Summary
[1.18.2-27.0.1]
- Fixed race condition in krb5_set_password() [Orabug: 33609767]
[1.18.2-27]
- Fix memory leak in GSSAPI interface
Resolves: RHEL-27250
- Fix memory leak in PMAP RPC interface
Resolves: RHEL-27244
- Make TCP waiting time configurable
Resolves: RHEL-17131
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | krb5-devel | 0:1.18.2-27.0.1.el8_10 |
| Oracle Linux · 8 | krb5-libs | 0:1.18.2-27.0.1.el8_10 |
| Oracle Linux · 8 | krb5-pkinit | 0:1.18.2-27.0.1.el8_10 |
| Oracle Linux · 8 | krb5-server | 0:1.18.2-27.0.1.el8_10 |
| Oracle Linux · 8 | krb5-server-ldap | 0:1.18.2-27.0.1.el8_10 |
| Oracle Linux · 8 | krb5-workstation | 0:1.18.2-27.0.1.el8_10 |
| Oracle Linux · 8 | libkadm5 | 0:1.18.2-27.0.1.el8_10 |
Vulnerabilities 2
-
High 7.5
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
-
Medium 5.3
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.