shield Security update for krb5

SUSE-SLES-16.0-1033

This update for krb5 fixes the following issues - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366). - CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).

• Release Date
  Jun 22 2026
• References
  Bugzilla: 1263366, 1263367
  CVEs: CVE-2026-40355, CVE-2026-40356
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  krb5
  MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-spake
  SPAKE preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  krb5
  MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-spake
  SPAKE preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-spake
  SPAKE preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  krb5
  MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-spake
  SPAKE preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-spake
  SPAKE preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  krb5
  MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-client
  Client programs of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm

  krb5-devel
  Development files for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-kdb-ldap
  LDAP database plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-otp
  OTP preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-pkinit
  PKINIT preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-plugin-preauth-spake
  SPAKE preauthentication plugin for MIT Kerberos5

  1.21.3-160000.3.1 lock rpm

  krb5-server
  Server program of the MIT Kerberos5 implementation

  1.21.3-160000.3.1 lock rpm