Issued:

2018-04-10

Updated:

2018-04-10

RHBA-2018:1053 - krb5 bug fix update

Synopsis

krb5 bug fix update

Type/Severity

Bug Fix Advisory None

Topic

Updated krb5 packages that fix one bug are now available for Red Hat Enterprise Linux 7.

Description

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

This update fixes the following bug:

• An earlier update to Kerberos, which was meant to proof the application for the "Year 2038 problem", introduced a bug in time stamp management. Consequently, Java and other programs did not behave as expected when requesting Kerberos tickets with lifetimes of maximum length. With this update, all requests for Kerberos tickets have a lifetime limit to avoid overflow. As a result, the requested lifetime is preserved, and the issuing of tickets by Kerberos now works correctly again. (BZ#1554723)

Users of krb5 are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• krb5-pkinit-1.15.1-19.el7.aarch64.rpm
• krb5-libs-1.15.1-19.el7.i686.rpm
• krb5-devel-1.15.1-19.el7.aarch64.rpm
• krb5-debuginfo-1.15.1-19.el7.ppc64.rpm
• krb5-debuginfo-1.15.1-19.el7.s390x.rpm
• krb5-libs-1.15.1-19.el7.s390.rpm
• krb5-devel-1.15.1-19.el7.i686.rpm
• krb5-server-1.15.1-19.el7.ppc64le.rpm
• krb5-debuginfo-1.15.1-19.el7.x86_64.rpm
• krb5-libs-1.15.1-19.el7.aarch64.rpm
• krb5-devel-1.15.1-19.el7.ppc64le.rpm
• krb5-server-ldap-1.15.1-19.el7.ppc64.rpm
• krb5-server-ldap-1.15.1-19.el7.s390x.rpm
• krb5-workstation-1.15.1-19.el7.x86_64.rpm
• libkadm5-1.15.1-19.el7.ppc64.rpm
• libkadm5-1.15.1-19.el7.s390x.rpm
• krb5-pkinit-1.15.1-19.el7.x86_64.rpm
• krb5-workstation-1.15.1-19.el7.ppc64.rpm
• krb5-libs-1.15.1-19.el7.ppc64le.rpm
• krb5-server-ldap-1.15.1-19.el7.x86_64.rpm
• krb5-server-1.15.1-19.el7.x86_64.rpm
• krb5-server-ldap-1.15.1-19.el7.ppc64le.rpm
• krb5-workstation-1.15.1-19.el7.s390x.rpm
• krb5-devel-1.15.1-19.el7.s390x.rpm
• libkadm5-1.15.1-19.el7.ppc64le.rpm
• krb5-libs-1.15.1-19.el7.ppc64.rpm
• krb5-workstation-1.15.1-19.el7.aarch64.rpm
• krb5-1.15.1-19.el7.src.rpm
• krb5-libs-1.15.1-19.el7.s390x.rpm
• krb5-server-1.15.1-19.el7.s390x.rpm
• krb5-debuginfo-1.15.1-19.el7.i686.rpm
• krb5-pkinit-1.15.1-19.el7.ppc64.rpm
• krb5-devel-1.15.1-19.el7.x86_64.rpm
• libkadm5-1.15.1-19.el7.x86_64.rpm
• krb5-pkinit-1.15.1-19.el7.ppc64le.rpm
• krb5-devel-1.15.1-19.el7.ppc64.rpm
• krb5-devel-1.15.1-19.el7.ppc.rpm
• krb5-debuginfo-1.15.1-19.el7.s390.rpm
• krb5-libs-1.15.1-19.el7.ppc.rpm
• krb5-libs-1.15.1-19.el7.x86_64.rpm
• krb5-server-1.15.1-19.el7.aarch64.rpm
• krb5-debuginfo-1.15.1-19.el7.aarch64.rpm
• libkadm5-1.15.1-19.el7.i686.rpm
• krb5-debuginfo-1.15.1-19.el7.ppc64le.rpm
• libkadm5-1.15.1-19.el7.s390.rpm
• libkadm5-1.15.1-19.el7.aarch64.rpm
• krb5-devel-1.15.1-19.el7.s390.rpm
• krb5-server-ldap-1.15.1-19.el7.aarch64.rpm
• libkadm5-1.15.1-19.el7.ppc.rpm
• krb5-pkinit-1.15.1-19.el7.s390x.rpm
• krb5-debuginfo-1.15.1-19.el7.ppc.rpm
• krb5-workstation-1.15.1-19.el7.ppc64le.rpm
• krb5-server-1.15.1-19.el7.ppc64.rpm

Fixes

(none)

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.