UbuntuUpdates.org

Package "krb5"

Name: krb5

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • MIT Kerberos master server (kadmind)
  • MIT Kerberos GSS Sample applications
  • TLS plugin for MIT Kerberos
  • MIT Kerberos key server (KDC)
Latest version: 1.21.3-3ubuntu0.1
Release: oracular (24.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "krb5" in Oracular

Repository Area Version
base universe 1.21.3-3
base main 1.21.3-3
security main 1.21.3-3ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.21.3-3ubuntu0.1 2025-02-05 06:06:55 UTC

  krb5 (1.21.3-3ubuntu0.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Use of MD5-based message authentication over plaintext
    communications could lead to forgery attacks.
    - debian/patches/CVE-2024-3596.patch: Secure Response Authenticator
      by adding support for the Message-Authenticator attribute in non-EAP
      authentication methods.
    - CVE-2024-3596$
  * Update libk5crypto3 symbols: add k5_hmac_md5 symbol.

 -- Nicolas Campuzano Jimenez <email address hidden> Tue, 04 Feb 2025 10:56:13 -0500
CVE-2024-3596 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject,


About   -   Send Feedback to @ubuntu_updates