==========================================================Ubuntu Security Notice USN-924-1             April 07, 2010
krb5 vulnerabilities
CVE-2007-5901, CVE-2007-5902, CVE-2007-5971, CVE-2007-5972,
CVE-2010-0629
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  krb5-kdc                        1.6.dfsg.3~beta1-2ubuntu1.4
  libkrb53                        1.6.dfsg.3~beta1-2ubuntu1.4

Ubuntu 8.10:
  krb5-kdc                        1.6.dfsg.4~beta1-3ubuntu0.4

Ubuntu 9.04:
  krb5-kdc                        1.6.dfsg.4~beta1-5ubuntu2.3
  libkrb53                        1.6.dfsg.4~beta1-5ubuntu2.3

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Sol Jerome discovered that the Kerberos kadmind service did not correctly
free memory.  An unauthenticated remote attacker could send specially
crafted traffic to crash the kadmind process, leading to a denial of
service. (CVE-2010-0629)

It was discovered that Kerberos did not correctly free memory in
the GSSAPI library.  If a remote attacker were able to manipulate an
application using GSSAPI carefully, the service could crash, leading to
a denial of service.  (Ubuntu 8.10 was not affected.)  (CVE-2007-5901,
CVE-2007-5971)

It was discovered that Kerberos did not correctly free memory in the
GSSAPI and kdb libraries.  If a remote attacker were able to manipulate
an application using these libraries carefully, the service could crash,
leading to a denial of service.  (Only Ubuntu 8.04 LTS was affected.)
(CVE-2007-5902, CVE-2007-5972)


Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:  1747579 857bc90fe202aacef9aa7ec1915912b0
          Size/MD5:     1135 4cacf5667996472a34c29f5db3590a0a
          Size/MD5: 14672599 7a36c3471aa31ffd01d5a020f9d82dff

  Architecture independent packages:

          Size/MD5:  2121560 319ec346ce4f7acfcd3f535276b2e7e9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   140892 372ce44cc13bfcea71652553d16ab0f6
          Size/MD5:   162164 6b37b079fa1b8fd1d512e8d5a268c6e3
          Size/MD5:  1337522 23370d40c101659acb54bd203c263e3d
          Size/MD5:    89344 02a61de3df97772e9a46ce5f960d392d
          Size/MD5:   497374 89e647e9beec851c340774d758f6d68c
          Size/MD5:    88168 6f6c1a76b5fd3f579c26f5438fb04f69
          Size/MD5:   230020 ff26ae7c13bedcd6335b36d335357f79
          Size/MD5:    65660 6ad8023f8ec936b19046b04c95c948bc
          Size/MD5:   186140 af7b0135284c9bffd16a6a03b2c36703
          Size/MD5:    64960 abc799e9e887480fc993bdba504af466
          Size/MD5:    91866 cfb606d8378283313f5009faa2dec564
          Size/MD5:    73208 6ee86c16449e975666de4454ca001fb4

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   131262 a8beec1ae2763a39f4224e6457d79a68
          Size/MD5:   146000 ea7aad15118b9e3df627d9e41f641c25
          Size/MD5:  1289340 b3f36e7e2fb3fdba00a5af1153c4f407
          Size/MD5:    89352 372324ef9477c4a6f3f9bc31ef297a57
          Size/MD5:   460514 62959156fab7500c76d9f11ebae51d52
          Size/MD5:    81706 fbbc1993212b37307d15fbac473a1568
          Size/MD5:   201704 e920981af86ee031bcf12fdf0d58f044
          Size/MD5:    60694 c1e8663d26f5090f64350e56967f1b4b
          Size/MD5:   173246 532692f310673efbd4329d0661811370
          Size/MD5:    61726 78e20ba263aad29b73f92ce156ba12a7
          Size/MD5:    84298 fe5eceddccc659692e8c95149da13dd9
          Size/MD5:    66892 efb07a08a44037d73c7e98525dcbab56

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   131436 e9a07a3d73999fe64e97ec4f15754f00
          Size/MD5:   143896 0885dad9ce7cfb900e80f664256ce3c7
          Size/MD5:  1318388 8c5fee9fe04a1d4d5cd50e31066c592d
          Size/MD5:    89348 f12babd06a10b951388d6618288b081d
          Size/MD5:   455898 ceb7713ec70fe69de2e9e675f34162eb
          Size/MD5:    82168 603b21fbba3e4092e21e95f7fc79addb
          Size/MD5:   200914 066a5fa912c9a64a2a4f4de12326ded2
          Size/MD5:    60786 d11c67185932d0b746584e0406294a3e
          Size/MD5:   172640 2de487fc075709f917b2396a053d8bde
          Size/MD5:    61574 394a1d2ee087fb9ed2d8bbdd6b54c1c2
          Size/MD5:    84204 1c7cccecf78f77db4073669da9f82ef7
          Size/MD5:    67206 ce64e680e6c213afea88440bb1d944b6

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   158748 c5daffac1ce8e89ee9002325f63ed078
          Size/MD5:   159344 9fb7e6c72d4e07e06e704b127582204a
          Size/MD5:  1335326 2e5bf6c9daec4169d467583f70b2652f
          Size/MD5:    89362 edd451d9c7efb36480bd396347d33b47
          Size/MD5:   482430 c4f6f3ee75b56c4fb436e0a55f008097
          Size/MD5:    95278 554caab935dc3d35ed2297dff4b9cd21
          Size/MD5:   245012 0a16b0e350544021fd2a3a8879d1372f
          Size/MD5:    68806 ea6d4ae9080e63be328418af216cf7fd
          Size/MD5:   199412 9063aec6b15eab435032ac249f516a44
          Size/MD5:    64060 a367b9c7a4afee60fe4b8e7e98eac1a4
          Size/MD5:   100238 e253160984af0fd0f914b453bf604b1d
          Size/MD5:    75518 7bfda8e39e560cb747ad8b78ceee7fa8

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   134486 d031b1b700640b4e254e9ba9950c0a9c
          Size/MD5:   142010 d0fd459614fb1e4bb411b5ff1220e6a9
          Size/MD5:  1213582 cd49f178b2202d58d3eb471a3c791e49
          Size/MD5:    89356 8e603c181d789500185720f8e35da971
          Size/MD5:   428108 356af6cc775d8bafe2a028c43a33b89c
          Size/MD5:    83266 e87d03878c6db3b236edbe0616e1c839
          Size/MD5:   211652 121558486b173d309bccbe304b8ec550
          Size/MD5:    64092 69c588ea021fc09582f299ec80ce5ebf
          Size/MD5:   173032 01fd0f15a60c39f2180c0290b8b4f015
          Size/MD5:    58806 e21d86723683a97d0f9812d820b39da7
          Size/MD5:    87886 eef2eaa5c992cd9849f865c5b88de7aa
          Size/MD5:    69614 8f28b615e8a75bb0a6e04da3131c39bb

Updated packages for Ubuntu 8.10:

  Source archives:

          Size/MD5:   858566 abe6f3bf8714b16dd084cd583b5aa350
          Size/MD5:     1671 e03526558ccf9a954c92a3e257e66351
          Size/MD5: 11647547 08d6ce311204803acbe878ef0bb23c71

  Architecture independent packages:

          Size/MD5:  2148728 a0785e0f46d4268e3906483b821241bb

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   146234 7c1e6b679b00982416953a085acb5f39
          Size/MD5:   165978 0415c29a760df4dbf38e3b82e93aaf54
          Size/MD5:  1474040 289fcb9189903998fe6adb217d111257
          Size/MD5:    92554 db275139f0715242c7f339b0005f7f65
          Size/MD5:   510612 ad1d674ce1ffc4f39dfc6d75d8c80282
          Size/MD5:    92862 99ee34c7a17ce0cb980ba620cbc97e67
          Size/MD5:   237266 eb87e828f93d628e7dab9de7a657566d
          Size/MD5:    68946 43644b68a2aa3219a07dcb85f7a45371
          Size/MD5:   107696 5be51db685dc9d9536765a0771e52223
          Size/MD5:   196660 e36a1e5bc9fd0b173bbd0fca05b79d0b
          Size/MD5:    67914 098fd941dbdb7c32ce12f983dbbd6ed9
          Size/MD5:    94504 4bbe57034a98573f623870361380055d
          Size/MD5:    76670 6759a5aad2f5ba13b5b0354dc025aa0c

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   136816 71232407545e52025735e7e630496f84
          Size/MD5:   150618 e413fd35cb127f765870211bc25a47ec
          Size/MD5:  1413034 f1f3fb8a55ee8ba77c9b6aac5ad9aff4
          Size/MD5:    92570 98ed6b6053fff58ac3a600f4b51b7cd0
          Size/MD5:   472690 7cf30b9521b99808b48879295b579d07
          Size/MD5:    86424 76aefeea8bbaecc66933de53158503fe
          Size/MD5:   213602 a6d796c92390bc1b9ff794ae4204f974
          Size/MD5:    63886 8a7affbe90bd3c31e1bb360f4f93ce90
          Size/MD5:   102054 15234247c475c7ac05549b3e0ac04e8a
          Size/MD5:   183124 34b361091e4883adf77658c04f431edb
          Size/MD5:    64676 72cd11a2060ebd4524dfb4345d6ac3b0
          Size/MD5:    87766 bd091590f2ebf42a256b00c00ca08704
          Size/MD5:    70558 37b76c195ee928457ddb7f859ee19b80

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   136772 173deb07bb07502e6d16adc880d27209
          Size/MD5:   148130 beebf3d09c4c0f5b605a1719d87d3f62
          Size/MD5:  1443468 4236ad375d51fe23404e21b1979103cf
          Size/MD5:    92538 c696e177873d8255183b7cc50576eb48
          Size/MD5:   463248 680eff30a2fd36ab52900ad3b7d58192
          Size/MD5:    86530 2d5c2d44148bcc30b1fc0862c26bbc88
          Size/MD5:   206758 d08cdf41d7ee2bacd847639b5f5b8676
          Size/MD5:    63948 c42df041a5ed4079b03fad6d1fd16a5d
          Size/MD5:   101826 1bfed64995fab3d278fd7e382be0f207
          Size/MD5:   182666 c40bbef2b97460a08eb18a64767c9f8f
          Size/MD5:    64188 1421cd4073a447d334eea471a2dd548f
          Size/MD5:    86954 b9b8f522b5881cc111124d368dcc0d6f
          Size/MD5:    70346 f77d255277ff6ea8964c3992dded5118

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   157076 4501c9b76ba4cd09cce27ef2ce1a74ad
          Size/MD5:   161396 9f6134a5f7e29859b46f41fa1f6c23a8
          Size/MD5:  1472026 4f1e6fbc7c474bd9ddedce81c307e52f
          Size/MD5:    92578 3b7a1d729048d6c66629e03a8230cb8b
          Size/MD5:   492848 c791a13ad685af0293c3b8b0397adb25
          Size/MD5:    96700 4980c34839066b9866eacb06fb385d23
          Size/MD5:   245612 c4f47729971c422bdf47cbc86669999b
          Size/MD5:    70360 4904070348252bd4bdd692d85af4249a
          Size/MD5:   110768 2c18038848b99c2f90b87a0c8af7a2e5
          Size/MD5:   202494 7c9671f7bdb178be8f1bbc8445ab00a9
          Size/MD5:    66680 36a33a9765740aa2eab16419017562b0
          Size/MD5:    98830 bfafb479fdc24c38cda9ab334c7c059e
          Size/MD5:    77096 ffc6213bd7623df1b396d14a72d4e830

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   140360 97dcf304de4a27ebac536e0092b7fc1b
          Size/MD5:   144848 64545260134ceba4c1fa36bbb5dbb3e7
          Size/MD5:  1332818 cfbeb843bc41b29bc39c9f472cc6f388
          Size/MD5:    92562 18978f9e7ff1ce581359bffaa3183cae
          Size/MD5:   433500 135cfb8e8a08c6086ee81a2401f5caea
          Size/MD5:    87970 205855c848f241acd5262a11ca7bbc7a
          Size/MD5:   221618 1475ec81f68851111b85bb0bb0ab6fbf
          Size/MD5:    67506 5742f0bd5b8775f8aa948f8fda02456b
          Size/MD5:   100974 b9c4cb0e343eb63dbda925b29888186d
          Size/MD5:   182710 be662df46e52c604f0ef9aee39287bd4
          Size/MD5:    60936 d39a4e432ed22e23cc7342986b59cad2
          Size/MD5:    91922 62f5f68fe447a9e1367457ba4ac1033e
          Size/MD5:    72734 e3a771cb836f6fc6b40402befbdfdf20

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:   884759 6834e06b9b7420e013639e5f0177dde7
          Size/MD5:     1671 2df8fc05d522a39465b516106eb1c720
          Size/MD5: 11647547 08d6ce311204803acbe878ef0bb23c71

  Architecture independent packages:

          Size/MD5:  2149012 143718b601a3a99b8ebd05937ecaed25

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   146656 2d86ade2be3e079d940e8919217802e7
          Size/MD5:   166316 faec7da08e9aa386f72e349c7408bf10
          Size/MD5:  1479408 de4a5e28107e556683c959c1a0cfa819
          Size/MD5:    93046 a88830b71b66d9071ecf9e43422c1d3e
          Size/MD5:   512336 6623911d29c86d0da61a57ac3f5443fa
          Size/MD5:    93766 c1fe58d664c3021eb0f3b39a21f292f6
          Size/MD5:   237514 15434edb948a81df6827c54e7cfc493a
          Size/MD5:    69208 f38a09c9ce73b663053b0c16e562d53e
          Size/MD5:   108010 397c0979124621bde63b49d55df1951b
          Size/MD5:   198894 971764b78a61757018f675faaf8d13c2
          Size/MD5:    68258 7abb3d320bbaac22e6d91c8ddf808ced
          Size/MD5:    94832 c3b98b57230bdd7b7f6ebb83418b398f
          Size/MD5:    76946 85b0519be431be8228d1b8930ca82032

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   137258 6722093f41aea33c126c60594e91aa89
          Size/MD5:   150922 b01712adff6c2dd19bbb578691b55a82
          Size/MD5:  1417102 87153ec02650a379e068d91412027243
          Size/MD5:    93044 d29e99de8b3cd37a2f66411cb62f69e6
          Size/MD5:   473744 d7f752135e4a924139b89e5873901aa1
          Size/MD5:    87338 441b4cbdfcf76a714c81f88fc78d45f0
          Size/MD5:   213942 12b948c395cf70a2fea94cc8fc195228
          Size/MD5:    64306 bab53b895c90f98f7964e66768e8e020
          Size/MD5:   102364 0892484a20867e24c567a57fa9bdabbe
          Size/MD5:   185436 c7716a56e5e00c6b34c37d619c3e2fd3
          Size/MD5:    65034 673f5afa510e0b6c9718ca2b0b1d8634
          Size/MD5:    88118 4d16b24b0c8de073394fcd16efbd471b
          Size/MD5:    70886 7c57638b2967e79f0b35ed27baca2c5c

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   137092 88eac351aa4c04cabeb5004ba0488a89
          Size/MD5:   148518 5c4bcb387e8ceae4642e955c9073b936
          Size/MD5:  1448176 04dc34d8d656fdd5cabfd522a2862fcb
          Size/MD5:    93040 696bfd471bba2b1f3cb7d5c0538068d0
          Size/MD5:   464142 11481d506c939a4595c5d235768692e5
          Size/MD5:    87422 41b6c7fb1aed7ddfd0732af69c393ee5
          Size/MD5:   207106 86e5df0b876d7a0fc53ff75dffcced9e
          Size/MD5:    64392 783c9e473eb37ca0368c9a52aa92d343
          Size/MD5:   102218 548d6f447c103522fa6616dbea42e75a
          Size/MD5:   184990 325f5322d631683068bc6ddc6af35940
          Size/MD5:    64550 b6b3f9ad2c07f8f7597c484fc14315be
          Size/MD5:    87292 bcdb18ceb438927ab77150be9c4176f9
          Size/MD5:    70680 eb8483a9164d278a76774413d9660ddb

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   157362 3603a529157befb84af0edad2c3bb7dc
          Size/MD5:   161722 7ba5b2cd8023ffb44230d435aad75f4c
          Size/MD5:  1476674 1db714f8b53e25bdc2301cdfa99551bf
          Size/MD5:    93054 82c6e84e63e5c5a561dfc55a5bbee018
          Size/MD5:   494652 9251f6d55d90fbf9bb28ee930cef7aed
          Size/MD5:    97626 05a2eef51dafed34f8689bde6d025d51
          Size/MD5:   245924 2e85a1edc5ea735861525a91a37bcca6
          Size/MD5:    70818 aa62de270b7d513cd8bd5831c63e4d20
          Size/MD5:   111146 d4464357b86e371914cc23251c2c1780
          Size/MD5:   204756 dd5364842f6604199e2d7698334771ff
          Size/MD5:    67072 5144031c10eebd19c85b9bed8186b5a7
          Size/MD5:    99180 54eca3303b1097ee902e2ef84f0220e7
          Size/MD5:    77438 a18355513e1155b4dc997881878ce816

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   140558 5c0e1c57333b16f654ed94502e54d354
          Size/MD5:   145012 bc16c76d7e202efb7f392185f9a34ecf
          Size/MD5:  1337686 00ce5bdd2e53fd6059205375458ba917
          Size/MD5:    93054 29490c704727e89faf1079f1b517606e
          Size/MD5:   434466 9047f19cc6730c592a0f9ac99abd31e4
          Size/MD5:    88702 55bf696f05f0d9b72b630d35422ed905
          Size/MD5:   221790 bf2fb8e80cf389bee1a7b9edbcacb3d0
          Size/MD5:    67822 4c2219ff77a59d8bcc8c78fb07e5b0e7
          Size/MD5:   101378 d7720e20362e7870e6d205a924b7e486
          Size/MD5:   184808 7d8827058a213b3216c16cfe15d26bf1
          Size/MD5:    61274 1b5b021b7e019641010877555e99058d
          Size/MD5:    92206 8baa9bba468967c26e6a2c87ffa8dfbb
          Size/MD5:    73024 607a1edca12d6130393158fc82b86b28