Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 519
Alerts This Week
Warning Icon 1 519

Fedora 23: 2016-56840babc3 Moderate: krb5 NULL Dereference Fix

fedora
Calendar Grey March 22, 2016
Dist Fedora Esm H88
Update the krb5 package on Fedora 23 to address NULL dereference vulnerabilities and improve authentication over networks.
CVE-2016-3119, NULL dereference in LDAP module

Summary

Kerberos V5 is a trusted-third-party network authentication system,

which can improve your network's security by eliminating the insecure

practice of sending passwords over the network in unencrypted form.

Update Information:

CVE-2016-3119, NULL dereference in LDAP module. ---- Fix an issue with return codes on `gss_inquire_attrs_for_mech`. This resolves an issue with gss-ntlmssp, and anything else that is interposing but not implementing the corresponding mechglue function.

Topics%20covered

Topics Covered

security advisory Fedora krb5 network authentication NULL dereference

Change Log

References


[ 1 ] Bug #1317609 - krb5 1.14.1 ate my gss-ntlmssp. https://bugzilla.redhat.com/show_bug.cgi?id=1317609

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update krb5' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: krb5
Product: Fedora 23
Version: 1.14.1
Release: 3.fc23
URL: http://web.mit.edu/kerberos/www/
Summary: The Kerberos network authentication system

Topics%20covered

Topics Covered

security advisory Fedora krb5 network authentication NULL dereference

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.