shield Security update for krb5

SUSE-SLE-DESKTOP-12-SP2-2017-1644

This update for krb5 fixes several issues. This security issue was fixed: - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free (bsc#1056995) These non-security issues were fixed: - Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028) - Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543) - Remove main package's dependency on systemd (bsc#1032680)

• Release Date
  Oct 9 2017
• References
  Bugzilla: 1054028, 1032680, 903543, 1056995
  CVEs: CVE-2017-11462
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12.2 x86_64

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1

  lock rpm

  lock src

  krb5-32bit
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1

  lock rpm

  krb5-client
  MIT Kerberos5 implementation - client programs

  1.12.5-40.13.1

  lock rpm