Oval Definition:oval:com.redhat.rhsa:def:20201349
Revision Date:2020-04-07Version:635
Title:RHSA-2020:1349: krb5-appl security update (Important)
Description:The krb5-appl packages contain Kerberos-aware versions of telnet, ftp, rsh, and rlogin clients and servers. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and trusted third-party, the Key Distribution Center (KDC).

Security Fix(es):

  • telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code (CVE-2020-10188)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2020-10188
    RHSA-2020:1349
    Platform(s):Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND krb5-appl-servers is earlier than 0:1.0.1-10.el6_10
  • AND krb5-appl-servers is signed with Red Hat redhatrelease2 key
  • BACK