Уведомление безопасности SUSE-SU-2015:1898-1

Высокая (7.1)

(AV:N/AC:M/Au:N/C:N/I:N/A:C)

SUSE

krb5 (any) krb5-32bit (any) krb5-apps-clients (any) krb5-apps-servers (any) krb5-client (any) krb5-doc (any) krb5-plugin-kdb-ldap (any) krb5-plugin-preauth-pkinit (any) krb5-server (any) krb5-x86 (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Desktop 11-SP4, SUSE Linux Enterprise Software Development Kit 11-SP4, SUSE Linux Enterprise Server 11-SP3, SUSE Linux Enterprise Software Development Kit 11-SP3, SUSE Linux Enterprise Server 11-SP4, SUSE Linux Enterprise Desktop 11-SP3, SUSE Linux Enterprise Server for VMWare 11-SP3

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Debuginfo 11-SP4:
ppc64, s390x, x86_64:
krb5-debuginfo-32bit - 1.6.3-133.49.97.1
SUSE Linux Enterprise Software Development Kit 11-SP3:
ppc64, s390x, x86_64:
krb5-devel-32bit - 1.6.3-133.49.97.1
SUSE Linux Enterprise Software Development Kit 11-SP4:
ppc64, s390x, x86_64:
krb5-devel-32bit - 1.6.3-133.49.97.1
SUSE Linux Enterprise Server 11-SP3:
noarch:
krb5-doc - 1.6.3-133.49.97.3
SUSE Linux Enterprise Desktop 11-SP4:
i586, x86_64:
krb5 - 1.6.3-133.49.97.1
krb5-client - 1.6.3-133.49.97.1
SUSE Linux Enterprise Server 11-SP4:
noarch:
krb5-doc - 1.6.3-133.49.97.3
SUSE Linux Enterprise Desktop 11-SP3:
i586, x86_64:
krb5 - 1.6.3-133.49.97.1
krb5-client - 1.6.3-133.49.97.1
SUSE Linux Enterprise Server for VMWare 11-SP3:
noarch:
krb5-doc - 1.6.3-133.49.97.3

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00007.html
https://bugzilla.suse.com/952188

Источник: CVE
Наименование: CVE-2015-2695
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2695