[CLSA-2026:1792593112] krb5: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-21 14:32:05 UTC
Description:
- CVE-2026-40355: NULL pointer dereference in parse_nego_message() - CVE-2026-40356: integer underflow and out-of-bounds read in parse_message()
CVEs fixed:
Updated packages:
  • krb5-devel-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:c962deb77096dc6cd0adde6006ee1729f6b0ddffb97fb1619027f3bbe2835b68
  • krb5-devel-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:52c90283de6a750f2218d46bb1bbf1c4190b3c409657abb24ca0a0d579e17b7b
  • krb5-libs-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:b8cbadd164a6fc1a3dc42117fbd47f915ac7272294065344d1c7dfaf55491efa
  • krb5-libs-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:f416ba0502a8fb281abffaffeee606c959710c90a84e7d187f8d1cf6dd12e4cb
  • krb5-pkinit-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:3210ed66adc86736a3f92d568383dcb79fb1d34b06b321da96d938f916e6ac2c
  • krb5-pkinit-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:160bd45cd4113450891781066e4424fb6666538a88cd559247b50ff278ad2ced
  • krb5-server-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:0762695d4ef4db1e4884a0b51e435ae5c1baa4afc3ce24937b76c29ff5ed18c9
  • krb5-server-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:8f9637859a260414cc107893eb7f762fb9a43dd7a49fad03f2962d0ef31eee0e
  • krb5-server-ldap-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:8463d121bc9ee5df1308674f940d62a0b84fbc42ff0dbe2d794a0f2d7de0bcee
  • krb5-server-ldap-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:4788e34fb22ffbf3025e58e9dcce2bae6390106a8140171ae405da0357bdc3ac
  • krb5-workstation-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:f5e7e3cb488ea264e791394ad263730a10f7cace735665a7e842278c7c486fb7
  • krb5-workstation-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:8f0decb8c41c28033bad81e1a1b236f7044dca19ca992e37c8ee2120dbbc41b7
  • libkadm5-1.18.2-14.el8.tuxcare.els7.i686.rpm
    sha:3c742d445eb58ef82e2603ddefd40e11c3df8669f1503f0b67fc6e5aa085e8d3
  • libkadm5-1.18.2-14.el8.tuxcare.els7.x86_64.rpm
    sha:8f45a860267a647b2cfc163c969a155409ec236a5ce37c5647afcf55544b5359
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.