Fedora: 2015:7866 Critical Vulnerability in krb5 Authentication System
fedora
May 11, 2015
Security fix for CVE-2015-2694
Summary
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of sending passwords over the network in unencrypted form.
Update Information:
Security fix for CVE-2015-2694
Topics Covered
Change Log
References
[ 1 ] Bug #1216133 - CVE-2015-2694 krb5: issues in OTP and PKINIT kdcpreauth modules leading to requires_preauth bypass
https://bugzilla.redhat.com/show_bug.cgi?id=1216133
Update Instructions
This update can be installed with the "yum" update program. Use su -c 'yum update krb5' at the command line. For more information, refer to "Managing Software with yum", available at .
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: krb5
Product: Fedora 22
Version: 1.13.1
Release: 3.fc22
Summary: The Kerberos network authentication system
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!