Medium ELSA-2025-1352 1 CVE

Moderate: krb5 security update (Oracle Linux 7)

Published Mar 6, 2025 · Updated Mar 6, 2025

Ecosystem: Oracle Linux

Summary

[1.15.1-55.0.9]
- Fixes CVE-2025-24528 , Prevent overflow when calculating ulog block size [Orabug: 37587301]

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	krb5-devel	0:1.15.1-55.0.9.el7_9
Oracle Linux · 7	krb5-libs	0:1.15.1-55.0.9.el7_9
Oracle Linux · 7	krb5-pkinit	0:1.15.1-55.0.9.el7_9
Oracle Linux · 7	krb5-server	0:1.15.1-55.0.9.el7_9
Oracle Linux · 7	krb5-server-ldap	0:1.15.1-55.0.9.el7_9
Oracle Linux · 7	krb5-workstation	0:1.15.1-55.0.9.el7_9
Oracle Linux · 7	libkadm5	0:1.15.1-55.0.9.el7_9

Vulnerabilities 1

High 7.1

CVE-2025-24528

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large updat…

MIT Kerberos 5 krb5 krb5 Debian Ubuntu Azure Linux

Jan 16, 2026