Kerberos is a network authentication system. The krb5-workstation
package contains the basic Kerberos programs (kinit, klist, kdestroy,
kpasswd). If your network uses Kerberos, this package should be
installed on every workstation.
Provides
Requires
License
Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision
Changelog
* Wed Apr 29 2026 Julien Rische <jrische@redhat.com> - 1.21.3-10
- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
Resolves: RHEL-171588 RHEL-171597
* Fri Jan 30 2026 Julien Rische <jrische@redhat.com> - 1.21.3-9
- krad: packet ID fetched from uninitialized variable
Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
Resolves: RHEL-145397
* Mon Apr 28 2025 Julien Rische <jrische@redhat.com> - 1.21.3-8
- Do not block HMAC-MD4/5 in FIPS mode
Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
Resolves: RHEL-74295
* Wed Jan 29 2025 Julien Rische <jrische@redhat.com> - 1.21.3-7
- Prevent overflow when calculating ulog block size (CVE-2025-24528)
Resolves: RHEL-76758
* Fri Jan 17 2025 Julien Rische <jrische@redhat.com> - 1.21.3-6
- Support PKCS11 EC client certs in PKINIT
Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
Resolves: RHEL-71881
* Mon Nov 04 2024 Julien Rische <jrische@redhat.com> - 1.21.3-5
- Make test dependencies optional if not part of CentOS/RHEL 10
Resolves: RHEL-65724
* Wed Oct 30 2024 Julien Rische <jrische@redhat.com> - 1.21.3-4
- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
Resolves: RHEL-55427
- Fix various issues detected by static analysis
Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
Resolves: RHEL-56070
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1.21.3-3
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
* Fri Jul 12 2024 Julien Rische <jrische@redhat.com> - 1.21.3-2
- Do not include files with "~" termination in krb5-tests
Resolves: RHEL-45995
* Fri Jul 12 2024 Julien Rische <jrische@redhat.com> - 1.21.3-1
- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
Fix vulnerabilities in GSS message token handling
Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
Resolves: RHEL-47285
- Make TCP waiting time configurable
Resolves: RHEL-47278
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1.21.2-7
- Bump release for June 2024 mass rebuild
* Wed Jun 19 2024 Julien Rische <jrische@redhat.com> - 1.21.2-6
- Add missing SPDX license identifiers
Resolves: RHEL-44383
Files
/etc/pam.d/ksu
/usr/bin/k5srvutil
/usr/bin/kadmin
/usr/bin/kdestroy
/usr/bin/kinit
/usr/bin/klist
/usr/bin/kpasswd
/usr/bin/ksu
/usr/bin/kswitch
/usr/bin/ktutil
/usr/bin/kvno
/usr/lib/.build-id
/usr/lib/.build-id/03
/usr/lib/.build-id/03/6131bc35bca12bb6366ca10c46c98c4e788715
/usr/lib/.build-id/36
/usr/lib/.build-id/36/25a6ed85318738262addad4878b523b7ae199d
/usr/lib/.build-id/4c
/usr/lib/.build-id/4c/f49c8057fb5252eb1d1d3e73ccbd36d6c01c3b
/usr/lib/.build-id/63
/usr/lib/.build-id/63/3a945751acc770f480e3c7bdd7a139a291c383
/usr/lib/.build-id/bc
/usr/lib/.build-id/bc/c51aa175a90ff40569936353c0d55b2804fa2f
/usr/lib/.build-id/ce
/usr/lib/.build-id/ce/c43d2f2157fa18925f12924e661984f1102c5b
/usr/lib/.build-id/cf
/usr/lib/.build-id/cf/4a6012d9414dd3a77bc6e1388ba9307addeea4
/usr/lib/.build-id/ef
/usr/lib/.build-id/ef/72fa0979f40c71fe9c0c8b4cfa72b08a639f50
/usr/lib/.build-id/fe
/usr/lib/.build-id/fe/2dacc522a1760520c185aa785c66e436a13420
/usr/share/doc/krb5-workstation
/usr/share/doc/krb5-workstation/_static
/usr/share/doc/krb5-workstation/_static/agogo.css
/usr/share/doc/krb5-workstation/_static/basic.css
/usr/share/doc/krb5-workstation/_static/bgfooter.png
/usr/share/doc/krb5-workstation/_static/bgtop.png
/usr/share/doc/krb5-workstation/_static/doctools.js
/usr/share/doc/krb5-workstation/_static/documentation_options.js
/usr/share/doc/krb5-workstation/_static/file.png
/usr/share/doc/krb5-workstation/_static/kerb.css
/usr/share/doc/krb5-workstation/_static/language_data.js
/usr/share/doc/krb5-workstation/_static/minus.png
/usr/share/doc/krb5-workstation/_static/plus.png
/usr/share/doc/krb5-workstation/_static/pygments.css
/usr/share/doc/krb5-workstation/_static/searchtools.js
/usr/share/doc/krb5-workstation/_static/sphinx_highlight.js
/usr/share/doc/krb5-workstation/about.html
/usr/share/doc/krb5-workstation/admin
/usr/share/doc/krb5-workstation/admin/admin_commands
/usr/share/doc/krb5-workstation/admin/admin_commands/index.html
/usr/share/doc/krb5-workstation/admin/admin_commands/k5srvutil.html
/usr/share/doc/krb5-workstation/admin/admin_commands/kadmin_local.html
/usr/share/doc/krb5-workstation/admin/admin_commands/kadmind.html
/usr/share/doc/krb5-workstation/admin/admin_commands/kdb5_ldap_util.html
/usr/share/doc/krb5-workstation/admin/admin_commands/kdb5_util.html
/usr/share/doc/krb5-workstation/admin/admin_commands/kprop.html
/usr/share/doc/krb5-workstation/admin/admin_commands/kpropd.html
/usr/share/doc/krb5-workstation/admin/admin_commands/kproplog.html
/usr/share/doc/krb5-workstation/admin/admin_commands/krb5kdc.html
/usr/share/doc/krb5-workstation/admin/admin_commands/ktutil.html
/usr/share/doc/krb5-workstation/admin/admin_commands/sserver.html
/usr/share/doc/krb5-workstation/admin/advanced
/usr/share/doc/krb5-workstation/admin/advanced/index.html
/usr/share/doc/krb5-workstation/admin/advanced/retiring-des.html
/usr/share/doc/krb5-workstation/admin/appl_servers.html
/usr/share/doc/krb5-workstation/admin/auth_indicator.html
/usr/share/doc/krb5-workstation/admin/backup_host.html
/usr/share/doc/krb5-workstation/admin/conf_files
/usr/share/doc/krb5-workstation/admin/conf_files/index.html
/usr/share/doc/krb5-workstation/admin/conf_files/kadm5_acl.html
/usr/share/doc/krb5-workstation/admin/conf_files/kdc_conf.html
/usr/share/doc/krb5-workstation/admin/conf_files/krb5_conf.html
/usr/share/doc/krb5-workstation/admin/conf_ldap.html
/usr/share/doc/krb5-workstation/admin/database.html
/usr/share/doc/krb5-workstation/admin/dbtypes.html
/usr/share/doc/krb5-workstation/admin/dictionary.html
/usr/share/doc/krb5-workstation/admin/enctypes.html
/usr/share/doc/krb5-workstation/admin/env_variables.html
/usr/share/doc/krb5-workstation/admin/host_config.html
/usr/share/doc/krb5-workstation/admin/https.html
/usr/share/doc/krb5-workstation/admin/index.html
/usr/share/doc/krb5-workstation/admin/install.html
/usr/share/doc/krb5-workstation/admin/install_appl_srv.html
/usr/share/doc/krb5-workstation/admin/install_clients.html
/usr/share/doc/krb5-workstation/admin/install_kdc.html
/usr/share/doc/krb5-workstation/admin/lockout.html
/usr/share/doc/krb5-workstation/admin/otp.html
/usr/share/doc/krb5-workstation/admin/pkinit.html
/usr/share/doc/krb5-workstation/admin/princ_dns.html
/usr/share/doc/krb5-workstation/admin/realm_config.html
/usr/share/doc/krb5-workstation/admin/spake.html
/usr/share/doc/krb5-workstation/admin/troubleshoot.html
/usr/share/doc/krb5-workstation/admin/various_envs.html
/usr/share/doc/krb5-workstation/appdev
/usr/share/doc/krb5-workstation/appdev/gssapi.html
/usr/share/doc/krb5-workstation/appdev/h5l_mit_apidiff.html
/usr/share/doc/krb5-workstation/appdev/index.html
/usr/share/doc/krb5-workstation/appdev/init_creds.html
/usr/share/doc/krb5-workstation/appdev/princ_handle.html
/usr/share/doc/krb5-workstation/appdev/refs
/usr/share/doc/krb5-workstation/appdev/refs/api
/usr/share/doc/krb5-workstation/appdev/refs/api/index.html
/usr/share/doc/krb5-workstation/appdev/refs/index.html
/usr/share/doc/krb5-workstation/appdev/refs/macros
/usr/share/doc/krb5-workstation/appdev/refs/macros/index.html
/usr/share/doc/krb5-workstation/appdev/refs/types
/usr/share/doc/krb5-workstation/appdev/refs/types/index.html
/usr/share/doc/krb5-workstation/appdev/refs/types/krb5_int32.html
/usr/share/doc/krb5-workstation/appdev/refs/types/krb5_ui_4.html
/usr/share/doc/krb5-workstation/appdev/y2038.html
/usr/share/doc/krb5-workstation/basic
/usr/share/doc/krb5-workstation/basic/ccache_def.html
/usr/share/doc/krb5-workstation/basic/date_format.html
/usr/share/doc/krb5-workstation/basic/index.html
/usr/share/doc/krb5-workstation/basic/keytab_def.html
/usr/share/doc/krb5-workstation/basic/rcache_def.html
/usr/share/doc/krb5-workstation/basic/stash_file_def.html
/usr/share/doc/krb5-workstation/build
/usr/share/doc/krb5-workstation/build/directory_org.html
/usr/share/doc/krb5-workstation/build/doing_build.html
/usr/share/doc/krb5-workstation/build/index.html
/usr/share/doc/krb5-workstation/build/options2configure.html
/usr/share/doc/krb5-workstation/build/osconf.html
/usr/share/doc/krb5-workstation/build_this.html
/usr/share/doc/krb5-workstation/convert-config-files
/usr/share/doc/krb5-workstation/