gpp_maybe Security update for krb5, krb5-mini

SUSE-SLE-Module-Basesystem-15-SP7-2026-2848

This update for krb5, krb5-mini fixes the following issues - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131). - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).

• Release Date
  Jul 10 2026
• References
  Bugzilla: 1263366, 1263367, 1268131
  CVEs: CVE-2026-11850, CVE-2026-40355, CVE-2026-40356
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  krb5
  MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm lock src

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  krb5
  MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm lock src

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm lock src

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm lock src

  krb5-32bit
  MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.20.1-150600.11.19.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.20.1-150600.11.19.1 lock rpm