High ALAS2-2023-1915 1 CVE

Important: krb5 security update (Amazon Linux 2)

Published Jan 18, 2023 · Updated Jan 20, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-42898: Integer overflow vulnerabilities in PAC parsing

Fixed packages 8

Release	Package	Fixed in
Amazon Linux · 2	krb5-debuginfo	0:1.15.1-55.amzn2.2.5
Amazon Linux · 2	krb5-devel	0:1.15.1-55.amzn2.2.5
Amazon Linux · 2	krb5-libs	0:1.15.1-55.amzn2.2.5
Amazon Linux · 2	krb5-pkinit	0:1.15.1-55.amzn2.2.5
Amazon Linux · 2	krb5-server	0:1.15.1-55.amzn2.2.5
Amazon Linux · 2	krb5-server-ldap	0:1.15.1-55.amzn2.2.5
Amazon Linux · 2	krb5-workstation	0:1.15.1-55.amzn2.2.5
Amazon Linux · 2	libkadm5	0:1.15.1-55.amzn2.2.5

Vulnerabilities 1

High 8.8

CVE-2022-42898

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to …

samba krb5 samba samba Debian Ubuntu Azure Linux Alpine

Dec 25, 2022

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-42898.html