Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisorycriticalFedoraFedora 9 pam_krb5 Update 2.3.5 Critical: Authentication Changes
This updates the pam_krb5 package from version 2.3.2 to 2.3.5, fixing CVE-2009-1384: in certain configurations, the password prompt could vary depending on whether or not the user account was known to the system or the KDC. It also fixes a bug which prevented password change attempts from working if the KDC denied requests for password-changing credentials with settings which would be used for login credentials, and makes the "-n" option for the "afs5log" command work as advertised.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-6279 2009-06-15 22:05:02 -------------------------------------------------------------------------------- Name : pam_krb5 Product : Fedora 9 Version : 2.3.5 Release : 1.fc9 URL : https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement Summary : A Pluggable Authentication Module for Kerberos 5. Description : This is pam_krb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV tickets. The included pam_krb5afs module also gets AFS tokens if so configured. -------------------------------------------------------------------------------- Update Information: This updates the pam_krb5 package from version 2.3.2 to 2.3.5, fixing CVE-2009-1384: in certain configurations, the password prompt could vary depending on whether or not the user account was known to the system or the KDC. It also fixes a bug which prevented password change attempts from working if the KDC denied requests for password-changing credentials with settings which would be used for login credentials, and makes the "-n" option for the "afs5log" command work as advertised. -------------------------------------------------------------------------------- ChangeLog: * Tue May 26 2009 Nalin Dahyabhai - 2.3.5-1 - catch the case where we pass a NULL initialpassword into libkrb5 and it uses our callback to ask us for the password for the user using a principal name, and reject that (#502602) - always prompt for a password unless we were told not to (#502602, CVE-2009-1384) * Wed Mar 4 2009 Nalin Dahyabhai - 2.3.4-1 - don't request password-changing credentials with the same options that we use when requesting ticket granting tickets, which might run afoul of KDC policies * Thu Feb 26 2009 Fedora Release Engineering - 2.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Feb 6 2009 Nalin Dahyabhai - 2.3.3-1 - clean up a couple of debug messages * Fri Feb 6 2009 Nalin Dahyabhai - clean up a couple of unclosed pipes to nowhere * Wed Oct 1 2008 Nalin Dahyabhai - 2.3.2-1 - fix ccache permissions bypass when the "existing_ticket" option is used (CVE-2008-3825) * Wed Aug 27 2008 Tom "spot" Callaway - 2.3.0-2 - fix license tag * Wed Apr 9 2008 Nalin Dahyabhai - 2.3.1-1 - don't bother trying to set up a temporary v4 ticket file during session open unless we obtained v4 creds somewhere -------------------------------------------------------------------------------- References: [ 1 ] Bug #502602 - CVE-2009-1384 pam_krb5: Password prompt varies for existent and non-existent users https://bugzilla.redhat.com/show_bug.cgi?id=502602 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update pam_krb5' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailinglist
Jun 26, 2009
•Critical
Fedora
89
security advisoryFedorasecurity fixFedora 11 pam_krb5 Security Advisory: CVE-2009-1384 Medium Threat
This updates the pam_krb5 package from version 2.3.4 to 2.3.5, fixing CVE-2009-1384: in certain configurations, the password prompt could vary depending on whether or not the user account was known to the system or the KDC.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-5983 2009-06-15 21:58:09 -------------------------------------------------------------------------------- Name : pam_krb5 Product : Fedora 11 Version : 2.3.5 Release : 1.fc11 URL : https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement Summary : A Pluggable Authentication Module for Kerberos 5. Description : This is pam_krb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV tickets. The included pam_krb5afs module also gets AFS tokens if so configured. -------------------------------------------------------------------------------- Update Information: This updates the pam_krb5 package from version 2.3.4 to 2.3.5, fixing CVE-2009-1384: in certain configurations, the password prompt could vary depending on whether or not the user account was known to the system or the KDC. -------------------------------------------------------------------------------- ChangeLog: * Tue May 26 2009 Nalin Dahyabhai - 2.3.5-1 - catch the case where we pass a NULL initial password into libkrb5 and it uses our callback to ask us for the password for the user using a principal name, and reject that (#502602) - always prompt for a password unless we were told not to (#502602, CVE-2009-1384) -------------------------------------------------------------------------------- References: [ 1 ] Bug #502602 - CVE-2009-1384 pam_krb5: Password prompt varies for existent and non-existent users https://bugzilla.redhat.com/show_bug.cgi?id=502602 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update pam_krb5' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Jun 26, 2009
•Medium
Fedora
89
security advisorycriticalFedoraFedora 10: Critical Update for pam_krb5 Password Prompt Security Flaw
This updates the pam_krb5 package from version 2.3.2 to 2.3.5, fixing CVE-2009-1384: in certain configurations, the password prompt could vary depending on whether or not the user account was known to the system or the KDC. It also fixes a bug which prevented password change attempts from working if the KDC denied requests for password-changing credentials with settings which would be used for login credentials.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-6255 2009-06-15 22:04:41 -------------------------------------------------------------------------------- Name : pam_krb5 Product : Fedora 10 Version : 2.3.5 Release : 1.fc10 URL : https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement Summary : A Pluggable Authentication Module for Kerberos 5. Description : This is pam_krb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV tickets. The included pam_krb5afs module also gets AFS tokens if so configured. -------------------------------------------------------------------------------- Update Information: This updates the pam_krb5 package from version 2.3.2 to 2.3.5, fixing CVE-2009-1384: in certain configurations, the password prompt could vary depending on whether or not the user account was known to the system or the KDC. It also fixes a bug which prevented password change attempts from working if the KDC denied requests for password-changing credentials with settings which would be used for login credentials. -------------------------------------------------------------------------------- ChangeLog: * Tue May 26 2009 Nalin Dahyabhai - 2.3.5-1 - catch the case where we pass a NULL initial password into libkrb5 and it uses our callback to ask us for the password for the user using a principal name, and reject that (#502602) - alwaysprompt for a password unless we were told not to (#502602, CVE-2009-1384) * Wed Mar 4 2009 Nalin Dahyabhai - 2.3.4-1 - don't request password-changing credentials with the same options that we use when requesting ticket granting tickets, which might run afoul of KDC policies * Thu Feb 26 2009 Fedora Release Engineering - 2.3.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Feb 6 2009 Nalin Dahyabhai - 2.3.3-1 - clean up a couple of debug messages * Fri Feb 6 2009 Nalin Dahyabhai - clean up a couple of unclosed pipes to nowhere -------------------------------------------------------------------------------- References: [ 1 ] Bug #502602 - CVE-2009-1384 pam_krb5: Password prompt varies for existent and non-existent users https://bugzilla.redhat.com/show_bug.cgi?id=502602 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update pam_krb5' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Jun 26, 2009
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!