krb5 - MIT Kerberos5 implementation

Property Value
Distribution openSUSE Leap 15.0
Repository openSUSE Update Oss all
Package filename krb5-1.15.2-lp150.5.3.1.x86_64.rpm
Package name krb5
Package version 1.15.2
Package release lp150.5.3.1
Package architecture x86_64
Package type rpm
Category Productivity/Networking/Security
License MIT
Maintainer -
Download size 618.84 KB
Installed size 1.82 MB
Kerberos V5 is a trusted-third-party network authentication system,
which can improve network security by eliminating the insecure
practice of clear text passwords.


Package Version Architecture Repository
krb5-1.15.2-lp150.5.6.1.x86_64.rpm 1.15.2 x86_64 openSUSE Update Oss
krb5-1.15.2-lp150.4.4.x86_64.rpm 1.15.2 x86_64 openSUSE Oss
krb5 - - -


Name Value
/sbin/ldconfig - - - - - - - - - - - - - -


Name Value
config(krb5) = 1.15.2-lp150.5.3.1
krb5 = 1.15.2-lp150.5.3.1
krb5(x86-64) = 1.15.2-lp150.5.3.1 - - - - - - - - - - - - - - - - - - - - - - - - - - -


Name Value
krb5-mini -


Name Value
krb5-plugin-preauth-pkinit-nss -


Type URL
Binary Package krb5-1.15.2-lp150.5.3.1.x86_64.rpm
Source Package krb5-1.15.2-lp150.5.3.1.src.rpm

Install Howto

Install krb5 rpm package:

# zypper install krb5




2019-01-08 - Samuel Cabrero <>
- Remove incorrect KDC assertion; (CVE-2018-20217); (bsc#1120489);
- Added patches:
* 0010-Remove-incorrect-KDC-assertion.patch
2017-11-23 -
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
2017-11-06 -
- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
python-libxml2, python-lxml, most of which are python 2 programs.
Consequently remove -doc subpackage. Users are encouraged to use
online documentation. (bsc#1066461)
2017-10-02 -
- Update package descriptions.
2017-09-25 -
- Upgrade to 1.15.2
* Fix a KDC denial of service vulnerability caused by unset status
strings [CVE-2017-11368]
* Preserve GSS contexts on init/accept failure [CVE-2017-11462]
* Fix kadm5 setkey operation with LDAP KDB module
* Use a ten-second timeout after successful connection for HTTPS KDC
requests, as we do for TCP requests
* Fix client null dereference when KDC offers encrypted challenge
without FAST
* Ignore dotfiles when processing profile includedir directive
* Improve documentation
2017-08-18 -
- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
in order to improve client security in handling service principle
names. (bsc#1054028)
2017-08-11 -
- Prevent kadmind.service startup failure caused by absence of
LDAP service. (bsc#903543)
2017-06-06 -
- There is no change made about the package itself, this is only
copying over some changelog texts from SLE package:
- bug#918595 owned by VUL-0: CVE-2014-5355
krb5: denial of service in krb5_read_message
- bug#912002 owned by VUL-0
CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by VUL-1
CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by VUL-0
CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
to requires_preauth bypass
- bug#910457 owned by VUL-1
CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
name as a password policy name
- bug#991088 owned by VUL-1
CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by krb5: bogus prerequires
- [fate#320326](
- bug#982313 owned by Doxygen unable to resolve reference
from \cite
2017-04-06 -
- Remove wrong PreRequires from krb5
2017-03-09 -
- use HTTPS project and source URLs

See Also

Package Description
krb5-32bit-1.15.2-lp150.5.3.1.x86_64.rpm MIT Kerberos5 implementation
krb5-32bit-1.15.2-lp150.5.6.1.x86_64.rpm MIT Kerberos5 implementation
krb5-client-1.15.2-lp150.5.3.1.x86_64.rpm Client programs of the MIT Kerberos5 implementation
krb5-client-1.15.2-lp150.5.6.1.x86_64.rpm Client programs of the MIT Kerberos5 implementation
krb5-devel-1.15.2-lp150.5.3.1.x86_64.rpm Development files for MIT Kerberos5
krb5-devel-1.15.2-lp150.5.6.1.x86_64.rpm Development files for MIT Kerberos5
krb5-devel-32bit-1.15.2-lp150.5.3.1.x86_64.rpm Development files for MIT Kerberos5
krb5-devel-32bit-1.15.2-lp150.5.6.1.x86_64.rpm Development files for MIT Kerberos5
krb5-mini-1.15.2-lp150.5.3.1.x86_64.rpm MIT Kerberos5 implementation and libraries with minimal dependencies
krb5-mini-1.15.2-lp150.5.6.1.x86_64.rpm MIT Kerberos5 implementation and libraries with minimal dependencies
krb5-mini-devel-1.15.2-lp150.5.3.1.x86_64.rpm Development files for MIT Kerberos5 (openSUSE mini variant)
krb5-mini-devel-1.15.2-lp150.5.6.1.x86_64.rpm Development files for MIT Kerberos5 (openSUSE mini variant)
krb5-plugin-kdb-ldap-1.15.2-lp150.5.3.1.x86_64.rpm LDAP database plugin for MIT Kerberos5
krb5-plugin-kdb-ldap-1.15.2-lp150.5.6.1.x86_64.rpm LDAP database plugin for MIT Kerberos5
krb5-plugin-preauth-otp-1.15.2-lp150.5.3.1.x86_64.rpm OTP preauthentication plugin for MIT Kerberos5