1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2021-3576

[ELSA-2021-3576] krb5 security update

Severity Moderate
Affected Packages 7
CVEs 2
Info Packages References Vulnerabilities

[1.18.2-8.3]
- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997600

[1.18.2-8.2]
- Rebuild for rpminspect; no code changes
- Resolves: #1983728

[1.18.2-8.1]
- Fix KDC null deref on bad encrypted challenge (CVE-2021-36222)
- Resolves: #1983728

Package Affected Version
pkg:rpm/oraclelinux/libkadm5?distro=oraclelinux-8.4 < 1.18.2-8.3.el8_4
pkg:rpm/oraclelinux/krb5-workstation?distro=oraclelinux-8.4 < 1.18.2-8.3.el8_4
pkg:rpm/oraclelinux/krb5-server?distro=oraclelinux-8.4 < 1.18.2-8.3.el8_4
pkg:rpm/oraclelinux/krb5-server-ldap?distro=oraclelinux-8.4 < 1.18.2-8.3.el8_4
pkg:rpm/oraclelinux/krb5-pkinit?distro=oraclelinux-8.4 < 1.18.2-8.3.el8_4
pkg:rpm/oraclelinux/krb5-libs?distro=oraclelinux-8.4 < 1.18.2-8.3.el8_4
pkg:rpm/oraclelinux/krb5-devel?distro=oraclelinux-8.4 < 1.18.2-8.3.el8_4
ID
ELSA-2021-3576
Severity
moderate
URL
https://linux.oracle.com/errata/ELSA-2021-3576.html
Published
2021-09-23T00:00:00
(3 years ago)
Modified
2021-09-23T00:00:00
(3 years ago)
Rights
Copyright 2021 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/libkadm5?distro=oraclelinux-8.4 oraclelinux libkadm5 < 1.18.2-8.3.el8_4 oraclelinux-8.4
Affected pkg:rpm/oraclelinux/krb5-workstation?distro=oraclelinux-8.4 oraclelinux krb5-workstation < 1.18.2-8.3.el8_4 oraclelinux-8.4
Affected pkg:rpm/oraclelinux/krb5-server?distro=oraclelinux-8.4 oraclelinux krb5-server < 1.18.2-8.3.el8_4 oraclelinux-8.4
Affected pkg:rpm/oraclelinux/krb5-server-ldap?distro=oraclelinux-8.4 oraclelinux krb5-server-ldap < 1.18.2-8.3.el8_4 oraclelinux-8.4
Affected pkg:rpm/oraclelinux/krb5-pkinit?distro=oraclelinux-8.4 oraclelinux krb5-pkinit < 1.18.2-8.3.el8_4 oraclelinux-8.4
Affected pkg:rpm/oraclelinux/krb5-libs?distro=oraclelinux-8.4 oraclelinux krb5-libs < 1.18.2-8.3.el8_4 oraclelinux-8.4
Affected pkg:rpm/oraclelinux/krb5-devel?distro=oraclelinux-8.4 oraclelinux krb5-devel < 1.18.2-8.3.el8_4 oraclelinux-8.4
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date