gpp_maybe Security update for krb5

SUSE-SLE-DESKTOP-12-2015-792

krb5 was updated to fix three security issues. These security issues were fixed: - CVE-2015-2695: Applications which call gss_inquire_context() on a partially-established SPNEGO context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952188). - CVE-2015-2696: Applications which call gss_inquire_context() on a partially-established IAKERB context could have caused the GSS-API library to read from a pointer using the wrong type, generally causing a process crash. (bsc#952189). - CVE-2015-2697: Incorrect string handling in build_principal_va can lead to DOS (bsc#952190).

• Release Date
  Oct 30 2015
• References
  Bugzilla: 952190, 948011, 952189, 952188
  CVEs: CVE-2015-2695, CVE-2015-2696, CVE-2015-2697
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.1-19.1 lock rpm lock src

  krb5-32bit
  MIT Kerberos5 Implementation--Libraries

  1.12.1-19.1 lock rpm

  krb5-client
  MIT Kerberos5 implementation - client programs

  1.12.1-19.1 lock rpm