UbuntuUpdates.org

Package "krb5"

Name: krb5

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • MIT Kerberos master server (kadmind)
  • MIT Kerberos GSS Sample applications
  • TLS plugin for MIT Kerberos
  • MIT Kerberos key server (KDC)
Latest version: 1.20.1-6ubuntu2.6
Release: noble (24.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "krb5" in Noble

Repository Area Version
base universe 1.20.1-6ubuntu2
base main 1.20.1-6ubuntu2
security universe 1.20.1-6ubuntu2.6
security main 1.20.1-6ubuntu2.6
updates main 1.20.1-6ubuntu2.6

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.20.1-6ubuntu2.1 2024-08-08 08:07:17 UTC

  krb5 (1.20.1-6ubuntu2.1) noble-security; urgency=medium

  * SECURITY UPDATE: Invalid token requests
    - debian/patches/CVE-2024-37370.patch: Fix vulnerabilities in GSS
    message token handling
    - CVE-2024-37370
    - CVE-2024-37371

 -- Bruce Cable <email address hidden> Mon, 15 Jul 2024 13:27:45 +1000
CVE-2024-37370 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the
CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens wi


About   -   Send Feedback to @ubuntu_updates