High ELSA-2022-8638 1 CVE

Important: krb5 security update (Oracle Linux 8)

Published Nov 28, 2022 · Updated Nov 28, 2022

Ecosystem: Oracle Linux

Summary

[1.18.2-22.0.1]
- Fixed race condition in krb5_set_password() [Orabug: 33609767]

[1.]
- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140967

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 8	krb5-devel	0:1.18.2-22.0.1.el8_7
Oracle Linux · 8	krb5-libs	0:1.18.2-22.0.1.el8_7
Oracle Linux · 8	krb5-pkinit	0:1.18.2-22.0.1.el8_7
Oracle Linux · 8	krb5-server	0:1.18.2-22.0.1.el8_7
Oracle Linux · 8	krb5-server-ldap	0:1.18.2-22.0.1.el8_7
Oracle Linux · 8	krb5-workstation	0:1.18.2-22.0.1.el8_7
Oracle Linux · 8	libkadm5	0:1.18.2-22.0.1.el8_7

Vulnerabilities 1

High 8.8

CVE-2022-42898

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to …

samba krb5 samba samba Debian Ubuntu Azure Linux Alpine

Dec 25, 2022