shield Security update for krb5

SUSE-SLE-SERVER-12-2018-983

This update for krb5 provides the following fixes: Security issues fixed: - CVE-2017-7562: Improper validation of certificate EKU and SAN could lead to authentication bypass. (bsc#1055851) Non-security issues fixed: - Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028) - Fix a GSS failure in legacy applications by not indicating deprecated GSS mechanisms in gss_indicate_mech() list. (bsc#1081725)

• Release Date
  May 25 2018
• References
  Bugzilla: 1054028, 1055851, 1081725
  CVEs: CVE-2017-7562
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 s390x

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.1-38.5.3 lock rpm lock src

  krb5-32bit
  MIT Kerberos5 Implementation--Libraries

  1.12.1-38.5.3 lock rpm

  krb5-client
  MIT Kerberos5 implementation - client programs

  1.12.1-38.5.3 lock rpm

  krb5-doc
  MIT Kerberos5 Implementation--Documentation

  1.12.1-38.5.3 lock rpm

  krb5-plugin-kdb-ldap
  MIT Kerberos5 Implementation--LDAP Database Plugin

  1.12.1-38.5.3 lock rpm

  krb5-plugin-preauth-otp
  MIT Kerberos5 Implementation--OTP preauth Plugin

  1.12.1-38.5.3 lock rpm

  krb5-plugin-preauth-pkinit
  MIT Kerberos5 Implementation--PKINIT preauth Plugin

  1.12.1-38.5.3 lock rpm

  krb5-server
  MIT Kerberos5 implementation - server

  1.12.1-38.5.3 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.1-38.5.3 lock rpm lock src

  krb5-32bit
  MIT Kerberos5 Implementation--Libraries

  1.12.1-38.5.3 lock rpm

  krb5-client
  MIT Kerberos5 implementation - client programs

  1.12.1-38.5.3 lock rpm

  krb5-doc
  MIT Kerberos5 Implementation--Documentation

  1.12.1-38.5.3 lock rpm

  krb5-plugin-kdb-ldap
  MIT Kerberos5 Implementation--LDAP Database Plugin

  1.12.1-38.5.3 lock rpm

  krb5-plugin-preauth-otp
  MIT Kerberos5 Implementation--OTP preauth Plugin

  1.12.1-38.5.3 lock rpm

  krb5-plugin-preauth-pkinit
  MIT Kerberos5 Implementation--PKINIT preauth Plugin

  1.12.1-38.5.3 lock rpm

  krb5-server
  MIT Kerberos5 implementation - server

  1.12.1-38.5.3 lock rpm