UbuntuUpdates.org

Package "libkrb5-3"

Name: libkrb5-3

Description:

MIT Kerberos runtime libraries
Latest version: 1.19.2-2ubuntu0.7
Release: jammy (22.04)
Level: updates
Repository: main
Head package: krb5
Homepage: http://web.mit.edu/kerberos/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libkrb5-3"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libkrb5-3" in Jammy

Repository Area Version
base main 1.19.2-2
security main 1.19.2-2ubuntu0.7

Changelog

Version: 1.19.2-2ubuntu0.2 2023-05-10 15:07:19 UTC

  krb5 (1.19.2-2ubuntu0.2) jammy; urgency=medium

  * d/kdc.conf: Do not specify master key type to avoid weak crypto for
    new realms. Existing realms will not be changed. (LP: #1981697)

 -- Andreas Hasenack <email address hidden> Thu, 06 Apr 2023 19:21:06 -0300
Source diff to previous version
1981697 KDC: weak crypto in default settings

Version: 1.19.2-2ubuntu0.1 2023-01-25 23:07:04 UTC

  krb5 (1.19.2-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2022-42898.patch: add buffer length checks in
      krb5_pac_parse() in src/lib/krb5/krb/pac.c and a test case for
      invalid buffers in src/lib/krb5/krb/t_pac.c.
    - CVE-2022-42898

 -- Rodrigo Figueiredo Zaiden <email address hidden> Fri, 20 Jan 2023 08:34:37 -0300
CVE-2022-42898 PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC,


About   -   Send Feedback to @ubuntu_updates