpm e21919b8244a99334c41ce17afed4e07 2010.0/x86_64/krb5-workstation-1.6.3-10.3mdv2010.0.x86_64.rpm 367f9dffd8fd57422de1e6a5163d4ba1 2010.0/x86_64/lib64krb53-1.6.3-10.3mdv2010.0.x86_64.rpm 898754305b0ac980809a35c69b40976a 2010.0/x86_64/lib64krb53-devel-1.6.3-10.3mdv2010.0.x86_64.rpm 02b52ef9de658a117e103b97f41277f3 2010.0/x86_64/telnet-client-krb5-1.6.3-10.3mdv2010.0.x86_64.rpm deb44c8ba11b4d53a88f25c5fcb79001 2010.0/x86_64/telnet-server-krb5-1.6.3-10.3mdv2010.0.x86_64.rpm 9c68770f7cf1e801cfd2a3bb48fa3bf9 2010.0/SRPMS/krb5-1.6.3-10.3mdv2010.0.src.rpm Corporate 4.0: 439079e5d3ebb2297761880598e8d8bb corporate/4.0/i586/ftp-client-krb5-1.4.3-5.9.20060mlcs4.i586.rpm 365c4b8b5a82875a5c8bd129b399734a corporate/4.0/i586/ftp-server-krb5-1.4.3-5.9.20060mlcs4.i586.rpm dc1f6e63f3aaa284212e8aa7ddb6f6b0 corporate/4.0/i586/krb5-server-1.4.3-5.9.20060mlcs4.i586.rpm 9586f6e33e57a4c3f1c347b86f9c70c4 corporate/4.0/i586/krb5-workstation-1.4.3-5.9.20060mlcs4.i586.rpm b49c574d86c42a0085a54b236aced5b6 corporate/4.0/i586/libkrb53-1.4.3-5.9.20060mlcs4.i586.rpm ae348bc8ff358a87f44aa026b2484713 corporate/4.0/i586/libkrb53-devel-1.4.3-5.9.20060mlcs4.i586.rpm 4aac082d59cc3489b374b00ebded127a corporate/4.0/i586/telnet-client-krb5-1.4.3-5.9.20060mlcs4.i586.rpm af304d77c7495a826fdac206d7496b12 corporate/4.0/i586/telnet-server-krb5-1.4.3-5.9.20060mlcs4.i586.rpm 8fe0d91a46de9233e71234b6032dc214 corporate/4.0/SRPMS/krb5-1.4.3-5.9.20060mlcs4.src.rpm Corporate 4.0/X86_64: 9fc7ce52541dfacaeee5fc0455865ae5 corporate/4.0/x86_64/ftp-client-krb5-1.4.3-5.9.20060mlcs4.x86_64.rpm 3a12cba54fb121a23cab340379e77fd5 corporate/4.0/x86_64/ftp-server-krb5-1.4.3-5.9.20060mlcs4.x86_64.rpm 5dc163e2745b11ecef99569c77ff06f5 corporate/4.0/x86_64/krb5-server-1.4.3-5.9.20060mlcs4.x86_64.rpm 8a037d6178e0bdb9bceca59bc8b8d851 corporate/4.0/x86_64/krb5-workstation-1.4.3-5.9.20060mlcs4.x86_64.rpm 20f86152565bafc44b052ea4e2facedf corporate/4.0/x86_64/lib64krb53-1.4.3-5.9.20060mlcs4.x86_64.rpm 74730d4716f994493f2488b5a906d31b corporate/4.0/x86_64/lib64krb53-devel-1.4.3-5.9.20060mlcs4.x86_64.rpm b8fe0bb902f9bf5edbdcf84301b0ecc7 corporate/4.0/x86_64/telnet-client-krb5-1.4.3-5.9.20060mlcs4.x86_64.rpm dc82c7658d75c7bb3f5f929f426d32d7 corporate/4.0/x86_64/telnet-server-krb5-1.4.3-5.9.20060mlcs4.x86_64.rpm 8fe0d91a46de9233e71234b6032dc214 corporate/4.0/SRPMS/krb5-1.4.3-5.9.20060mlcs4.src.rpm Mandriva Enterprise Server 5: 450f4f0744f09403449067e4d723b4f8 mes5/i586/ftp-client-krb5-1.6.3-6.5mdvmes5.1.i586.rpm 961588fc63027b180aaadf5e3142ba30 mes5/i586/ftp-server-krb5-1.6.3-6.5mdvmes5.1.i586.rpm d9703f6bfdcbb1145fa426b43cc66933 mes5/i586/krb5-1.6.3-6.5mdvmes5.1.i586.rpm ddd5d23707c5962eae2c8b5b64cb9941 mes5/i586/krb5-server-1.6.3-6.5mdvmes5.1.i586.rpm 8c1f6fca8be6b41a9dc117e2b92602f5 mes5/i586/krb5-workstation-1.6.3-6.5mdvmes5.1.i586.rpm d0e4e1e49866342c5d3b1872e7839004 mes5/i586/libkrb53-1.6.3-6.5mdvmes5.1.i586.rpm a470b862aab815bd5b15f9805bb1c9c4 mes5/i586/libkrb53-devel-1.6.3-6.5mdvmes5.1.i586.rpm 395f721ca339c7788fb7c6cf4bb24992 mes5/i586/telnet-client-krb5-1.6.3-6.5mdvmes5.1.i586.rpm b788c681f33d6453577a62ec96ac77fa mes5/i586/telnet-server-krb5-1.6.3-6.5mdvmes5.1.i586.rpm d53598acef53207817d160e0e0d7f3c0 mes5/SRPMS/krb5-1.6.3-6.5mdvmes5.1.src.rpm Mandriva Enterprise Server 5/X86_64: 086ec6ed1c4fbc4889a0d44dfb6f1343 mes5/x86_64/ftp-client-krb5-1.6.3-6.5mdvmes5.1.x86_64.rpm 8db64a3244be34c8d22c4768d974b615 mes5/x86_64/ftp-server-krb5-1.6.3-6.5mdvmes5.1.x86_64.rpm 7fb5a7cd740c8a92bc6f689ec359b032 mes5/x86_64/krb5-1.6.3-6.5mdvmes5.1.x86_64.rpm 88b4670b643991dab5fd43744f0e273f mes5/x86_64/krb5-server-1.6.3-6.5mdvmes5.1.x86_64.rpm 5d7ef6681adefcb41097b1dd3b69c3a7 mes5/x86_64/krb5-workstation-1.6.3-6.5mdvmes5.1.x86_64.rpm 1e579a1776641d9c17fcecfbeb0848ad mes5/x86_64/lib64krb53-1.6.3-6.5mdvmes5.1.x86_64.rpm fcd9991a3e00e8dda9a042d1a9bf6d45 mes5/x86_64/lib64krb53-devel-1.6.3-6.5mdvmes5.1.x86_64.rpm 49c49b4fc7cd1a61cdbcbe9e9a68e5d5 mes5/x86_64/telnet-client-krb5-1.6.3-6.5mdvmes5.1.x86_64.rpm 110ef8e1fee86869ab57cdc703923efa mes5/x86_64/telnet-server-krb5-1.6.3-6.5mdvmes5.1.x86_64.rpm d53598acef53207817d160e0e0d7f3c0 mes5/SRPMS/krb5-1.6.3-6.5mdvmes5.1.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFL89HamqjQ0CJFipgRAl7cAKCBY7ftHoN15da08Q5S0k+FSj4hGQCglEu1 jAu7N43nMyjWj0m/AchwC3o= =li8R -----END PGP SIGNATURE-----
