gpp_maybe Security update for krb5

SUSE-SLE-Module-Server-Applications-15-SP5-2024-2302

This update for krb5 fixes the following issues: - CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). - CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid length fields (bsc#1227187).

• Release Date
  Jul 4 2024
• References
  Bugzilla: 1227186, 1227187
  CVEs: CVE-2024-37371, CVE-2024-37370
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.5 aarch64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.20.1-150500.3.9.1 lock src

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.20.1-150500.3.9.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.20.1-150500.3.9.1 lock rpm

Server Applications Module 15.5 ppc64le

• Packages
  krb5
  MIT Kerberos5 implementation

  1.20.1-150500.3.9.1 lock src

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.20.1-150500.3.9.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.20.1-150500.3.9.1 lock rpm

Server Applications Module 15.5 s390x

• Packages
  krb5
  MIT Kerberos5 implementation

  1.20.1-150500.3.9.1 lock src

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.20.1-150500.3.9.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.20.1-150500.3.9.1 lock rpm

Server Applications Module 15.5 x86_64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.20.1-150500.3.9.1 lock src

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.20.1-150500.3.9.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.20.1-150500.3.9.1 lock rpm