High RHSA-2022:8641 1 CVE

Red Hat Security Advisory: krb5 security update

Published Sep 16, 2024 · Updated Dec 27, 2025

Ecosystem: Red Hat

Fixed packages 17

Release	Package	Fixed in
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-debuginfo	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-debugsource	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-devel	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-devel-debuginfo	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-libs	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-libs-debuginfo	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-pkinit	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-pkinit-debuginfo	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-server	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-server-debuginfo	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-server-ldap	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-server-ldap-debuginfo	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-workstation	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	krb5-workstation-debuginfo	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	libkadm5	0:1.17-10.el8_1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::baseos	libkadm5-debuginfo	0:1.17-10.el8_1

Vulnerabilities 1

High 8.8

CVE-2022-42898

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to …

samba krb5 samba samba Debian Ubuntu Azure Linux Alpine

Dec 25, 2022

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2140960
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8641.json
report
https://access.redhat.com/security/cve/CVE-2022-42898
advisory
https://www.cve.org/CVERecord?id=CVE-2022-42898
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-42898
article
https://mailman.mit.edu/pipermail/krbdev/2022-November/013576.html