SUSE-SU-2024:0997-1
SUSE-SU-2024:0997-1 · Security update for krb5
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for krb5 fixes the following issues: - CVE-2024-26458: Fixed memory leak at /krb5/src/lib/rpc/pmap_rmt.c (bsc#1220770). - CVE-2024-26461: Fixed memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (bsc#1220771). - CVE-2024-26462: Fixed memory leak at /krb5/src/kdc/ndr.c (bsc#1220772).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
krb5 SUSE:Linux Enterprise Micro 5.5
- Affected ranges
- ECOSYSTEM: < 1.20.1-150500.3.6.1
Update to 1.20.1-150500.3.6.1
krb5 SUSE:Linux Enterprise Module for Basesystem 15 SP5
- Affected ranges
- ECOSYSTEM: < 1.20.1-150500.3.6.1
Update to 1.20.1-150500.3.6.1
krb5 SUSE:Linux Enterprise Module for Server Applications 15 SP5
- Affected ranges
- ECOSYSTEM: < 1.20.1-150500.3.6.1
Update to 1.20.1-150500.3.6.1
krb5 openSUSE:Leap 15.5
- Affected ranges
- ECOSYSTEM: < 1.20.1-150500.3.6.1
Update to 1.20.1-150500.3.6.1
Original sources
- https://www.suse.com/support/update/announcement/2024/suse-su-20240997-1/
- https://bugzilla.suse.com/1220770
- https://bugzilla.suse.com/1220771
- https://bugzilla.suse.com/1220772
- https://www.suse.com/security/cve/CVE-2024-26458
- https://www.suse.com/security/cve/CVE-2024-26461
- https://www.suse.com/security/cve/CVE-2024-26462
- https://osv.dev/vulnerability/SUSE-SU-2024:0997-1