{"id":"CLSA-2026-1779875639","summary":"krb5: Fix of 5 CVEs","details":"- CVE-2025-24528: prevent overflow when calculating ulog block size\n- CVE-2025-3576: don't issue session keys with deprecated enctypes (RC4-HMAC-MD5 spoofing)\n- CVE-2026-40355: fix NULL pointer dereference in NegoEx parse_nego_message\n- CVE-2026-40356: fix integer underflow in NegoEx parse_message header_len\n- CVE-2023-36054: ensure array count consistency in kadm5 RPC to prevent freeing uninitialized pointers in _xdr_kadm5_principal_ent_rec","modified":"2026-10-26T09:43:19.111601002Z","published":"2026-05-27T09:54:03Z","upstream":["CVE-2023-36054","CVE-2025-24528","CVE-2025-3576","CVE-2026-40355","CVE-2026-40356"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1779875639.html"}],"affected":[{"package":{"name":"krb5-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/krb5-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"}},{"package":{"name":"krb5-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/krb5-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"}},{"package":{"name":"krb5-pkinit","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/krb5-pkinit?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"}},{"package":{"name":"krb5-server","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/krb5-server?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"}},{"package":{"name":"krb5-server-ldap","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/krb5-server-ldap?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"}},{"package":{"name":"krb5-workstation","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/krb5-workstation?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"}},{"package":{"name":"libkadm5","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/libkadm5?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-27.el8.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"}}],"schema_version":"1.9.0"}