[CLSA-2026:1794452153] Fix of 10 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-12 02:56:09 UTC
Description:
* SECURITY UPDATE: multiple vulnerabilities fixed in MIT krb5 1.22.3 - debian/patches/CVE-2026-71199.patch: reject unkeyed checksums in CAMMAC verifiers - CVE-2026-71199 - debian/patches/CVE-2026-71200.patch: prevent a null dereference in PKINIT CMS processing - CVE-2026-71200 - debian/patches/CVE-2026-112320.patch: release the RPCSEC_GSS context when a client switches auth flavor - CVE-2026-112320 - debian/patches/CVE-2026-112314.patch: free the RPC reply verifier between clnttcp_call() retries - CVE-2026-112314 - debian/patches/CVE-2026-112321.patch: free AUTH_GSSAPI call arguments on all exit paths - CVE-2026-112321 - debian/patches/CVE-2026-107364.patch: prevent a KDC read overrun in fetch_asn1_field() - CVE-2026-107364 - debian/patches/CVE-2026-112322-CVE-2026-112323.patch: disable the AUTH_GSSAPI RPC flavor unless GSSRPC_ALLOW_AUTH_GSSAPI is set - CVE-2026-112322 - CVE-2026-112323 - debian/patches/CVE-2026-118380.patch: use the verified RPCSEC_GSS service level for each call - CVE-2026-118380 - debian/patches/CVE-2026-119079.patch: avoid quadratic reallocation when decoding ASN.1 sequences - CVE-2026-119079
CVEs fixed:
Updated packages:
  • krb5-admin-server_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:78531bc05860a93fab9350aeaf63015753e91885
  • krb5-doc_1.18.3-6+deb11u8+tuxcare.els2_all.deb
    sha:b85e2da330b1c2a81ff6fcf0575e2c83f4489e9b
  • krb5-gss-samples_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:c27998695dd9dc2b9a9926c46fea34455e796e4c
  • krb5-k5tls_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:96a3693fe4bc648687ca98b23203ce93891537fb
  • krb5-kdc_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:e6d9aa75411a692f608106d28d6d0efe9dd56fea
  • krb5-kdc-ldap_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:0463ccbdedd28852d7394af74357daf09df307b3
  • krb5-kpropd_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:3983363aa429b905a9aff2bfc233f77500e38d93
  • krb5-locales_1.18.3-6+deb11u8+tuxcare.els2_all.deb
    sha:2676c9c787defbad4a11cbe36555a0b5e5a0637a
  • krb5-multidev_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:def5fe2f1bb4e3f3ae2c31c08b8d1a44a298604c
  • krb5-otp_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:e3422b604d79bca8ca12c18c3e98fe8bb5087c37
  • krb5-pkinit_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:ca69dfb7ffa8e9bbba810e6e1cf010f5d6087870
  • krb5-user_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:2a707d302a9d18815a7b51f984aac015ebc4901c
  • libgssapi-krb5-2_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:61ead61b4da72b56d8e0b71afc1cb6f877183821
  • libgssrpc4_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:819fbdd0dfe06d44c3e92cbe7b079fda0b453f85
  • libk5crypto3_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:33e986dcd6e476718594ef0f48cd3395e5a649fa
  • libkadm5clnt-mit12_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:2da52f987c8f452baee5a6dcef6e5a0463f9ca73
  • libkadm5srv-mit12_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:0b17d45d8d6b1d306cc2749c19c3373d583f36c8
  • libkdb5-10_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:599bd3ef19242bfbb07cef0d7b7e22185596b934
  • libkrad-dev_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:0565db2d3b38c08050cec0bdf182250f45a599ed
  • libkrad0_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:373d69c1e85811ac89f515c2862e41a34977f1a2
  • libkrb5-3_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:dd1d5de32f795ef98f41b0550f73e37c30f31473
  • libkrb5-dev_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:c828af0cd1737c8ed6fa68d981d1422260d17ecd
  • libkrb5support0_1.18.3-6+deb11u8+tuxcare.els2_amd64.deb
    sha:475714403c5359b8823a370c6170e011f45224ec
  • krb5-admin-server_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:e5c256bf0c2b28bd1b1d67b2539b9f5f1a74fd65
  • krb5-gss-samples_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:77589f45c998d897eff435c9d2fb3ff7338a92da
  • krb5-k5tls_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:6ca19ef4a871446cc5721e93eeab698d2653bfab
  • krb5-kdc_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:f9df35848a826ea091b49c38a2083b0e4b7b5897
  • krb5-kdc-ldap_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:b5bd9a834f3eb9a671bb20bb0d6602b3eadb16e8
  • krb5-kpropd_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:15f40209974f85b61b633d0457f97bc3bcb7f3df
  • krb5-multidev_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:fe36a81536481f910635ab5221b94edfab9160b6
  • krb5-otp_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:63d15ef761e43bc5bcb60e45f19230dd64c22e4e
  • krb5-pkinit_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:98abe46fbd86643649236ab3876965858bebc32d
  • krb5-user_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:078f6521a8215cbd294a2450422006cc98ace692
  • libgssapi-krb5-2_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:62ac9e5fa1f109cba7fadace1b2aeefdc1be92dd
  • libgssrpc4_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:63967a38bcdd3cdff7389dde38076e322710e8cb
  • libk5crypto3_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:7da7574c7486f3719c63638aca58757f7d2dacf3
  • libkadm5clnt-mit12_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:ad62c53de2b302166826e8de5b3df7a7fd9ce2a7
  • libkadm5srv-mit12_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:2eeb6d127bef4642e6629205973487ebcb131949
  • libkdb5-10_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:0d9ea682e8d3d488ec4fb34a94c265454482dc78
  • libkrad-dev_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:a474042f5c497a6455310e2be40260873fcf8544
  • libkrad0_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:39124c6e4bd1dc18db34fb9a8c84aee7a757c333
  • libkrb5-3_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:3aa35d4cf9307638a4e91652ae96351096f1f652
  • libkrb5-dev_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:8ff0bc236f274298201bb179011d9a573afde565
  • libkrb5support0_1.18.3-6+deb11u8+tuxcare.els2_arm64.deb
    sha:ce40491836a82fc8e73f96cab46baecbd79cc34f
  • krb5-admin-server_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:5f40beb335a43a5933addd88485e988508be96a8
  • krb5-gss-samples_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:0cbff71c8f7b6d7e2518e511d4670856ad7010af
  • krb5-k5tls_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:c0decee391de241e84eaccd33478e662bcb3d6a6
  • krb5-kdc_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:ebb7d2e9806362d617fc7571e2b5c0c8cb583460
  • krb5-kdc-ldap_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:0a295544ca2360203a10e50c4c0c8cf3a634d936
  • krb5-kpropd_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:1648f79e6f68c31f17f5484a5de5934b7db5b26e
  • krb5-multidev_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:edf01af9a0272279392ee6f5d735f3cc23bac2d2
  • krb5-otp_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:325a06f14f6ef74d786c23c6c6c88a85a55e9423
  • krb5-pkinit_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:fbe4f229b8f543cae0f732beea81e732c3dc4089
  • krb5-user_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:fd42aff787ea89dc4ced44fd22865cd63e774b4e
  • libgssapi-krb5-2_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:44a3f04054c840a576e84365caf902b6d368c954
  • libgssrpc4_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:8e44d9539850d3941fbdb1a275187999224ecb01
  • libk5crypto3_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:d8d5affb8453eccf8aed5c596f3eecc71011eee8
  • libkadm5clnt-mit12_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:6685f93ba310584d4d80630790dcb628ddf366d6
  • libkadm5srv-mit12_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:8847ead58cf30ccfd302ae22bc5ab1b32d1fd589
  • libkdb5-10_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:ffbcac5dff93a3d2fe956c6edcd4007fbe2011a7
  • libkrad-dev_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:7220357763e6c2d831b961ca14ef593bbcaa9089
  • libkrad0_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:945a48ef3ee20c59e5c687fb60f17ea9f4243760
  • libkrb5-3_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:5e09b7983616503d0604d24a7016bb1f469c4fa2
  • libkrb5-dev_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:5e285114418c2c4dd69d2d0bbfb42c7adafdc956
  • libkrb5support0_1.18.3-6+deb11u8+tuxcare.els2_armel.deb
    sha:fe741589faba72f51534199e3bc0c7a14be1da8c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.