shield Security update for krb5

SUSE-SLE-SDK-12-2015-335

krb5 was updated to fix four security issues. These security issues were fixed: - CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name (bsc#910457). - CVE-2014-5354: NULL pointer dereference when using keyless entries (bsc#910458). - CVE-2014-5355: Denial of service in krb5_read_message (bsc#918595). - CVE-2015-2694: OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass (bsc#928978).

• Release Date
  Jul 14 2015
• References
  Bugzilla: 910458, 910457, 918595, 928978
  CVEs: CVE-2014-5353, CVE-2014-5355, CVE-2014-5354, CVE-2015-2694
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12 s390x

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.1-16.1 lock src

  krb5-devel
  MIT Kerberos5 - Include Files and Libraries

  1.12.1-16.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12 x86_64

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.1-16.1 lock src

  krb5-devel
  MIT Kerberos5 - Include Files and Libraries

  1.12.1-16.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12 ppc64le

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.1-16.1 lock src

  krb5-devel
  MIT Kerberos5 - Include Files and Libraries

  1.12.1-16.1 lock rpm