< back to search

shield Security update for krb5

SUSE-SLE-Micro-5.5-2026-1816

This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).

Release Date

May 12 2026
References

Bugzilla: 1263366, 1263367
CVEs: CVE-2026-40355, CVE-2026-40356
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.5 s390x

Packages

krb5
MIT Kerberos5 implementation

1.20.1-150500.3.20.1 lock rpm lock src

krb5-client
Client programs of the MIT Kerberos5 implementation

1.20.1-150500.3.20.1 lock rpm

SUSE Linux Enterprise Micro 5.5 ppc64le

Packages

krb5
MIT Kerberos5 implementation

1.20.1-150500.3.20.1 lock rpm lock src

krb5-client
Client programs of the MIT Kerberos5 implementation

1.20.1-150500.3.20.1 lock rpm

SUSE Linux Enterprise Micro 5.5 aarch64

Packages

krb5
MIT Kerberos5 implementation

1.20.1-150500.3.20.1 lock rpm lock src

krb5-client
Client programs of the MIT Kerberos5 implementation

1.20.1-150500.3.20.1 lock rpm

SUSE Linux Enterprise Micro 5.5 x86_64

Packages

krb5
MIT Kerberos5 implementation

1.20.1-150500.3.20.1 lock rpm lock src

krb5-client
Client programs of the MIT Kerberos5 implementation

1.20.1-150500.3.20.1 lock rpm