Summary
[1.21.1-6.0.1]
- Fixed race condition in krb5_set_password() [Orabug: 33609767]
[1.21.1-6]
- Prevent overflow when calculating ulog block size (CVE-2025-24528)
Resolves: RHEL-76759
[1.21.1-5]
- Support PKCS11 EC client certs in PKINIT
Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
Resolves: RHEL-4902
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | krb5-devel | 0:1.21.1-6.0.1.el9 |
| Oracle Linux · 9 | krb5-libs | 0:1.21.1-6.0.1.el9 |
| Oracle Linux · 9 | krb5-pkinit | 0:1.21.1-6.0.1.el9 |
| Oracle Linux · 9 | krb5-server | 0:1.21.1-6.0.1.el9 |
| Oracle Linux · 9 | krb5-server-ldap | 0:1.21.1-6.0.1.el9 |
| Oracle Linux · 9 | krb5-workstation | 0:1.21.1-6.0.1.el9 |
| Oracle Linux · 9 | libkadm5 | 0:1.21.1-6.0.1.el9 |
Vulnerabilities 1
-
High 7.1
In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large updat…