High ELSA-2022-8640 1 CVE

Important: krb5 security update (Oracle Linux 7)

Published Nov 29, 2022 · Updated Nov 29, 2022

Ecosystem: Oracle Linux

Summary

[1.15.1-55.0.1]
- Add recursion limit for ASN.1 indefinite lengths [Orabug: 32582360]

[1.15.1-55]
- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	krb5-devel	0:1.15.1-55.0.1.el7_9
Oracle Linux · 7	krb5-libs	0:1.15.1-55.0.1.el7_9
Oracle Linux · 7	krb5-pkinit	0:1.15.1-55.0.1.el7_9
Oracle Linux · 7	krb5-server	0:1.15.1-55.0.1.el7_9
Oracle Linux · 7	krb5-server-ldap	0:1.15.1-55.0.1.el7_9
Oracle Linux · 7	krb5-workstation	0:1.15.1-55.0.1.el7_9
Oracle Linux · 7	libkadm5	0:1.15.1-55.0.1.el7_9

Vulnerabilities 1

High 8.8

CVE-2022-42898

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to …

samba krb5 samba samba Debian Ubuntu Azure Linux Alpine

Dec 25, 2022