shield Security update for krb5

SUSE-SLE-SDK-12-SP3-2017-1644

This update for krb5 fixes several issues. This security issue was fixed: - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free (bsc#1056995) These non-security issues were fixed: - Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028) - Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543) - Remove main package's dependency on systemd (bsc#1032680)

• Release Date
  Oct 9 2017
• References
  Bugzilla: 1054028, 1032680, 903543, 1056995
  CVEs: CVE-2017-11462
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1

  lock src

  krb5-devel
  MIT Kerberos5 - Include Files and Libraries

  1.12.5-40.13.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 ppc64le

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1

  lock src

  krb5-devel
  MIT Kerberos5 - Include Files and Libraries

  1.12.5-40.13.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 s390x

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1

  lock src

  krb5-devel
  MIT Kerberos5 - Include Files and Libraries

  1.12.5-40.13.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1

  lock src

  krb5-devel
  MIT Kerberos5 - Include Files and Libraries

  1.12.5-40.13.1

  lock rpm