CLSA-2026-1788174820 Fix CVE(s): CVE-2022-37966

SECURITY UPDATE: Kerberos KDC elevation of privilege via weak RC4 session keys - debian/patches/CVE-2022-37966.patch: prefer AES over RC4 for Kerberos session keys by selecting the session key from the server's advertised session etypes, strip weak keys from the krbtgt account, leave...

Oracle Linux 10 : krb5 (ELSA-2025-9418)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9418 advisory. - Don't issue RC4 session keys by default CVE-2025-3576 Resolves: RHEL-88047 Tenable has extracted the preceding description block directly from the Oracle Lin...

krb5 security update

1.21.3-8.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.3-8 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-88705 - Don't issue RC4 session keys by default CVE-2025-3576 Resolves: RHEL-88047 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-74295...

krb5 security update

1.21.1-8.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.1-9 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-88704 - Don't issue RC4 session keys by default CVE-2025-3576 Resolves: RHEL-88048 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82647 1.21.1-7 -...

krb5 security update

1.18.2-32.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.18.2-32 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default CVE-2025-3576 Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648...