< back to search

shield Security update for crypto-policies, krb5
SUSE-SLE-Module-Server-Applications-15-SP6-2025-401

This update for crypto-policies and krb5 fixes the following issues: Security issue fixed: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619). Feature addition: - Add crypto-policies support; (jsc#PED-12018) * The default krb5.conf has been updated to include config snippets in the krb5.conf.d directory, where crypto-policies drops its. - Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); * This key derivation function is used by AES256-CTS-HMAC-SHA1-96 and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active directory. If these encryption types are allowed or not in FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.

  • Release Date
    Feb 10 2025
  • References
    Bugzilla: 1236619
    CVEs: CVE-2025-24528
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

Server Applications Module 15.6 ppc64le
  • Packages
    krb5
    MIT Kerberos5 implementation
    1.20.1-150600.11.8.1 lock src
    krb5-plugin-kdb-ldap
    LDAP database plugin for MIT Kerberos5
    1.20.1-150600.11.8.1 lock rpm
    krb5-server
    Server program of the MIT Kerberos5 implementation
    1.20.1-150600.11.8.1 lock rpm
Server Applications Module 15.6 x86_64
  • Packages
    krb5
    MIT Kerberos5 implementation
    1.20.1-150600.11.8.1 lock src
    krb5-plugin-kdb-ldap
    LDAP database plugin for MIT Kerberos5
    1.20.1-150600.11.8.1 lock rpm
    krb5-server
    Server program of the MIT Kerberos5 implementation
    1.20.1-150600.11.8.1 lock rpm
Server Applications Module 15.6 s390x
  • Packages
    krb5
    MIT Kerberos5 implementation
    1.20.1-150600.11.8.1 lock src
    krb5-plugin-kdb-ldap
    LDAP database plugin for MIT Kerberos5
    1.20.1-150600.11.8.1 lock rpm
    krb5-server
    Server program of the MIT Kerberos5 implementation
    1.20.1-150600.11.8.1 lock rpm
Server Applications Module 15.6 aarch64
  • Packages
    krb5
    MIT Kerberos5 implementation
    1.20.1-150600.11.8.1 lock src
    krb5-plugin-kdb-ldap
    LDAP database plugin for MIT Kerberos5
    1.20.1-150600.11.8.1 lock rpm
    krb5-server
    Server program of the MIT Kerberos5 implementation
    1.20.1-150600.11.8.1 lock rpm