ELSA-2024-8860

ELSA-2024-8860 - krb5 security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-11-05

Description

[1.18.2-30.0.1]
- Fixed race condition in krb5_set_password() [Orabug: 33609767]

[1.18.2-30]
- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
Resolves: RHEL-50253
- Remove RSA protocol for PKINIT
Resolves: RHEL-17616

Related CVEs

CVE-2024-3596

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	krb5-1.18.2-30.0.1.el8_10.src.rpm	c71cba27f9b16636b3daee099c8e7d4c	-	ol8_aarch64_baseos_latest
	krb5-1.18.2-30.0.1.el8_10.src.rpm	c71cba27f9b16636b3daee099c8e7d4c	-	ol8_aarch64_u10_baseos_patch
	krb5-devel-1.18.2-30.0.1.el8_10.aarch64.rpm	c64db938c60b5f787cd679426a5531b1	-	ol8_aarch64_baseos_latest
	krb5-devel-1.18.2-30.0.1.el8_10.aarch64.rpm	c64db938c60b5f787cd679426a5531b1	-	ol8_aarch64_u10_baseos_patch
	krb5-libs-1.18.2-30.0.1.el8_10.aarch64.rpm	2a73a68b50df8f21c691ee59780eea06	-	ol8_aarch64_baseos_latest
	krb5-libs-1.18.2-30.0.1.el8_10.aarch64.rpm	2a73a68b50df8f21c691ee59780eea06	-	ol8_aarch64_u10_baseos_patch
	krb5-pkinit-1.18.2-30.0.1.el8_10.aarch64.rpm	f672e06e62394518e7b19833465fb10d	-	ol8_aarch64_baseos_latest
	krb5-pkinit-1.18.2-30.0.1.el8_10.aarch64.rpm	f672e06e62394518e7b19833465fb10d	-	ol8_aarch64_u10_baseos_patch
	krb5-server-1.18.2-30.0.1.el8_10.aarch64.rpm	7981f772f976d64edfbbc0a5f2f6da7b	-	ol8_aarch64_baseos_latest
	krb5-server-1.18.2-30.0.1.el8_10.aarch64.rpm	7981f772f976d64edfbbc0a5f2f6da7b	-	ol8_aarch64_u10_baseos_patch
	krb5-server-ldap-1.18.2-30.0.1.el8_10.aarch64.rpm	29445e0a32ac0f54fccc6d02d5dbd856	-	ol8_aarch64_baseos_latest
	krb5-server-ldap-1.18.2-30.0.1.el8_10.aarch64.rpm	29445e0a32ac0f54fccc6d02d5dbd856	-	ol8_aarch64_u10_baseos_patch
	krb5-workstation-1.18.2-30.0.1.el8_10.aarch64.rpm	4ed38f8f41149872dcafeff2db190160	-	ol8_aarch64_baseos_latest
	krb5-workstation-1.18.2-30.0.1.el8_10.aarch64.rpm	4ed38f8f41149872dcafeff2db190160	-	ol8_aarch64_u10_baseos_patch
	libkadm5-1.18.2-30.0.1.el8_10.aarch64.rpm	92dcba2fc445816a29fa3a99d4336036	-	ol8_aarch64_baseos_latest
	libkadm5-1.18.2-30.0.1.el8_10.aarch64.rpm	92dcba2fc445816a29fa3a99d4336036	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	krb5-1.18.2-30.0.1.el8_10.src.rpm	c71cba27f9b16636b3daee099c8e7d4c	-	ol8_x86_64_baseos_latest
	krb5-1.18.2-30.0.1.el8_10.src.rpm	c71cba27f9b16636b3daee099c8e7d4c	-	ol8_x86_64_u10_baseos_patch
	krb5-devel-1.18.2-30.0.1.el8_10.i686.rpm	852b1c8f6c8252008dddbd8d11dc3e4a	-	ol8_x86_64_baseos_latest
	krb5-devel-1.18.2-30.0.1.el8_10.i686.rpm	852b1c8f6c8252008dddbd8d11dc3e4a	-	ol8_x86_64_u10_baseos_patch
	krb5-devel-1.18.2-30.0.1.el8_10.x86_64.rpm	67bed5b3cb56fd38d08bac15f5a39b26	-	ol8_x86_64_baseos_latest
	krb5-devel-1.18.2-30.0.1.el8_10.x86_64.rpm	67bed5b3cb56fd38d08bac15f5a39b26	-	ol8_x86_64_u10_baseos_patch
	krb5-libs-1.18.2-30.0.1.el8_10.i686.rpm	6be006aa97bde1715fddfff0a3bdd9eb	-	ol8_x86_64_baseos_latest
	krb5-libs-1.18.2-30.0.1.el8_10.i686.rpm	6be006aa97bde1715fddfff0a3bdd9eb	-	ol8_x86_64_u10_baseos_patch
	krb5-libs-1.18.2-30.0.1.el8_10.x86_64.rpm	61ef4d3e2d4acc30d9f7decf2159d1e1	-	ol8_x86_64_baseos_latest
	krb5-libs-1.18.2-30.0.1.el8_10.x86_64.rpm	61ef4d3e2d4acc30d9f7decf2159d1e1	-	ol8_x86_64_u10_baseos_patch
	krb5-pkinit-1.18.2-30.0.1.el8_10.i686.rpm	ab1db6ced76cba098f9edd81496da4b5	-	ol8_x86_64_baseos_latest
	krb5-pkinit-1.18.2-30.0.1.el8_10.i686.rpm	ab1db6ced76cba098f9edd81496da4b5	-	ol8_x86_64_u10_baseos_patch
	krb5-pkinit-1.18.2-30.0.1.el8_10.x86_64.rpm	43a98a04f8338da425a185fa9556fbfc	-	ol8_x86_64_baseos_latest
	krb5-pkinit-1.18.2-30.0.1.el8_10.x86_64.rpm	43a98a04f8338da425a185fa9556fbfc	-	ol8_x86_64_u10_baseos_patch
	krb5-server-1.18.2-30.0.1.el8_10.i686.rpm	3c37c7fafc97ab8cd11883a205f562b1	-	ol8_x86_64_baseos_latest
	krb5-server-1.18.2-30.0.1.el8_10.i686.rpm	3c37c7fafc97ab8cd11883a205f562b1	-	ol8_x86_64_u10_baseos_patch
	krb5-server-1.18.2-30.0.1.el8_10.x86_64.rpm	fc79dfd5809f916b9342018ca8d6e264	-	ol8_x86_64_baseos_latest
	krb5-server-1.18.2-30.0.1.el8_10.x86_64.rpm	fc79dfd5809f916b9342018ca8d6e264	-	ol8_x86_64_u10_baseos_patch
	krb5-server-ldap-1.18.2-30.0.1.el8_10.i686.rpm	764fb3f505ebbff55755211e6f7294bc	-	ol8_x86_64_baseos_latest
	krb5-server-ldap-1.18.2-30.0.1.el8_10.i686.rpm	764fb3f505ebbff55755211e6f7294bc	-	ol8_x86_64_u10_baseos_patch
	krb5-server-ldap-1.18.2-30.0.1.el8_10.x86_64.rpm	c512219ba5a20c147eac2d3589e390da	-	ol8_x86_64_baseos_latest
	krb5-server-ldap-1.18.2-30.0.1.el8_10.x86_64.rpm	c512219ba5a20c147eac2d3589e390da	-	ol8_x86_64_u10_baseos_patch
	krb5-workstation-1.18.2-30.0.1.el8_10.x86_64.rpm	3e9f6cb6b1b110ba92aa6777029e6d55	-	ol8_x86_64_baseos_latest
	krb5-workstation-1.18.2-30.0.1.el8_10.x86_64.rpm	3e9f6cb6b1b110ba92aa6777029e6d55	-	ol8_x86_64_u10_baseos_patch
	libkadm5-1.18.2-30.0.1.el8_10.i686.rpm	646331ca96e6923b428ae897c01a765b	-	ol8_x86_64_baseos_latest
	libkadm5-1.18.2-30.0.1.el8_10.i686.rpm	646331ca96e6923b428ae897c01a765b	-	ol8_x86_64_u10_baseos_patch
	libkadm5-1.18.2-30.0.1.el8_10.x86_64.rpm	d03a7044d13d5dead286da7abfb6a58e	-	ol8_x86_64_baseos_latest
	libkadm5-1.18.2-30.0.1.el8_10.x86_64.rpm	d03a7044d13d5dead286da7abfb6a58e	-	ol8_x86_64_u10_baseos_patch