Уведомление безопасности SUSE-SU-2015:0290-2

Низкая (2.1)

(AV:N/AC:H/Au:S/C:P/I:N/A:N)

SUSE

krb5 (any) krb5-32bit (any) krb5-client (any) krb5-client-debuginfo (any) krb5-debuginfo (any) krb5-debuginfo-32bit (any) krb5-debugsource (any) krb5-devel (any) krb5-doc (any) krb5-plugin-kdb-ldap (any) krb5-plugin-kdb-ldap-debuginfo (any) krb5-plugin-preauth-otp (any) krb5-plugin-preauth-otp-debuginfo (any) krb5-plugin-preauth-pkinit (any) krb5-plugin-preauth-pkinit-debuginfo (any) krb5-server (any) krb5-server-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Build System Kit 12, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Software Development Kit 12

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Desktop 12:
x86_64:
krb5-client - 1.12.1-9.1
krb5-32bit - 1.12.1-9.1
krb5-debuginfo-32bit - 1.12.1-9.1
krb5-debuginfo - 1.12.1-9.1
krb5-client-debuginfo - 1.12.1-9.1
krb5-debugsource - 1.12.1-9.1
krb5 - 1.12.1-9.1
SUSE Linux Enterprise Build System Kit 12:
x86_64:
krb5-mini-devel - 1.12.1-9.1
krb5-mini - 1.12.1-9.1
krb5-mini-debugsource - 1.12.1-9.1
krb5-mini-debuginfo - 1.12.1-9.1
SUSE Linux Enterprise Server 12:
x86_64:
krb5-client - 1.12.1-9.1
krb5-32bit - 1.12.1-9.1
krb5-plugin-kdb-ldap - 1.12.1-9.1
krb5-debuginfo-32bit - 1.12.1-9.1
krb5-plugin-preauth-otp - 1.12.1-9.1
krb5-debuginfo - 1.12.1-9.1
krb5-client-debuginfo - 1.12.1-9.1
krb5-server-debuginfo - 1.12.1-9.1
krb5-debugsource - 1.12.1-9.1
krb5 - 1.12.1-9.1
krb5-plugin-preauth-pkinit - 1.12.1-9.1
krb5-plugin-preauth-pkinit-debuginfo - 1.12.1-9.1
krb5-doc - 1.12.1-9.1
krb5-plugin-kdb-ldap-debuginfo - 1.12.1-9.1
krb5-plugin-preauth-otp-debuginfo - 1.12.1-9.1
krb5-server - 1.12.1-9.1
SUSE Linux Enterprise Software Development Kit 12:
x86_64:
krb5-debuginfo - 1.12.1-9.1
krb5-devel - 1.12.1-9.1
krb5-debugsource - 1.12.1-9.1

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00017.html
https://bugzilla.suse.com/897874
https://bugzilla.suse.com/898439
https://bugzilla.suse.com/912002

Источник: CVE
Наименование: CVE-2014-5352
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5352

Источник: CVE
Наименование: CVE-2014-5351
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5351

Источник: CVE
Наименование: CVE-2014-9421
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9421

Источник: CVE
Наименование: CVE-2014-9423
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9423

Источник: CVE
Наименование: CVE-2014-9422
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9422