FEDORA-2024-bdc305fe55 — security update for krb5

stable

krb5-1.21.3-1.fc41

FEDORA-2024-bdc305fe55 created by jrische 8 months ago for Fedora 41

Automatic update for krb5-1.21.3-1.fc41.

Changelog

* Tue Jul  9 2024 Julien Rische <jrische@redhat.com> - 1.21.3-1
- New upstream version (1.21.3)
- CVE-2024-26458: Memory leak in src/lib/rpc/pmap_rmt.c
  Resolves: rhbz#2266732
- CVE-2024-26461: Memory leak in src/lib/gssapi/krb5/k5sealv3.c
  Resolves: rhbz#2266741
- CVE-2024-26462: Memory leak in src/kdc/ndr.c
  Resolves: rhbz#2266743
- Add missing SPDX license identifiers
  Resolves: rhbz#2265333

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-bdc305fe55

This update was automatically created

8 months ago

This update's test gating status has been changed to 'waiting'.

8 months ago

This update's test gating status has been changed to 'passed'.

8 months ago

This update has been submitted for stable by bodhi

8 months ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

0 days

Dates

submitted

8 months ago

in testing

8 months ago

in stable

8 months ago

approved

8 months ago

Builds

krb5-1.21.3-1.fc41

BZ#2265333 Exhaustive SPDX license expression in specfile

BZ#2266732 TRIAGE CVE-2024-26458 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c [fedora-all]

BZ#2266741 TRIAGE CVE-2024-26461 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c [fedora-all]

BZ#2266743 TRIAGE CVE-2024-26462 krb5: Memory leak at /krb5/src/kdc/ndr.c [fedora-all]

krb5-1.21.3-1.fc41

Automated Test Results

passed