Issued:

2011-12-06

Updated:

2011-12-06

RHBA-2011:1706 - krb5-appl bug fix and enhancement update

Synopsis

krb5-appl bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Updated krb5-appl packages that fix two bugs and add one enhancement are now available for Red Hat Enterprise Linux 6.

Description

The krb5-appl packages contain Kerberos-aware versions of clients and servers for the telnet, FTP, rsh, and rlogin protocols.

This update fixes the following bugs:

• Prior to this update, the default PAM configuration for the FTP server incorrectly attempted to use the pam_selinux.so module. As a result, users failed to log in. This update corrects the supplied configuration. Now, the FTP server works as expected. (BZ#713459)

• Prior to this update, the FTP server did not correctly parse lines in the /etc/ftpusers file which specified user names in combination with the "restrict" keyword. This update modifies the code so that the server parses the "restrict" keyword correctly. (BZ#713521)

This update also adds the following enhancement:

• Prior to this update, the command-line FTP client in the krb5-appl-clients package did not accept command lines longer than 500 characters. This update removes this limitation. (BZ#665834, BZ#736364)

All users of krb5-appl are advised to upgrade to these updated packages, which fix these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259/

Affected Products

Updated Packages

• krb5-appl-1.0.1-5.el6.src.rpm
• krb5-appl-clients-1.0.1-5.el6.ppc64.rpm
• krb5-appl-clients-1.0.1-5.el6.x86_64.rpm
• krb5-appl-debuginfo-1.0.1-5.el6.i686.rpm
• krb5-appl-debuginfo-1.0.1-5.el6.ppc64.rpm
• krb5-appl-servers-1.0.1-5.el6.ppc64.rpm
• krb5-appl-debuginfo-1.0.1-5.el6.s390x.rpm
• krb5-appl-servers-1.0.1-5.el6.x86_64.rpm
• krb5-appl-clients-1.0.1-5.el6.s390x.rpm
• krb5-appl-servers-1.0.1-5.el6.i686.rpm
• krb5-appl-clients-1.0.1-5.el6.i686.rpm
• krb5-appl-servers-1.0.1-5.el6.s390x.rpm
• krb5-appl-debuginfo-1.0.1-5.el6.x86_64.rpm

Fixes

• This content is not included.BZ - 713459
• This content is not included.BZ - 713521

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.