UbuntuUpdates.org

Package "krb5"

Name: krb5

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • documentation for MIT Kerberos
  • internationalization support for MIT Kerberos
  • development files for MIT Kerberos without Heimdal conflict
  • MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
Latest version: 1.20.1-6ubuntu2.10
Release: noble (24.04)
Level: updates
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "krb5" in Noble

Repository Area Version
base universe 1.20.1-6ubuntu2
base main 1.20.1-6ubuntu2
security main 1.20.1-6ubuntu2.7
security universe 1.20.1-6ubuntu2.7
updates universe 1.20.1-6ubuntu2.10

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.20.1-6ubuntu2.10 2026-09-15 04:07:38 UTC

krb5 (1.20.1-6ubuntu2.10) noble; urgency=medium

  * d/t/control: Don't run kinit-pwexpire on 32-bit architectures
    The test verifies correct behavior for dates in the far future
    (~70 years after the time of test), which krb5's date parser
    only accepts on 64 bit arches.
Source diff to previous version

Version: 1.20.1-6ubuntu2.8 2026-08-13 04:08:11 UTC
No changelog available yet.
Source diff to previous version

Version: 1.20.1-6ubuntu2.7 2026-07-22 20:08:06 UTC
No changelog available yet.
Source diff to previous version

Version: 1.20.1-6ubuntu2.6 2025-05-28 19:07:37 UTC

  krb5 (1.20.1-6ubuntu2.6) noble-security; urgency=medium

  * SECURITY UPDATE: Use of weak cryptographic hash.
    - debian/patches/CVE-2025-3576.patch: Add allow_des3 and allow_rc4 options.
      Disallow usage of des3 and rc4 unless allowed in the config. Replace
      warn_des3 with warn_deprecated in ./src/lib/krb5/krb/get_in_tkt.c. Add
      allow_des3 and allow_rc4 boolean in ./src/include/k5-int.h. Prevent usage
      of deprecated enctypes in ./src/kdc/kdc_util.c.
    - debian/patches/CVE-2025-3576-post1.patch: Add enctype comparison with
      ENCTYPE_AES256_CTS_HMAC_SHA1_96 in ./src/kdc/kdc_util.c.
    - CVE-2025-3576

 -- Hlib Korzhynskyy <email address hidden> Thu, 15 May 2025 10:09:20 +0200
Source diff to previous version
CVE-2025-3576 A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 che

Version: 1.20.1-6ubuntu2.5 2025-03-03 21:07:02 UTC

  krb5 (1.20.1-6ubuntu2.5) noble-security; urgency=medium

  * SECURITY UPDATE: denial of service via two memory leaks
    - debian/patches/CVE-2024-26458.patch: fix two unlikely memory leaks in
      src/lib/gssapi/krb5/k5sealv3.c, src/lib/rpc/pmap_rmt.c.
    - CVE-2024-26458
    - CVE-2024-26461
  * SECURITY UPDATE: denial of service via memory leak
    - debian/patches/CVE-2024-26462.patch: fix leak in KDC NDR encoding in
      src/kdc/ndr.c.
    - CVE-2024-26462
  * SECURITY UPDATE: kadmind DoS via iprop log file
    - debian/patches/CVE-2025-24528.patch: prevent overflow when
      calculating ulog block size in src/lib/kdb/kdb_log.c.
    - CVE-2025-24528

 -- Marc Deslauriers <email address hidden> Tue, 25 Feb 2025 10:30:21 -0500
CVE-2024-26458 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CVE-2024-26461 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
CVE-2024-26462 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
CVE-2025-24528 Prevent overflow when calculating ulog block size


About   -   Send Feedback to @ubuntu_updates