CVE-2016-3119, NULL dereference in LDAP module.
Fix an issue with return codes on gss_inquire_attrs_for_mech. This resolves an issue with gss-ntlmssp, and anything else that is interposing but not implementing the corresponding mechglue function.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2016-56840babc3Please login to add feedback.
This update has been submitted for testing by rharwood.
This update has been pushed to testing.
This update has obsoleted krb5-1.14.1-2.fc23, and has inherited its bugs and notes.
works for me
This update has been submitted for stable by bodhi.
Works here (x86_64: krb5/ldap, i686: AD).
This update has been pushed to stable.