Security update for krb5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0257-1 Final 1 1 2015-02-06T09:35:09Z current 2015-02-06T09:35:09Z 2015-02-06T09:35:09Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for krb5 krb5 has been updated to fix four security issues: * CVE-2014-5352: gss_process_context_token() incorrectly frees context (bsc#912002) * CVE-2014-9421: kadmind doubly frees partial deserialization results (bsc#912002) * CVE-2014-9422: kadmind incorrectly validates server principal name (bsc#912002) * CVE-2014-9423: libgssrpc server applications leak uninitialized bytes (bsc#912002) Additionally, these non-security issues have been fixed: * Winbind process hangs indefinitely without DC. (bsc#872912) * Hanging winbind processes. (bsc#906557) Security Issues: * CVE-2014-5352 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5352> * CVE-2014-9421 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9421> * CVE-2014-9422 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9422> * CVE-2014-9423 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9423> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp3-krb5-20150206,sledsp3-krb5-20150206,slessp3-krb5-20150206 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150257-1/ Link for SUSE-SU-2015:0257-1 https://lists.opensuse.org/opensuse-security-announce/2015-02/msg00011.html E-Mail link for SUSE-SU-2015:0257-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/872912 SUSE Bug 872912 https://bugzilla.suse.com/906557 SUSE Bug 906557 https://bugzilla.suse.com/912002 SUSE Bug 912002 https://www.suse.com/security/cve/CVE-2014-5352/ SUSE CVE CVE-2014-5352 page https://www.suse.com/security/cve/CVE-2014-9421/ SUSE CVE CVE-2014-9421 page https://www.suse.com/security/cve/CVE-2014-9422/ SUSE CVE CVE-2014-9422 page https://www.suse.com/security/cve/CVE-2014-9423/ SUSE CVE CVE-2014-9423 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 krb5-devel-1.6.3-133.49.66.1 krb5-devel-32bit-1.6.3-133.49.66.1 krb5-server-1.6.3-133.49.66.1 krb5-1.6.3-133.49.66.1 krb5-32bit-1.6.3-133.49.66.1 krb5-client-1.6.3-133.49.66.1 krb5-apps-clients-1.6.3-133.49.66.1 krb5-apps-servers-1.6.3-133.49.66.1 krb5-doc-1.6.3-133.49.66.1 krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 krb5-x86-1.6.3-133.49.66.1 krb5-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 krb5-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 krb5-client-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 krb5-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-apps-clients-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-apps-servers-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-client-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-doc-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-server-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-x86-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3 krb5-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-apps-clients-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-apps-servers-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-client-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-doc-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-server-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-x86-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA krb5-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-apps-clients-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-apps-servers-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-client-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-doc-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-server-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-x86-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 krb5-devel-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 krb5-devel-32bit-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 krb5-server-1.6.3-133.49.66.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind. CVE-2014-5352 SUSE Linux Enterprise Desktop 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Desktop 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Desktop 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-devel-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-devel-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-server-1.6.3-133.49.66.1 moderate 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150257-1/ https://www.suse.com/security/cve/CVE-2014-5352.html CVE-2014-5352 https://bugzilla.suse.com/1005509 SUSE Bug 1005509 https://bugzilla.suse.com/770172 SUSE Bug 770172 https://bugzilla.suse.com/912002 SUSE Bug 912002 The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via malformed XDR data, as demonstrated by data sent to kadmind. CVE-2014-9421 SUSE Linux Enterprise Desktop 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Desktop 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Desktop 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-devel-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-devel-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-server-1.6.3-133.49.66.1 moderate 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150257-1/ https://www.suse.com/security/cve/CVE-2014-9421.html CVE-2014-9421 https://bugzilla.suse.com/1005509 SUSE Bug 1005509 https://bugzilla.suse.com/770172 SUSE Bug 770172 https://bugzilla.suse.com/912002 SUSE Bug 912002 The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal. CVE-2014-9422 SUSE Linux Enterprise Desktop 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Desktop 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Desktop 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-devel-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-devel-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-server-1.6.3-133.49.66.1 moderate 4.6 AV:N/AC:H/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150257-1/ https://www.suse.com/security/cve/CVE-2014-9422.html CVE-2014-9422 https://bugzilla.suse.com/1005509 SUSE Bug 1005509 https://bugzilla.suse.com/770172 SUSE Bug 770172 https://bugzilla.suse.com/912002 SUSE Bug 912002 The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive information from process heap memory by sniffing the network for data in a handle field. CVE-2014-9423 SUSE Linux Enterprise Desktop 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Desktop 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Desktop 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server 11 SP3:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-apps-clients-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-apps-servers-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-client-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-doc-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-plugin-kdb-ldap-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-plugin-preauth-pkinit-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-server-1.6.3-133.49.66.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:krb5-x86-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-devel-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-devel-32bit-1.6.3-133.49.66.1 SUSE Linux Enterprise Software Development Kit 11 SP3:krb5-server-1.6.3-133.49.66.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150257-1/ https://www.suse.com/security/cve/CVE-2014-9423.html CVE-2014-9423 https://bugzilla.suse.com/1005509 SUSE Bug 1005509 https://bugzilla.suse.com/912002 SUSE Bug 912002