FEDORA-2017-10c74147f9 — security update for krb5

stable

krb5-1.15.1-28.fc26

FEDORA-2017-10c74147f9 created by rharwood 9 years ago for Fedora 26

Prevent applications from accidentally implementing CVE-2017-11462 (double free if sec_context is copied).
fc26+: Add ccselect hostrealm module for ccache selection based on service hostname.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-10c74147f9

This update has been submitted for testing by rharwood.

9 years ago

This update has been pushed to testing.

9 years ago

bojan commented & provided feedback 9 years ago

karma

Still works here.

cserpentis commented & provided feedback 9 years ago

karma

works for me

besser82 commented & provided feedback 9 years ago

karma

Works great! LGTM! =)

This update has been submitted for stable by bodhi.

9 years ago

This update has been pushed to stable.

9 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

Builds

krb5-1.15.1-28.fc26

BZ#1488873 CVE-2017-11462 krb5: Automatic sec context deletion could lead to double-free

BZ#1488874 CVE-2017-11462 krb5: Automatic sec context deletion could lead to double-free [fedora-all]

krb5-1.15.1-28.fc26

Automated Test Results

None