shield Security update for crypto-policies, krb5

SUSE-SLE-Module-Basesystem-15-SP6-2025-401

This update for crypto-policies and krb5 fixes the following issues: Security issue fixed: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619). Feature addition: - Add crypto-policies support; (jsc#PED-12018) * The default krb5.conf has been updated to include config snippets in the krb5.conf.d directory, where crypto-policies drops its. - Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); * This key derivation function is used by AES256-CTS-HMAC-SHA1-96 and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active directory. If these encryption types are allowed or not in FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.

• Release Date
  Feb 10 2025
• References
  Bugzilla: 1236619
  CVEs: CVE-2025-24528
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.6 s390x

• Packages
  crypto-policies
  System-wide crypto policies

  20230920.570ea89-150600.3.3.1 lock rpm lock src

  crypto-policies-scripts
  Tool to switch between crypto policies

  20230920.570ea89-150600.3.3.1 lock rpm

  krb5
  MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm lock src

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

Basesystem Module 15.6 ppc64le

• Packages
  crypto-policies
  System-wide crypto policies

  20230920.570ea89-150600.3.3.1 lock rpm lock src

  crypto-policies-scripts
  Tool to switch between crypto policies

  20230920.570ea89-150600.3.3.1 lock rpm

  krb5
  MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm lock src

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

Basesystem Module 15.6 x86_64

• Packages
  crypto-policies
  System-wide crypto policies

  20230920.570ea89-150600.3.3.1 lock rpm lock src

  crypto-policies-scripts
  Tool to switch between crypto policies

  20230920.570ea89-150600.3.3.1 lock rpm

  krb5
  MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm lock src

  krb5-32bit
  MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

Basesystem Module 15.6 aarch64

• Packages
  crypto-policies
  System-wide crypto policies

  20230920.570ea89-150600.3.3.1 lock rpm lock src

  crypto-policies-scripts
  Tool to switch between crypto policies

  20230920.570ea89-150600.3.3.1 lock rpm

  krb5
  MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm lock src

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.20.1-150600.11.8.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.8.1 lock rpm