[CLSA-2026:1780398100] krb5: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-06-02 11:01:54 UTC
Description:
- CVE-2026-40355: fix NULL pointer dereference in NegoEx parse_nego_message() - CVE-2026-40356: fix integer underflow and OOB read in NegoEx parse_message()
CVEs fixed:
Updated packages:
  • krb5-devel-1.21.1-8.el9_6.tuxcare.els1.i686.rpm
    sha:dee6af6acbe449d7af2a7f8be12e86e1e3ff9bf06d90795942f8650b209ee44c
  • krb5-devel-1.21.1-8.el9_6.tuxcare.els1.x86_64.rpm
    sha:3e84ba96900f7b07e771583ad14cbe76e80be915ab3261c0210808031ef3f3e4
  • krb5-libs-1.21.1-8.el9_6.tuxcare.els1.i686.rpm
    sha:cd7bc8ab9ba067bce6ef043c4eafacb5f52c0b1e7dca3804abf4bf9447a6deba
  • krb5-libs-1.21.1-8.el9_6.tuxcare.els1.x86_64.rpm
    sha:d4c8343761ced74119c6646f8b2cc653e2541458ffabad788ed812fe669050a8
  • krb5-pkinit-1.21.1-8.el9_6.tuxcare.els1.i686.rpm
    sha:cf05604974266faafca1f2549ee7a69e1d61ce50387d40419a408c390b65464b
  • krb5-pkinit-1.21.1-8.el9_6.tuxcare.els1.x86_64.rpm
    sha:03fcefc07ca80bd4044b6dd75cda3db988b9cd528742a9d5f7ff12795d0f6b14
  • krb5-server-1.21.1-8.el9_6.tuxcare.els1.i686.rpm
    sha:2a4edb120780dccd6325ef7f0b838039bbcbd6fae8657889bc5f9ee5591105f9
  • krb5-server-1.21.1-8.el9_6.tuxcare.els1.x86_64.rpm
    sha:7f0faf9dede4e09f96febe8b0a6e7762492500bd0bdafae9c70dc4f3d38a03dd
  • krb5-server-ldap-1.21.1-8.el9_6.tuxcare.els1.i686.rpm
    sha:3e755a1b85c7aa7267b5a0589cb839c8b4d6de28df6f3079d60e7aff23a8c2f5
  • krb5-server-ldap-1.21.1-8.el9_6.tuxcare.els1.x86_64.rpm
    sha:5ccdf721f255900afc0277ad080cae2c18e1c7c4b3d7783aa1c1522198c9668c
  • krb5-tests-1.21.1-8.el9_6.tuxcare.els1.x86_64.rpm
    sha:4a357d6d07fc52e3437a9da10f32f6b7216f801e36841e679ef1d206c3c1400b
  • krb5-workstation-1.21.1-8.el9_6.tuxcare.els1.x86_64.rpm
    sha:9e8653ff8a6dc721659557968c3582cab01e1b4e9a911ed78d85642cc63cf1f7
  • libkadm5-1.21.1-8.el9_6.tuxcare.els1.i686.rpm
    sha:f158c1b5650777a7224b92a89107f361c20d345b2bbf0adf271577cceed659c6
  • libkadm5-1.21.1-8.el9_6.tuxcare.els1.x86_64.rpm
    sha:ffb0d5353a8afde2d2e1c6f9a015c7fdd5b5ca314cac870a2b2c4ccdf238b450
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.