Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-26461: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. CVE-2024-26458: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | krb5-debuginfo | 0:1.15.1-55.amzn2.2.7 |
| Amazon Linux · 2 | krb5-devel | 0:1.15.1-55.amzn2.2.7 |
| Amazon Linux · 2 | krb5-libs | 0:1.15.1-55.amzn2.2.7 |
| Amazon Linux · 2 | krb5-pkinit | 0:1.15.1-55.amzn2.2.7 |
| Amazon Linux · 2 | krb5-server | 0:1.15.1-55.amzn2.2.7 |
| Amazon Linux · 2 | krb5-server-ldap | 0:1.15.1-55.amzn2.2.7 |
| Amazon Linux · 2 | krb5-workstation | 0:1.15.1-55.amzn2.2.7 |
| Amazon Linux · 2 | libkadm5 | 0:1.15.1-55.amzn2.2.7 |
Vulnerabilities 2
-
High 7.5
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
-
Medium 5.3
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.