Skip to content
OpenAdvisories
High RHSA-2023:6699 2 CVEs

Red Hat Security Advisory: krb5 security and bug fix update

Published Sep 16, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream krb5-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream krb5-debugsource 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream krb5-devel 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream krb5-libs-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream krb5-pkinit-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream krb5-server-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream krb5-server-ldap-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream krb5-workstation-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libkadm5-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-debugsource 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-libs 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-libs-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-pkinit 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-pkinit-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-server 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-server-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-server-ldap 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-server-ldap-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-workstation 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos krb5-workstation-debuginfo 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos libkadm5 0:1.21.1-1.el9
Red Hat · RHEL 9 enterprise_linux:9::baseos libkadm5-debuginfo 0:1.21.1-1.el9

Vulnerabilities 2

  • High 8.8
    CVE-2023-39975

    kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticate…

  • Unscored —
    CVE-2023-36054

    lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized poi…

    krb5 krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2060421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2155607
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2178298
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2187722
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2230178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2232682
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6699.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-36054
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-36054
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-36054
  • article
    https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd
  • article
    https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final
  • article
    https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final
  • article
    https://web.mit.edu/kerberos/www/advisories/
  • report
    https://access.redhat.com/security/cve/CVE-2023-39975
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-39975
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-39975
  • article
    https://github.com/krb5/krb5/commit/88a1701b423c13991a8064feeb26952d3641d840