- --------------------------------------------------------------------------Debian Security Advisory DSA 1367-2                    security@debian.org
http://www.debian.org/security/                         Moritz Muehlenhoff
September 6th, 2007                     http://www.debian.org/security/faq
- --------------------------------------------------------------------------Package        : krb5
Vulnerability  : buffer overflow
Problem-Type   : remote
Debian-specific: no
CVE ID         : CVE-2007-3999

It was discovered that a buffer overflow of the RPC library of the MIT
Kerberos reference implementation allows the execution of arbitrary code.
The original patch from DSA-1367-1 didn't address the problem fully.
This update delivers an updated fix.

The oldstable distribution (sarge) is not affected by this problem.

For the stable distribution (etch) this problem has been fixed in
version 1.4.4-7etch4.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your Kerberos packages.


Upgrade Instructions
- --------------------wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch
- -------------------------------  Source archives:

          Size/MD5 checksum:      876 77cfeed4304b589e90db0651c8350d92
          Size/MD5 checksum:  1589790 dab0c692e09564434a645b13646e5fdd
          Size/MD5 checksum: 11017910 a675e5953bb8a29b5c6eb6f4ab0bb32a

  Architecture independent components:

          Size/MD5 checksum:  1811994 3ff6393e824c3416fd36a8e4ad245d42

  Alpha architecture:

          Size/MD5 checksum:    89472 d43903519a6ec1d6ff2dbd6bbececf36
          Size/MD5 checksum:   245448 b6d7648b9c4827e6c4035695877e200c
          Size/MD5 checksum:    65734 829a6d48898b98cc76e85dab102750e1
          Size/MD5 checksum:   154880 fe3448535d05825b20833b94580074d1
          Size/MD5 checksum:    91454 3b744955a52022455e1bb813705a860f
          Size/MD5 checksum:    75942 46c14d351ed56c88960d2bd3a20779b4
          Size/MD5 checksum:   135934 3ab40ecc6dd191f45ae03a8582945932
          Size/MD5 checksum:   216080 66abe9f8c7503b6681fa29cf59974d0f
          Size/MD5 checksum:  1087408 240be01391324069e9af19c8117af443
          Size/MD5 checksum:  1016762 291da65300001e7fc24205be3bd493d1
          Size/MD5 checksum:   460840 e648f5f29d66b15eddceb176570440ab

  AMD64 architecture:

          Size/MD5 checksum:    83740 05058bd16775b4fe89e47afb14058ea7
          Size/MD5 checksum:   221734 edc3f9d1a135e39aafbc16e918ee8a7b
          Size/MD5 checksum:    61952 956dd0cfb2dd16f2524375cc3f357044
          Size/MD5 checksum:   142098 29af8744c756aefa5c77f19c3c5a332e
          Size/MD5 checksum:    86538 a60480f71dd39c72eb51cb404802dea3
          Size/MD5 checksum:    68058 d2de9ab6bd56fb8add00edac92d8da56
          Size/MD5 checksum:   131122 6b9502cec3a397c29be7ff206197d6d4
          Size/MD5 checksum:   190364 2ea3ccdaa871aa0fb53edb93636f26b1
          Size/MD5 checksum:  1070666 d1923d1bf7360747887944c2729368eb
          Size/MD5 checksum:   767018 63738fc882e783ed30a023b6b38545b6
          Size/MD5 checksum:   426954 5701d1434fb198f26220f84f928ed945

  ARM architecture:

          Size/MD5 checksum:    78634 416ea01d845105f503ddf99c7758676f
          Size/MD5 checksum:   206074 0f5bd2d2c55fea123a21a16a7efc02e7
          Size/MD5 checksum:    59630 81ab701d038f60e2abcd2aebbf53fc31
          Size/MD5 checksum:   135836 78a0a1fc05dbf1918b6c865449a35d74
          Size/MD5 checksum:    81226 f6a57ec4c5d865a604f58bfc93d96e6a
          Size/MD5 checksum:    63232 b392da99a08aea4254d40695e4a53125
          Size/MD5 checksum:   123352 82aa11476a1bf7feb01dbc356c5f4420
          Size/MD5 checksum:   172918 f30e6b728ec9d0546ba465c19344b068
          Size/MD5 checksum:  1013404 1b12de71659a6cd2689fcf3a85cd869e
          Size/MD5 checksum:   682412 5b0c452f8114da126a480943330c5ead
          Size/MD5 checksum:   389864 029eb817220bebdc856a8810b57cdabb

  HP Precision architecture:

          Size/MD5 checksum:    85108 7c46b2323311c7b4a2de491e773a1e2a
          Size/MD5 checksum:   231894 eda1dac6e62fea03078e68a5397dbde5
          Size/MD5 checksum:    64016 368ee737857838a4bd7df4985e4ae5c5
          Size/MD5 checksum:   144862 46266e20a606556d02e69fd6cb93e078
          Size/MD5 checksum:    87364 22bf8eccb84d3a03c21a59eef3f7e89b
          Size/MD5 checksum:    69500 e757474d2b1a6d6b938918b0b1dee849
          Size/MD5 checksum:   132570 90161d70941d761f16923cbb62e7a9e4
          Size/MD5 checksum:   201042 4aa10dc30dbbde41ef4ef7e87cc3edd5
          Size/MD5 checksum:  1050428 8c78a8070e4ab6f2fe658d33a2bee329
          Size/MD5 checksum:   815018 7ecfb1b5fed89b86eb887f8ef18b421f
          Size/MD5 checksum:   441492 e4f1e64d39620ae7833cfe4b66888256

  Intel IA-32 architecture:

          Size/MD5 checksum:    78428 bd239c7c1e581d536ab837555ffcc571
          Size/MD5 checksum:   196348 1ce07d159debed55529619751319852d
          Size/MD5 checksum:    57880 9611a24da9801795af3940726b5dbd52
          Size/MD5 checksum:   133104 cffd0607acb39ba19114033f56df64ef
          Size/MD5 checksum:    80138 4b5b3aecc77bdbe694ffb9662b645e01
          Size/MD5 checksum:    62258 171bf997e6f76cc2af8ed1074c39b3a3
          Size/MD5 checksum:   124050 6f2032256a5d8ab0027fc5b215b04b7e
          Size/MD5 checksum:   173912 650dcfae2ec55e8ce1e27d787b541f39
          Size/MD5 checksum:  1037652 6793e0d117eb4280b7151e5300591fb3
          Size/MD5 checksum:   679996 bbc574665eb918ae649c648cfe26e1b1
          Size/MD5 checksum:   408204 2f3c3ea0f2765acb9885e0a33647ba0d

  Intel IA-64 architecture:

          Size/MD5 checksum:   105390 d3e7d363f5f2d5797c6a6e6c4c7b5b24
          Size/MD5 checksum:   305704 b88a1549ed9e17426e54560e37f54fd6
          Size/MD5 checksum:    80132 1513646f1982780f506438f4e59fcce6
          Size/MD5 checksum:   190398 187339122b125b53f825247512c33af9
          Size/MD5 checksum:   113024 176ced8c8d0feb08cd196cc5048fa0d6
          Size/MD5 checksum:    91130 1a4c299f0aa8d4869d1db2f5fb45b199
          Size/MD5 checksum:   164426 73b649f11cad11e4616dde7e2cf6e7b4
          Size/MD5 checksum:   269330 bac1521397f2e5135b4a530d58c0ada5
          Size/MD5 checksum:  1043480 1eb9773aa0dda3f2dc28e2580b9b188e
          Size/MD5 checksum:  1088228 8f4e27b8a611395ec50486a7defa9ea4
          Size/MD5 checksum:   592030 64d88b36c4dbe1b2988397d7d4f957d0

  Little endian MIPS architecture:

          Size/MD5 checksum:    82456 ac210eb5d8751714a29ffabed046addd
          Size/MD5 checksum:   232588 c0d59b0f2e4f33c61d3eeefbae13c0ed
          Size/MD5 checksum:    63630 a58db5a76768de5f756f72cdbf1836f1
          Size/MD5 checksum:   145690 d43fd52f894d1038912174b11728a228
          Size/MD5 checksum:    87268 2bdd27fd0e7a063d890292ac3ffd34d4
          Size/MD5 checksum:    71406 c057d0abfb0314545c450f8b14c66bfc
          Size/MD5 checksum:   130940 07fb2c972dc9bb7d8391f1b4e74ed6ed
          Size/MD5 checksum:   179248 b6e2df454b9c06fd852941729f37540a
          Size/MD5 checksum:  1087180 beacba076f641de0884a8b9d028d26ea
          Size/MD5 checksum:   810128 4f337508fd9603ed5dc8145d89808788
          Size/MD5 checksum:   391640 173c49364a618e0e05caaf92e1190fdf

  PowerPC architecture:

          Size/MD5 checksum:    84186 b89e7b3dc17ceee46db2680ccaff3497
          Size/MD5 checksum:   222588 7f4e321936c8791f377b1c4be01dd8e9
          Size/MD5 checksum:    61746 80c86dfd14c9676770254001927c226b
          Size/MD5 checksum:   143734 a8062bb672284dc7a52abb052e23510f
          Size/MD5 checksum:    86682 3b00ae318fbf6266545bbced5f21143d
          Size/MD5 checksum:    67206 8cda9e39e2239cbb42595662cb3b0fe1
          Size/MD5 checksum:   137116 a1f0a69e71059daa30c3b96f320356ee
          Size/MD5 checksum:   179360 5533e34cf7191c040313ca9c128ec67f
          Size/MD5 checksum:  1082964 3bab4542704af8be4b25279ae8d7114c
          Size/MD5 checksum:   753246 0b3b3bac6d80d2e8d3cdd08a688e7576
          Size/MD5 checksum:   399188 7aed72cc64abf2dc81fe757fe7b826f9

  IBM S/390 architecture:

          Size/MD5 checksum:    81920 9087f8f415f04b4afaf3c241a6115927
          Size/MD5 checksum:   224244 b7c4073795b0e7da887ba23f8d228d77
          Size/MD5 checksum:    63194 e40904f3e31d15c2cc17644a84aaf4d5
          Size/MD5 checksum:   140200 938c654fee7f9e2be442fa7de35ee8ea
          Size/MD5 checksum:    87682 e63a3debfcf3f8fd551cd11229cae9a6
          Size/MD5 checksum:    68596 2df459e41b1760036bda76e6626568f4
          Size/MD5 checksum:   129096 0f44e8f301b21d2f9555184a0c49fa32
          Size/MD5 checksum:   195272 f2c452d3cfc7e4fb00db2bb03e95360e
          Size/MD5 checksum:  1073310 3e0c9e2e75f582616c1f1b56d2d437e9
          Size/MD5 checksum:   733190 f9d3c0fb763df094c71e71cedc8ec9a8
          Size/MD5 checksum:   438800 c37cede38b1b03441ce8ef718f758902

  Sun Sparc architecture:

          Size/MD5 checksum:    76946 b9aa5782f59af4204fe03c352ed22206
          Size/MD5 checksum:   200100 59d4fbe32ca621ad68182e08af917b99
          Size/MD5 checksum:    58048 20ae6c32dd3c2e7df8299e456c6d6c0c
          Size/MD5 checksum:   131512 cf6db30decf1954be86f7a3d20f43e3d
          Size/MD5 checksum:    78042 9120d943bc4c64d45af1e16c8a16ae41
          Size/MD5 checksum:    63608 47d94f9abb71bbddeebaec2b1fc7422d
          Size/MD5 checksum:   122880 05b90a8383c57db1fb116ac879d3fe85
          Size/MD5 checksum:   166456 088585f74d4eba4bf720b3e4b4090eee
          Size/MD5 checksum:   961738 c3477afbbfebfd2e8f9ce17e13e27d1c
          Size/MD5 checksum:   680196 d2c91a8c44f48d7ef7124557f2412132
          Size/MD5 checksum:   372476 81cb5f92cf2d69b6fa610a39d40c77a2


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp:  dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org