[CLSA-2026:1792592896] krb5: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-21 14:28:28 UTC
Description:
- CVE-2026-40355: NULL pointer dereference in parse_nego_message() - CVE-2026-40356: integer underflow and out-of-bounds read in parse_message()
CVEs fixed:
Updated packages:
  • krb5-devel-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:22b1f0653e333fde491b7487ae6e057b0054632597cfc3396f98ba161910c11c
  • krb5-devel-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:01b65772eb30e0a4bf96d1522bcbd53be484530bf3186bc8b43fbbf62a390dbf
  • krb5-libs-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:778a2b4ac124a679a8331fb81825c6eed9dbba7f3aeae979d0318d65bc38c5e4
  • krb5-libs-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:2afe6a409dbd362a643f12f940c03bebece3f7fafb3f6585377a064af687dbdd
  • krb5-pkinit-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:ef4d31f1bda7969742671a15eaf660491db80cfb2e77fe22561d44ee92df01e1
  • krb5-pkinit-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:bf0de6d2d80003a6f4d2cf41e35686eb415b673f55dfd76625b458cc61bfc7f3
  • krb5-server-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:2f879f417444d9e24f2e24e9cc825efdfee2cc490a16ac9e2f9ac4190b433196
  • krb5-server-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:5db4c1a5b44142bf33a7cfe1181cc2d2d09c49ba7f4e05076e34f674a92e2437
  • krb5-server-ldap-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:84ab19a1467b8f8d7b96c6481527876b9fd462c7f21ddd153bbe778b2b20d506
  • krb5-server-ldap-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:7db059a19d43ae41f75d930b6ed2fb9a80948fbb688d8a7a56d389cf3897cc21
  • krb5-workstation-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:7a0b9cb33859d64facfce2c9bb1346d2dea892faaba8f0b2b02052fa7da66e2b
  • krb5-workstation-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:69c81d9632e98dbe8d97ae9d25afbecf41272c736c7be0cd01abcb99a408cd07
  • libkadm5-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:c0ef9407ad9874a858c343858458d6809f066160f2cf1875b2c9951b40c523c2
  • libkadm5-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:e6382fe040192fc2376a84759bd5f9615d02cc3f8105300a25dfea601c2d30f2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.