-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2005-78
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 13 Jul 2005
 Last revised: 13 Jul 2005

 Package: krb5

 Summary: Multiple vulnerabilities exist in krb5

 More information:
    Kerberos V5 is a trusted-third-party network authentication system,
    which can improve your network's security by eliminating the use of
    insecure cleartext passwords.

    The multiple vulnerabilities exist in krb5.

 Impact:
    These vulerabilities allow remote attackers to cause a denial of service or execute arbitrary code.

 Affected Products:
    - Turbolinux Appliance Server 1.0 Hosting Edition
    - Turbolinux Appliance Server 1.0 Workgroup Edition
    - Turbolinux 10 Server
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux 8 Server

 Solution:
    Please use the turbopkg (zabom) tool to apply the update. 
 ---------------------------------------------
 [Turbolinux 10 Server, Turbolinux 10 Desktop, Turbolinux 10 F..., 
  Turbolinux Home]
 # turbopkg
 or
 # zabom -u krb5-devel krb5-libs krb5-server krb5-workstation

 [other]
 # turbopkg
 or
 # zabom update krb5-devel krb5-libs krb5-server krb5-workstation
 ---------------------------------------------


 <Turbolinux Appliance Server 1.0 Hosting Edition>

   Source Packages
   Size: MD5

   krb5-1.2.5-19.src.rpm
      5520723 d5e9f490c24baa44bdee6e52988ba92c

   Binary Packages
   Size: MD5

   krb5-devel-1.2.5-19.i586.rpm
       538919 b3dea73fee1a336a8b765068d401ba64
   krb5-libs-1.2.5-19.i586.rpm
       638513 e8924e922049eaa3ef84fbcdd479e564

 <Turbolinux Appliance Server 1.0 Workgroup Edition>

   Source Packages
   Size: MD5

   krb5-1.2.5-19.src.rpm
      5520723 c45b65d4cb07650f887c06a9b7ca8d38

   Binary Packages
   Size: MD5

   krb5-devel-1.2.5-19.i586.rpm
       539067 c502500620d04caa7b314b40e758a6e0
   krb5-libs-1.2.5-19.i586.rpm
       638850 24dd5677d4e29da5118c8e3bea735ac2

 <Turbolinux 10 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/krb5-1.3.4-13.src.rpm
      6400372 b8d489668dfbf28778915b7a7b953717

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/krb5-debug-1.3.4-13.i586.rpm
      4015463 f67b6f8b70a1189ed5e4c15f77e901de
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/krb5-devel-1.3.4-13.i586.rpm
       655048 8e859cb9a5634ba10d55881127225798
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/krb5-libs-1.3.4-13.i586.rpm
       431732 569797dc075010f79fe033553182e3cf
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/krb5-server-1.3.4-13.i586.rpm
       779198 f8bf63932bdb33a53612e524a8da6fd6
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/krb5-workstation-1.3.4-13.i586.rpm
       838742 85e9f4a7f9148e79329fe501bae1ff2c

 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/krb5-1.2.5-19.src.rpm
      5520723 945b4cb9f5bed1fa320bff645a588eb3

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/krb5-devel-1.2.5-19.i586.rpm
       578865 082e8f69c5b962147169f60fe0d2d52c
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/krb5-libs-1.2.5-19.i586.rpm
       342964 4ef7b690925a7a0c7f63e81f49a2a556
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/krb5-server-1.2.5-19.i586.rpm
       602837 a867b4c7b993e7c9ea0bd2fa0eebc577
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/krb5-workstation-1.2.5-19.i586.rpm
       591858 05167329691be7f90d59e2bf17e764ad

 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/krb5-1.2.5-19.src.rpm
      5520723 8358fdefedd91aa1c7f0b0aaa1d6e6ec

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/krb5-devel-1.2.5-19.i586.rpm
       576795 3de73cf4ccd6e5409448bfd8730a8411
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/krb5-libs-1.2.5-19.i586.rpm
       639444 bb0125b4413c92657c4dbd32e30cb7cb
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/krb5-server-1.2.5-19.i586.rpm
       603824 a7e213be1a7cbc6159af936aff758db3
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/krb5-workstation-1.2.5-19.i586.rpm
       602832 ca3ca26cb1501a3bdf13f314742f9558


 References:

 Kerberos Security Advisories
   [MIT krb5 Security Advisory 2005-002]
   http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt
   [MIT krb5 Security Advisory 2005-003]
   http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt

 CVE
   [CAN-2005-1174]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1174
   [CAN-2005-1175]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1175
   [CAN-2005-1689]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1689

 --------------------------------------------------------------------------
 Revision History
    13 Jul 2005 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2005 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFC1JbDK0LzjOqIJMwRAi5tAJ9S2InI6LUOeh58qTARmxvwZG5O3ACgnyn/
IDvzAeGPVAI2wx8FKVVLcWY=
=GrGE
-----END PGP SIGNATURE-----