RHSA-2026:80481
RHSA-2026:80481 · Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
CVSS 6.5 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
krb5 Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
krb5-devel Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
krb5-libs Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
krb5-pkinit Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
krb5-server Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
krb5-server-ldap Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
krb5-tests Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
krb5-workstation Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
krb5-xrealmauthz Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
libkadm5 Red Hat:hummingbird:1
- Affected ranges
- ECOSYSTEM: < 0:1.22.2-10.3.hum1
Update to 0:1.22.2-10.3.hum1
Original sources
- https://access.redhat.com/errata/RHSA-2026:80481
- https://images.redhat.com/
- https://access.redhat.com/security/cve/CVE-2026-107778
- https://access.redhat.com/security/updates/classification/
- https://access.redhat.com/security/cve/CVE-2026-107708
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80481.json
- https://bugzilla.redhat.com/show_bug.cgi?id=2548262
- https://www.cve.org/CVERecord?id=CVE-2026-107708
- https://nvd.nist.gov/vuln/detail/CVE-2026-107708
- https://github.com/krb5/krb5
- https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676
- https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d
- https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7
- https://github.com/krb5/krb5/pull/1510
- https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac
- https://bugzilla.redhat.com/show_bug.cgi?id=2548269
- https://www.cve.org/CVERecord?id=CVE-2026-107778
- https://nvd.nist.gov/vuln/detail/CVE-2026-107778
- https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112
- https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08
- https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a
- https://github.com/krb5/krb5/pull/1511
- https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred
- https://osv.dev/vulnerability/RHSA-2026:80481