Fedora 40: krb5 2024-1f68985052 Security Advisory Updates
Summary
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of sending passwords over the network in unencrypted form.
Update Information:
This update fixes multiple CVEs and rebases to the latest upstream version:
* Tue Jul 09 2024 Julien Rische
Change Log
* Tue Jul 9 2024 Julien Rische
References
[ 1 ] Bug #2257301 - Fix double free in klist's show_ccache() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2257301 [ 2 ] Bug #2265333 - Exhaustive SPDX license expression in specfile https://bugzilla.redhat.com/show_bug.cgi?id=2265333 [ 3 ] Bug #2266732 - TRIAGE CVE-2024-26458 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266732 [ 4 ] Bug #2266741 - TRIAGE CVE-2024-26461 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266741 [ 5 ] Bug #2266743 - TRIAGE CVE-2024-26462 krb5: Memory leak at /krb5/src/kdc/ndr.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266743 [ 6 ] Bug #2294678 - CVE-2024-37370 krb5: GSS message token handling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2294678 [ 7 ] Bug #2294680 - CVE-2024-37371 krb5: GSS message token handling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2294680
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-1f68985052' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
![Dist Fedora](/images/distros/dist-fedora.gif)