[CLSA-2026:1794628354] krb5: Fix of 10 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-14 03:52:49 UTC
Description:
- Fix CVE-2026-71199: reject unkeyed checksums in CAMMAC verifiers - Fix CVE-2026-71200: prevent null dereference in PKINIT CMS processing - Fix CVE-2026-112320: release RPCSEC_GSS context when a client switches auth flavor - Fix CVE-2026-112314: free RPC reply verifier between clnttcp_call() retries - Fix CVE-2026-112321: free AUTH_GSSAPI call arguments on all exit paths - Fix CVE-2026-107364: prevent KDC read overrun in fetch_asn1_field() - Fix CVE-2026-112322 CVE-2026-112323: disable the AUTH_GSSAPI RPC flavor unless GSSRPC_ALLOW_AUTH_GSSAPI is set - Fix CVE-2026-118380: use the verified RPCSEC_GSS service level for each call - Fix CVE-2026-119079: avoid quadratic reallocation when decoding ASN.1 sequences
CVEs fixed:
Updated packages:
  • krb5-devel-1.15.1-55.0.11.el7_9.99.tuxcare.els3.i686.rpm
    sha:536396e69f04d0de004146f9da7d182d5c59dfbd85072f49add11cdd8c28a263
  • krb5-devel-1.15.1-55.0.11.el7_9.99.tuxcare.els3.x86_64.rpm
    sha:3b7f09819ec1497236879236448cfb673390170477c1d422a4b0e6620b736e91
  • krb5-libs-1.15.1-55.0.11.el7_9.99.tuxcare.els3.i686.rpm
    sha:26deecbaf49255b3e145aa27050139d0600c3cbd6c55727c36b4dfe787e5b24b
  • krb5-libs-1.15.1-55.0.11.el7_9.99.tuxcare.els3.x86_64.rpm
    sha:741f36f8947a485a4f728d4e56a686990ecac442bd3ada1032672dbcf89c00e7
  • krb5-pkinit-1.15.1-55.0.11.el7_9.99.tuxcare.els3.i686.rpm
    sha:be02ae8ee878f8c4882785dc377286752c7ce2604e874a55d5727cb89f002ae0
  • krb5-pkinit-1.15.1-55.0.11.el7_9.99.tuxcare.els3.x86_64.rpm
    sha:bc0622785a1c68f063c314ba3e07be5399dbf120e1a42e666694bb2d65c9acb7
  • krb5-server-1.15.1-55.0.11.el7_9.99.tuxcare.els3.i686.rpm
    sha:5111e5489bc39da9e84d9f2e1f899b3619349baddd0a6aa0a84957fa300072eb
  • krb5-server-1.15.1-55.0.11.el7_9.99.tuxcare.els3.x86_64.rpm
    sha:012b6b734e872c40beb51c7b7f8eb205167452666c1c9147d438d394bb685d89
  • krb5-server-ldap-1.15.1-55.0.11.el7_9.99.tuxcare.els3.i686.rpm
    sha:601590b7dc3c2c4333e13469d91e0f38b9176a0160630d5f52bd3738e0c3d10e
  • krb5-server-ldap-1.15.1-55.0.11.el7_9.99.tuxcare.els3.x86_64.rpm
    sha:9d1cd5011ecee580e395788e1e2b3ce5f81a6c1597f773309be37af5724309cf
  • krb5-workstation-1.15.1-55.0.11.el7_9.99.tuxcare.els3.i686.rpm
    sha:bcdb1b6dd75971156e6325f75ad2fce5f34ca755d8a6088c19b22696a160532c
  • krb5-workstation-1.15.1-55.0.11.el7_9.99.tuxcare.els3.x86_64.rpm
    sha:931d32d8bfc0d73517c484fdc93cd88a586726295e6eda551f90a7a3ccad2cf2
  • libkadm5-1.15.1-55.0.11.el7_9.99.tuxcare.els3.i686.rpm
    sha:bdc81c49df3b4c911237dc3940e57644c1ffd7850a5f48e774b1868e33c70fbf
  • libkadm5-1.15.1-55.0.11.el7_9.99.tuxcare.els3.x86_64.rpm
    sha:3af81a1172a4dae66c913ec2d48fdc793d337415a1517dde7eaf30802c21362c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.