High ELSA-2022-8637 1 CVE

Important: krb5 security update (Oracle Linux 9)

Published Nov 29, 2022 · Updated Nov 29, 2022

Ecosystem: Oracle Linux

Summary

[1.19.1-24.0.1]
- Fixed race condition in krb5_set_password() [Orabug: 33609767]

[1.19.1-24]
- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140970

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 9	krb5-devel	0:1.19.1-24.0.1.el9_1
Oracle Linux · 9	krb5-libs	0:1.19.1-24.0.1.el9_1
Oracle Linux · 9	krb5-pkinit	0:1.19.1-24.0.1.el9_1
Oracle Linux · 9	krb5-server	0:1.19.1-24.0.1.el9_1
Oracle Linux · 9	krb5-server-ldap	0:1.19.1-24.0.1.el9_1
Oracle Linux · 9	krb5-workstation	0:1.19.1-24.0.1.el9_1
Oracle Linux · 9	libkadm5	0:1.19.1-24.0.1.el9_1

Vulnerabilities 1

High 8.8

CVE-2022-42898

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to …

samba krb5 samba samba Debian Ubuntu Azure Linux Alpine

Dec 25, 2022