CLSA-2026-1779875639

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1779875639
Upstream
CVE (5)
Published
2026-05-27T09:54:03Z
Modified
2026-10-26T09:43:19Z
Summary
krb5: Fix of 5 CVEs
Details
  • CVE-2025-24528: prevent overflow when calculating ulog block size
  • CVE-2025-3576: don't issue session keys with deprecated enctypes (RC4-HMAC-MD5 spoofing)
  • CVE-2026-40355: fix NULL pointer dereference in NegoEx parse_nego_message
  • CVE-2026-40356: fix integer underflow in NegoEx parse_message header_len
  • CVE-2023-36054: ensure array count consistency in kadm5 RPC to prevent freeing uninitialized pointers in _xdr_kadm5_principal_ent_rec
References

Affected packages

TuxCare:CentOS-Stream:8
krb5-devel

Package

Name
krb5-devel
Purl
pkg:rpm/tuxcare/krb5-devel?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.2-27.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"
krb5-libs

Package

Name
krb5-libs
Purl
pkg:rpm/tuxcare/krb5-libs?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.2-27.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"
krb5-pkinit

Package

Name
krb5-pkinit
Purl
pkg:rpm/tuxcare/krb5-pkinit?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.2-27.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"
krb5-server

Package

Name
krb5-server
Purl
pkg:rpm/tuxcare/krb5-server?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.2-27.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"
krb5-server-ldap

Package

Name
krb5-server-ldap
Purl
pkg:rpm/tuxcare/krb5-server-ldap?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.2-27.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"
krb5-workstation

Package

Name
krb5-workstation
Purl
pkg:rpm/tuxcare/krb5-workstation?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.2-27.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"
libkadm5

Package

Name
libkadm5
Purl
pkg:rpm/tuxcare/libkadm5?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.2-27.el8.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779875639.json"