[CLSA-2026:1794452506] Fix of 10 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-12 03:02:00 UTC
Description:
* SECURITY UPDATE: multiple vulnerabilities fixed in MIT krb5 1.22.3 - debian/patches/CVE-2026-71199.patch: reject unkeyed checksums in CAMMAC verifiers - CVE-2026-71199 - debian/patches/CVE-2026-71200.patch: prevent a null dereference in PKINIT CMS processing - CVE-2026-71200 - debian/patches/CVE-2026-112320.patch: release the RPCSEC_GSS context when a client switches auth flavor - CVE-2026-112320 - debian/patches/CVE-2026-112314.patch: free the RPC reply verifier between clnttcp_call() retries - CVE-2026-112314 - debian/patches/CVE-2026-112321.patch: free AUTH_GSSAPI call arguments on all exit paths - CVE-2026-112321 - debian/patches/CVE-2026-107364.patch: prevent a KDC read overrun in fetch_asn1_field() - CVE-2026-107364 - debian/patches/CVE-2026-112322-CVE-2026-112323.patch: disable the AUTH_GSSAPI RPC flavor unless GSSRPC_ALLOW_AUTH_GSSAPI is set - CVE-2026-112322 - CVE-2026-112323 - debian/patches/CVE-2026-118380.patch: use the verified RPCSEC_GSS service level for each call - CVE-2026-118380 - debian/patches/CVE-2026-119079.patch: avoid quadratic reallocation when decoding ASN.1 sequences - CVE-2026-119079
CVEs fixed:
Updated packages:
  • krb5-admin-server_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:d63b9aadbab2aea4e980877636da7980138a8199
  • krb5-doc_1.17-3+deb10u6+tuxcare.els2_all.deb
    sha:b21da9b83d894500e9b9d51877811ad1a6b43521
  • krb5-gss-samples_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:6447359054773e6ffe97941b5f9b86410af246d3
  • krb5-k5tls_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:947d3bd145508b7ce1ec081b0550bf64c23d54f8
  • krb5-kdc_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:85033866972ce8d1adc33908f90fb6b223da94d0
  • krb5-kdc-ldap_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:1afb366e9e0b5b21f2c86955756f7af467e33e12
  • krb5-kpropd_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:594c1fd57f4d5d6fe5357f6fc90cb33c8608c122
  • krb5-locales_1.17-3+deb10u6+tuxcare.els2_all.deb
    sha:2d2cce820136e97c9d2e5c7c009af087f5d53f61
  • krb5-multidev_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:8372f23d388de7b0bb6bfc6e8ae198960f676e5e
  • krb5-otp_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:8ebe05e81784973fd8d877146d91b035f74c5ef3
  • krb5-pkinit_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:662ae6dbc2954ee5c282c57f28ec19d4e624fb56
  • krb5-user_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:83ce84332f80821bb21655d14b96fdc59ae23ef2
  • libgssapi-krb5-2_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:ffe4d1fba91450477f30e315da5d2644e3e5511b
  • libgssrpc4_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:f697dda10b972f837c2aa580f4a89e8630654379
  • libk5crypto3_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:b2d265feec4e1201b1c40afb28f42886e64929d5
  • libkadm5clnt-mit11_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:5de57668b92bc737d77a0ffe4f1ba930c1cc79be
  • libkadm5srv-mit11_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:63f64e585b47317b48c035e2abfbdbf5485c4239
  • libkdb5-9_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:fc8d70111c88ebfaf4b7a63712dbed371f39923c
  • libkrad-dev_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:607587be7cb9e36c44a3eabb2e15bc08bcb1620a
  • libkrad0_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:ef6a7afc234c5db8b57c5ec2995728d741a791e7
  • libkrb5-3_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:0ab615285d01caf17d36ae47831bf5b54c55295d
  • libkrb5-dev_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:af221b2fe7cb3df206105f61f5437ec858df3520
  • libkrb5support0_1.17-3+deb10u6+tuxcare.els2_amd64.deb
    sha:c9f8db1ac55be7b77bfa715c12ff3373775654f1
  • krb5-admin-server_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:6c5adb990981e3ede05f63db5ab2f6cdf827f973
  • krb5-gss-samples_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:ef52091b8670d7bda2e70b513802cba8a5688cad
  • krb5-k5tls_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:9cdf42e97fd001b2c5d8a967c998eac5b32fc80a
  • krb5-kdc_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:03bfe6bb5636f3872e3533f872a2ffcbdd247d85
  • krb5-kdc-ldap_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:791c431424bb353bd0a73608c58f62caeda2176f
  • krb5-kpropd_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:af76a7368bac26e6e53cb6b8e58aaf7f5814d23c
  • krb5-multidev_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:77628acb5fb87b1577f3d0431e9f328fe038a4e0
  • krb5-otp_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:932b421c24a8989ed128b1478b831786887e85dc
  • krb5-pkinit_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:b196609d44671c8fe7bdf792ff748d37d2422005
  • krb5-user_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:8ff70abed4105d48153be5620d5bca0f6a9bc0e5
  • libgssapi-krb5-2_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:4903cb4b996c6cb2c012642bd3d5088e4dc4e3a8
  • libgssrpc4_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:c2f599a53da520fb8abf31dbd36a03bd073e0f40
  • libk5crypto3_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:4e2390610241690ec365fade8e784cb382622460
  • libkadm5clnt-mit11_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:fce599f98d72acb3d3289fe4b12f430dd5d445b2
  • libkadm5srv-mit11_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:812593d930db10c3bfd5db144568e716563f5b94
  • libkdb5-9_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:cde7eb731adc2a265a92ac179d26c522234c310b
  • libkrad-dev_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:6c993e936e33a76bca77b63932a9f3837fd5d65a
  • libkrad0_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:97419f1e0b23d63f894f767437b5980753df81f3
  • libkrb5-3_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:32babac1aafa8c671aa58f3f56039a7eb73b6ac5
  • libkrb5-dev_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:515db9402a410c2ede0bb4eb4bfb4e8c6970e6e0
  • libkrb5support0_1.17-3+deb10u6+tuxcare.els2_arm64.deb
    sha:2dbc4324862676d5423eb83dc10dd8845ae10d15
  • krb5-admin-server_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:b660a3ef34252f94bd0a98e8e49e07225dd3ae44
  • krb5-gss-samples_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:8f9d4cc4079fe4ace1f444cb742cbcd45bb99c91
  • krb5-k5tls_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:2368398acee8c7178ebda2607d5833247a43b332
  • krb5-kdc_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:add5673a1692037106738b3b7b2a4d61f70d5390
  • krb5-kdc-ldap_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:5d2da9cceaf010eb4e79d2f426dfdea2d216a58c
  • krb5-kpropd_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:94c165190d958d52d5716ae6a7c864ff50ea7bf4
  • krb5-multidev_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:390cb9a4402c8b057538c24d9e5c79d4a675c072
  • krb5-otp_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:8060032f0256c38354bf6cce9fb242ab98afa1ba
  • krb5-pkinit_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:ed561398a17631b514042ce0ba414350a86429d1
  • krb5-user_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:6e243218193ca38a256143f70f73649c930677fb
  • libgssapi-krb5-2_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:ea105e4730276d11295d176db4a7de29de4488a7
  • libgssrpc4_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:cddbd2e28f1fe7beacba5b84bd9f008de4688a3b
  • libk5crypto3_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:fb02abe33cddea6ac77a8ce4ed6cb2fd4b7d5298
  • libkadm5clnt-mit11_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:575fc904c5bbb77591812d1475693881def2fbd2
  • libkadm5srv-mit11_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:6e012e59915132a7474e5534a8c6cd7bdba87843
  • libkdb5-9_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:894a51e1062363163bbc3fe0995b6c2c14e962a0
  • libkrad-dev_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:a67de20e53fad0eb6d0eba56a81e2998e6d40635
  • libkrad0_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:2df6662cd56b675d920f8ff3a9e59ff0f3beb537
  • libkrb5-3_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:cb09b66e7890609890d38a84aa61815b6ff289a9
  • libkrb5-dev_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:e23f287dbca9cef7640e6a6535ecea2d282af873
  • libkrb5support0_1.17-3+deb10u6+tuxcare.els2_armel.deb
    sha:075309acdbcbf5286768c02fc4549722f2111433
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.