Summary
[1.18.2-8]
- Add recursion limit for ASN.1 indefinite lengths (CVE-2020-28196)
- Resolves: #1906492
[1.18.2-7]
- Document -k option in kvno(1) synopsis
- Resolves: #1869055
[1.18.2-6]
- Enable MD5 override for FIPS RADIUS
- Resolves: #1872689
[1.18.2-5.2]
- Unify kvno option documentation
- Resolves: #1869055
[1.18.2-5.1]
- Fix upstream URLs in spec file
- Resolves: #1868039
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | krb5-devel | 0:1.18.2-8.el8 |
| Oracle Linux · 8 | krb5-libs | 0:1.18.2-8.el8 |
| Oracle Linux · 8 | krb5-pkinit | 0:1.18.2-8.el8 |
| Oracle Linux · 8 | krb5-server | 0:1.18.2-8.el8 |
| Oracle Linux · 8 | krb5-server-ldap | 0:1.18.2-8.el8 |
| Oracle Linux · 8 | krb5-workstation | 0:1.18.2-8.el8 |
| Oracle Linux · 8 | libkadm5 | 0:1.18.2-8.el8 |
Vulnerabilities 1
-
High 7.5
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerber…