UbuntuUpdates.org

Package "libk5crypto3"

Name: libk5crypto3

Description:

MIT Kerberos runtime libraries - Crypto Library
Latest version: 1.20.1-6ubuntu2.10
Release: noble (24.04)
Level: updates
Repository: main
Head package: krb5
Homepage: https://web.mit.edu/kerberos/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libk5crypto3"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libk5crypto3" in Noble

Repository Area Version
base main 1.20.1-6ubuntu2
security main 1.20.1-6ubuntu2.7
proposed main 1.20.1-6ubuntu2.10

Changelog

Version: 1.20.1-6ubuntu2.4 2025-02-13 21:06:49 UTC

  krb5 (1.20.1-6ubuntu2.4) noble-security; urgency=medium

  * No-change rebuild to solve a build issue on armhf.

 -- Marc Deslauriers <email address hidden> Thu, 13 Feb 2025 07:23:16 -0500
Source diff to previous version

Version: 1.20.1-6ubuntu2.3 2025-02-05 09:07:00 UTC

  krb5 (1.20.1-6ubuntu2.3) noble-security; urgency=medium

  * SECURITY UPDATE: Use of MD5-based message authentication over plaintext
    communications could lead to forgery attacks.
    - debian/patches/CVE-2024-3596.patch: Secure Response Authenticator
      by adding support for the Message-Authenticator attribute in non-EAP
      authentication methods.
    - CVE-2024-3596
  * Update libk5crypto3 symbols: add k5_hmac_md5 symbol.

 -- Nicolas Campuzano Jimenez <email address hidden> Tue, 28 Jan 2025 00:57:01 -0500
Source diff to previous version
CVE-2024-3596 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject,

Version: 1.20.1-6ubuntu2.2 2024-11-14 23:07:01 UTC

  krb5 (1.20.1-6ubuntu2.2) noble; urgency=medium

  * SRU: LP: #2083480: No-change rebuild to disable frame pointers on
    ppc64el and s390x.

 -- Matthias Klose <email address hidden> Wed, 02 Oct 2024 14:40:50 +0200
Source diff to previous version

Version: 1.20.1-6ubuntu2.1 2024-08-08 08:07:16 UTC

  krb5 (1.20.1-6ubuntu2.1) noble-security; urgency=medium

  * SECURITY UPDATE: Invalid token requests
    - debian/patches/CVE-2024-37370.patch: Fix vulnerabilities in GSS
    message token handling
    - CVE-2024-37370
    - CVE-2024-37371

 -- Bruce Cable <email address hidden> Mon, 15 Jul 2024 13:27:45 +1000
CVE-2024-37370 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the
CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens wi


About   -   Send Feedback to @ubuntu_updates