Stay Secure with the Latest Linux Advisories

security advisorymoderatefedora

Fedora 27: 2018-ba98cd8219 High: OpenSSL Denial of Service Vulnerability

- Fix bypass of certauth module with malicious EKU cert missing a SAN. Security related; see [upstream bug](https://github.com/krb5/krb5/pull/694) for more information. - Add kdcpolicy interface.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-bf74db7147 2017-08-28 15:28:20.845911 --------------------------------------------------------------------------------Name : krb5 Product : Fedora 26 Version : 1.15.1 Release : 25.fc26 URL : http://web.mit.edu/kerberos/www/ Summary : The Kerberos network authentication system Description : Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form. --------------------------------------------------------------------------------Update Information: - Fix bypass of certauth module with malicious EKU cert missing a SAN. Security related; see [upstream bug](https://github.com/krb5/krb5/pull/694) for more information. - Add kdcpolicy interface. --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade krb5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Tackle the krb5 module's certauth vulnerability via Fedora 26 patch. Enhanced security measures safeguard yoursystems.. Fedora 26, Kerberos Security, Certauth Bypass Update, Network Authentication. . LinuxSecurity.com Team

Aug 28, 2017 Fedora