Synopsis:          Moderate: krb5 security, bug fix, and enhancement update
Advisory ID:       SLSA-2018:0666-1
Issue Date:        2018-04-10
CVE Numbers:       CVE-2017-11368
                   CVE-2017-7562
--

Security Fix(es):

* krb5: Authentication bypass by improper validation of certificate EKU
and SAN (CVE-2017-7562)

* krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure
(CVE-2017-11368)

Additional Changes:
--

SL7
  x86_64
    krb5-debuginfo-1.15.1-18.el7.i686.rpm
    krb5-debuginfo-1.15.1-18.el7.x86_64.rpm
    krb5-libs-1.15.1-18.el7.i686.rpm
    krb5-libs-1.15.1-18.el7.x86_64.rpm
    krb5-pkinit-1.15.1-18.el7.x86_64.rpm
    krb5-workstation-1.15.1-18.el7.x86_64.rpm
    libkadm5-1.15.1-18.el7.i686.rpm
    libkadm5-1.15.1-18.el7.x86_64.rpm
    krb5-devel-1.15.1-18.el7.i686.rpm
    krb5-devel-1.15.1-18.el7.x86_64.rpm
    krb5-server-1.15.1-18.el7.x86_64.rpm
    krb5-server-ldap-1.15.1-18.el7.x86_64.rpm

- Scientific Linux Development Team