Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:2062-1

Опубликовано: 27 нояб. 2020
Источник: suse-cvrf

Описание

Security update for krb5

This update for krb5 fixes the following security issue:

  • CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Список пакетов

openSUSE Leap 15.2
krb5-1.16.3-lp152.5.13.1
krb5-32bit-1.16.3-lp152.5.13.1
krb5-client-1.16.3-lp152.5.13.1
krb5-devel-1.16.3-lp152.5.13.1
krb5-devel-32bit-1.16.3-lp152.5.13.1
krb5-mini-1.16.3-lp152.5.13.1
krb5-mini-devel-1.16.3-lp152.5.13.1
krb5-plugin-kdb-ldap-1.16.3-lp152.5.13.1
krb5-plugin-preauth-otp-1.16.3-lp152.5.13.1
krb5-plugin-preauth-pkinit-1.16.3-lp152.5.13.1
krb5-server-1.16.3-lp152.5.13.1

Ссылки

Описание

MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.

Затронутые продукты
openSUSE Leap 15.2:krb5-1.16.3-lp152.5.13.1
openSUSE Leap 15.2:krb5-32bit-1.16.3-lp152.5.13.1
openSUSE Leap 15.2:krb5-client-1.16.3-lp152.5.13.1
openSUSE Leap 15.2:krb5-devel-1.16.3-lp152.5.13.1
Ссылки