Fedora 27: 2018-ba98cd8219 High: OpenSSL Denial of Service Vulnerability

Kerberos V5 is a trusted-third-party network authentication system,

which can improve your network's security by eliminating the insecure

practice of sending passwords over the network in unencrypted form.

- Fix bypass of certauth module with malicious EKU cert missing a SAN. Security

related; see [upstream bug](https://github.com/krb5/krb5/pull/694) for more

information. - Add kdcpolicy interface.

su -c 'dnf upgrade krb5' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org