krb5-1.15.1-37.el7

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

This update fixes the following bugs:

* Previously, the krb5 MEMORY caches were not completely thread-safe. As a consequence, multi-threaded access terminated unexpectedly in some cases. With this update, the MEMORY caches are cleaned up to be more thread-safe. As a result, no more crashes occur. (BZ#1657890)

* Previously, Asianux Server 7.6 build of the krb5 system increased compliance with FIPS-140. As a consequence, certain previously permitted configurations that were prohibited by FIPS-140 stopped working. with this update, the changes have been reverted, because krb5 only needs to work in the FIPS mode, not be FIPS compliant. As a result, RHEL 7.6.z should work in the same way RHEL 7.5 did.

Please note that Red hat Enterprise Linux 8 does not support these configurations at the moment. (BZ#1659497)

Users of krb5 are advised to upgrade to these updated packages, which fix these bugs.