[CLSA-2025:1740132301] krb5: Fix of CVE-2024-3596
Type:
security
Severity:
Critical
Release date:
2025-02-21 10:05:07 UTC
Description:
- CVE-2024-3596: Generate and verify message MACs in libkrad for vulnerability in RADIUS protocol which allows attackers to forge authentication responses
Updated packages:
  • krb5-devel-1.18.2-14.el8.tuxcare.els4.i686.rpm
    sha:67b3fa52641b7a9b71c0640a58d4475fb9a40d3cf38e1c7917e177d9a260745a
  • krb5-devel-1.18.2-14.el8.tuxcare.els4.x86_64.rpm
    sha:9f055a3d0980a5569ed9cfde474b6643cb07efd2fad92d5566998e452bd2f483
  • krb5-libs-1.18.2-14.el8.tuxcare.els4.i686.rpm
    sha:fc00f6fbf69d4f2e86829f2bef2102bf14eeeda093deea3168303a25b504f23b
  • krb5-libs-1.18.2-14.el8.tuxcare.els4.x86_64.rpm
    sha:1015b73f281b859e4e3da2923bf98bcab850dddb5186f1ddd5337d833b527c65
  • krb5-pkinit-1.18.2-14.el8.tuxcare.els4.i686.rpm
    sha:52b5613a25b12624144cdcea98b8d6093c31a0ccdc68f785561d15440a2aff0c
  • krb5-pkinit-1.18.2-14.el8.tuxcare.els4.x86_64.rpm
    sha:8780206ed3a9824e28263e7acd44e70699e3ac85932137623b8be756e1a3ae5b
  • krb5-server-1.18.2-14.el8.tuxcare.els4.i686.rpm
    sha:4bd0a813281b39f88b9fff6bab867ea9f2e2e6c724eee9a9db20f86b4cd7b7c6
  • krb5-server-1.18.2-14.el8.tuxcare.els4.x86_64.rpm
    sha:a766368f0252e39dda732ca1e88da6da4e3e4d9d7dbe3ba51c1c1260fe2bf408
  • krb5-server-ldap-1.18.2-14.el8.tuxcare.els4.i686.rpm
    sha:b5b04e4d0b13c336d17838ab2769a654d31275211df3e91b57590d7f39b9e1f5
  • krb5-server-ldap-1.18.2-14.el8.tuxcare.els4.x86_64.rpm
    sha:a888bc5c58f2bc21742a12b0d08a706d1a28366f2531ce49196e6f3173eade1c
  • krb5-workstation-1.18.2-14.el8.tuxcare.els4.i686.rpm
    sha:e3dc186324ea4aa531617c66616f417e709edea37ad42f9ec8aba773588f0411
  • krb5-workstation-1.18.2-14.el8.tuxcare.els4.x86_64.rpm
    sha:93abdd0b1f3204c2b25a5fd7c14a6991e70fe043002b0e51c65a601fbef31f72
  • libkadm5-1.18.2-14.el8.tuxcare.els4.i686.rpm
    sha:fb97332a2c970486d31b3c7db218b26daa1ca0b907fac738db173025d48e4c9a
  • libkadm5-1.18.2-14.el8.tuxcare.els4.x86_64.rpm
    sha:20b7545a1db92c4e7ea4ab8444d99a0eb2710ec7ab246b92a43662f8d161b8bd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.