Security update for krb5 (important)

2015-11-0618:12:23

lists.opensuse.org

0.835 High

EPSS

Percentile

98.1%

JSON

krb5 was updated to fix three security issues.

These security issues were fixed:

CVE-2015-2695: Applications which call gss_inquire_context() on a
partially-established SPNEGO context could have caused the GSS-API
library to read from a pointer using the wrong type, generally causing a
process crash. (bsc#952188).
CVE-2015-2696: Applications which call gss_inquire_context() on a
partially-established IAKERB context could have caused the GSS-API
library to read from a pointer using the wrong type, generally causing a
process crash. (bsc#952189).
CVE-2015-2697: Incorrect string handling in build_principal_va can lead
to DOS (bsc#952190).

OSVersionArchitecturePackageVersionFilename
openSUSE13.1i586krb5-devel< 1.11.3-3.21.1krb5-devel-1.11.3-3.21.1.i586.rpm
openSUSE13.1i586krb5-plugin-kdb-ldap< 1.11.3-3.21.1krb5-plugin-kdb-ldap-1.11.3-3.21.1.i586.rpm
openSUSE13.1i586krb5-plugin-preauth-pkinit< 1.11.3-3.21.1krb5-plugin-preauth-pkinit-1.11.3-3.21.1.i586.rpm
openSUSE13.1i586krb5-mini< 1.11.3-3.21.1krb5-mini-1.11.3-3.21.1.i586.rpm
openSUSE13.1i586krb5-mini-devel< 1.11.3-3.21.1krb5-mini-devel-1.11.3-3.21.1.i586.rpm
openSUSE13.1x86_64krb5-mini< 1.11.3-3.21.1krb5-mini-1.11.3-3.21.1.x86_64.rpm
openSUSE13.1i586krb5-doc< 1.11.3-3.21.1krb5-doc-1.11.3-3.21.1.i586.rpm
openSUSE13.2x86_64krb5-mini-devel< 1.12.2-15.1krb5-mini-devel-1.12.2-15.1.x86_64.rpm
openSUSE13.2x86_64krb5-plugin-preauth-otp< 1.12.2-15.1krb5-plugin-preauth-otp-1.12.2-15.1.x86_64.rpm
openSUSE13.2i586krb5-debuginfo< 1.12.2-15.1krb5-debuginfo-1.12.2-15.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	13.1	i586	krb5-devel	< 1.11.3-3.21.1	krb5-devel-1.11.3-3.21.1.i586.rpm
openSUSE	13.1	i586	krb5-plugin-kdb-ldap	< 1.11.3-3.21.1	krb5-plugin-kdb-ldap-1.11.3-3.21.1.i586.rpm
openSUSE	13.1	i586	krb5-plugin-preauth-pkinit	< 1.11.3-3.21.1	krb5-plugin-preauth-pkinit-1.11.3-3.21.1.i586.rpm
openSUSE	13.1	i586	krb5-mini	< 1.11.3-3.21.1	krb5-mini-1.11.3-3.21.1.i586.rpm
openSUSE	13.1	i586	krb5-mini-devel	< 1.11.3-3.21.1	krb5-mini-devel-1.11.3-3.21.1.i586.rpm
openSUSE	13.1	x86_64	krb5-mini	< 1.11.3-3.21.1	krb5-mini-1.11.3-3.21.1.x86_64.rpm
openSUSE	13.1	i586	krb5-doc	< 1.11.3-3.21.1	krb5-doc-1.11.3-3.21.1.i586.rpm
openSUSE	13.2	x86_64	krb5-mini-devel	< 1.12.2-15.1	krb5-mini-devel-1.12.2-15.1.x86_64.rpm
openSUSE	13.2	x86_64	krb5-plugin-preauth-otp	< 1.12.2-15.1	krb5-plugin-preauth-otp-1.12.2-15.1.x86_64.rpm
openSUSE	13.2	i586	krb5-debuginfo	< 1.12.2-15.1	krb5-debuginfo-1.12.2-15.1.i586.rpm