shield Security update for krb5

SUSE-SLE-SERVER-12-SP3-2017-1644

This update for krb5 fixes several issues. This security issue was fixed: - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free (bsc#1056995) These non-security issues were fixed: - Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf in order to improve client security in handling service principle names. (bsc#1054028) - Prevent kadmind.service startup failure caused by absence of LDAP service. (bsc#903543) - Remove main package's dependency on systemd (bsc#1032680)

• Release Date
  Oct 9 2017
• References
  Bugzilla: 1054028, 1032680, 903543, 1056995
  CVEs: CVE-2017-11462
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1 lock rpm lock src

  krb5-client
  MIT Kerberos5 implementation - client programs

  1.12.5-40.13.1 lock rpm

  krb5-doc
  MIT Kerberos5 Implementation--Documentation

  1.12.5-40.13.1 lock rpm

  krb5-plugin-kdb-ldap
  MIT Kerberos5 Implementation--LDAP Database Plugin

  1.12.5-40.13.1 lock rpm

  krb5-plugin-preauth-otp
  MIT Kerberos5 Implementation--OTP preauth Plugin

  1.12.5-40.13.1 lock rpm

  krb5-plugin-preauth-pkinit
  MIT Kerberos5 Implementation--PKINIT preauth Plugin

  1.12.5-40.13.1 lock rpm

  krb5-server
  MIT Kerberos5 implementation - server

  1.12.5-40.13.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1 lock rpm lock src

  krb5-client
  MIT Kerberos5 implementation - client programs

  1.12.5-40.13.1 lock rpm

  krb5-doc
  MIT Kerberos5 Implementation--Documentation

  1.12.5-40.13.1 lock rpm

  krb5-plugin-kdb-ldap
  MIT Kerberos5 Implementation--LDAP Database Plugin

  1.12.5-40.13.1 lock rpm

  krb5-plugin-preauth-otp
  MIT Kerberos5 Implementation--OTP preauth Plugin

  1.12.5-40.13.1 lock rpm

  krb5-plugin-preauth-pkinit
  MIT Kerberos5 Implementation--PKINIT preauth Plugin

  1.12.5-40.13.1 lock rpm

  krb5-server
  MIT Kerberos5 implementation - server

  1.12.5-40.13.1 lock rpm

SUSE Linux Enterprise Server 12.3 s390x

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1 lock rpm lock src

  krb5-32bit
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1 lock rpm

  krb5-client
  MIT Kerberos5 implementation - client programs

  1.12.5-40.13.1 lock rpm

  krb5-doc
  MIT Kerberos5 Implementation--Documentation

  1.12.5-40.13.1 lock rpm

  krb5-plugin-kdb-ldap
  MIT Kerberos5 Implementation--LDAP Database Plugin

  1.12.5-40.13.1 lock rpm

  krb5-plugin-preauth-otp
  MIT Kerberos5 Implementation--OTP preauth Plugin

  1.12.5-40.13.1 lock rpm

  krb5-plugin-preauth-pkinit
  MIT Kerberos5 Implementation--PKINIT preauth Plugin

  1.12.5-40.13.1 lock rpm

  krb5-server
  MIT Kerberos5 implementation - server

  1.12.5-40.13.1 lock rpm

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  krb5
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1 lock rpm lock src

  krb5-32bit
  MIT Kerberos5 Implementation--Libraries

  1.12.5-40.13.1 lock rpm

  krb5-client
  MIT Kerberos5 implementation - client programs

  1.12.5-40.13.1 lock rpm

  krb5-doc
  MIT Kerberos5 Implementation--Documentation

  1.12.5-40.13.1 lock rpm

  krb5-plugin-kdb-ldap
  MIT Kerberos5 Implementation--LDAP Database Plugin

  1.12.5-40.13.1 lock rpm

  krb5-plugin-preauth-otp
  MIT Kerberos5 Implementation--OTP preauth Plugin

  1.12.5-40.13.1 lock rpm

  krb5-plugin-preauth-pkinit
  MIT Kerberos5 Implementation--PKINIT preauth Plugin

  1.12.5-40.13.1 lock rpm

  krb5-server
  MIT Kerberos5 implementation - server

  1.12.5-40.13.1 lock rpm