shield Recommended update for krb5

SUSE-SLE-SERVER-12-SP5-2024-996

This update for krb5 fixes the following issues: This update updates krb5 to 1.16.3 (jsc#PED-7884). Most relevant changes: * Remove the triple-DES and RC4 encryption types from the default value of supported_enctypes, which determines the default key and salt types for new password-derived keys. By default, keys will only created only for AES128 and AES256. This mitigates some types of password guessing attacks. * Add support for the AES-SHA2 enctypes, which allows sites to conform to Suite B crypto requirements.

• Release Date
  Mar 26 2024
• References
• Type
  recommended
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  lock src

  krb5-32bit
  MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-doc
  Documentation for the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  krb5
  MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  lock src

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-doc
  Documentation for the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  krb5
  MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  lock src

  krb5-32bit
  MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-doc
  Documentation for the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  lock src

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-doc
  Documentation for the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.16.3-46.3.1

  lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.16.3-46.3.1

  lock rpm