Security update for krb5
This update for krb5 fixes several issues. This security issue was fixed: - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free (bsc#1056995). - CVE-2018-5729: Null pointer dereference in kadmind or DN container check bypass by supplying special crafted data (bsc#1083926). - CVE-2018-5730: DN container check bypass by supplying special crafted data (bsc#1083927). This non-security issue was fixed: - Avoid indefinite polling in KDC communication. (bsc#970696)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for krb5 fixes several issues. This security issue was fixed: - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free (bsc#1056995). - CVE-2018-5729: Null pointer dereference in kadmind or DN container check bypass by supplying special crafted data (bsc#1083926). - CVE-2018-5730: DN container check bypass by supplying special crafted data (bsc#1083927). This non-security issue was fixed: - Avoid indefinite polling in KDC communication. (bsc#970696)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1056995
- https://bugzilla.suse.com/1083926
- https://bugzilla.suse.com/1083927
- https://bugzilla.suse.com/970696
- https://www.suse.com/security/cve/CVE-2017-11462
- https://www.suse.com/security/cve/CVE-2018-5729
- https://www.suse.com/security/cve/CVE-2018-5730
- https://www.suse.com/support/update/announcement/2018/suse-su-20180859-1/