stable

krb5-1.14.3-4.fc23

FEDORA-2016-f405b25923 created by rharwood 10 years ago for Fedora 23

Bump version to 1.14.3 for the convenience of those needing the SNI fix.


Require krb5 to set the "Host:" header when speaking KKDCPP. This fixes use of TLS with SNI.


Fix low-impact CVE-2016-3120 where S4U2Self may cause KDC crash when anon is restricted

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-f405b25923

This update has been submitted for testing by rharwood.

10 years ago

This update has obsoleted krb5-1.14.1-9.fc23, and has inherited its bugs and notes.

10 years ago

This update has been pushed to testing.

10 years ago
User Icon em3rson commented & provided feedback 10 years ago
karma

works

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

9 years ago

This update has been obsoleted by krb5-1.14.3-8.fc23.

9 years ago

This update has been submitted for stable by rharwood.

9 years ago

This update has been pushed to stable.

9 years ago

Please log in to add feedback.

Metadata
Type
security
Severity
low
Karma
1
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
10 years ago
in testing
10 years ago
in stable
9 years ago
BZ#1361050 CVE-2016-3120 krb5: S4U2Self KDC crash when anon is restricted
0
0
BZ#1361051 CVE-2016-3120 krb5: S4U2Self KDC crash when anon is restricted [fedora-all]
0
0
BZ#1365028 MS-KKDCP with TLS SNI requires HTTP Host header
0
0
BZ#1365029 MS-KKDCP with TLS SNI requires HTTP Host header
0
0
BZ#1365030 MS-KKDCP with TLS SNI requires HTTP Host header
0
0

Automated Test Results