UbuntuUpdates.org

Package "krb5"

Name: krb5

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • MIT Kerberos master server (kadmind)
  • MIT Kerberos GSS Sample applications
  • TLS plugin for MIT Kerberos
  • MIT Kerberos key server (KDC)
Latest version: 1.17-6ubuntu4.7
Release: focal (20.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "krb5" in Focal

Repository Area Version
base main 1.17-6ubuntu4
base universe 1.17-6ubuntu4
security main 1.17-6ubuntu4.6
security universe 1.17-6ubuntu4.6
updates main 1.17-6ubuntu4.7

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.17-6ubuntu4.1 2020-11-17 17:07:19 UTC

  krb5 (1.17-6ubuntu4.1) focal-security; urgency=medium

  * SECURITY UPDATE: Unbounded recursion
    - debian/patches/CVE-2020-28196.patch: adds recursion limit for ASN.1
      indefinite lenghts in src/lib/krb5/asn.1/asn1_encode.c.
    - CVE-2020-28196

 -- <email address hidden> (Leonidas S. Barbosa) Wed, 11 Nov 2020 11:23:12 -0300
CVE-2020-28196 MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb


About   -   Send Feedback to @ubuntu_updates