Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 24: 2016-03-27 Moderate: krb5 NULL Dereference Issue

fedora
Calendar Grey March 27, 2016
Dist Fedora Esm H88
Important security patch for Fedora 24 fixing a NULL pointer dereference vulnerability in the krb5 LDAP component. Apply via yum.
CVE-2016-3119, NULL dereference in LDAP module

Summary

Kerberos V5 is a trusted-third-party network authentication system,

which can improve your network's security by eliminating the insecure

practice of sending passwords over the network in unencrypted form.

Update Information:

CVE-2016-3119, NULL dereference in LDAP module. ---- Fix an issue with return codes on `gss_inquire_attrs_for_mech`. This resolves an issue with gss-ntlmssp, and anything else that is interposing but not implementing the corresponding mechglue function.

Topics%20covered

Topics Covered

security advisory fedora krb5 network authentication NULL dereference

Change Log

References


[ 1 ] Bug #1317609 - krb5 1.14.1 ate my gss-ntlmssp. https://bugzilla.redhat.com/show_bug.cgi?id=1317609

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update krb5' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: krb5
Product: Fedora 24
Version: 1.14.1
Release: 3.fc24
URL: http://web.mit.edu/kerberos/www/
Summary: The Kerberos network authentication system

Topics%20covered

Topics Covered

security advisory fedora krb5 network authentication NULL dereference

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here