ELSA-2026-19145

ELSA-2026-19145 - krb5 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-16

Description


[1.21.3-10.0.1]
- Fixed race condition in krb5_set_password() [Orabug: 33609767]

[1.21.3-10]
- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
Resolves: RHEL-171588 RHEL-171597


Related CVEs


CVE-2026-40355
CVE-2026-40356

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) krb5-1.21.3-10.0.1.el10_2.src.rpm8c994d8ba7373b8a53bcc9871eab709a69194b108ad57f2cd572ebb005a80525-ol10_aarch64_appstream
krb5-1.21.3-10.0.1.el10_2.src.rpm8c994d8ba7373b8a53bcc9871eab709a69194b108ad57f2cd572ebb005a80525-ol10_aarch64_baseos_latest
krb5-1.21.3-10.0.1.el10_2.src.rpm8c994d8ba7373b8a53bcc9871eab709a69194b108ad57f2cd572ebb005a80525-ol10_aarch64_u2_baseos_patch
krb5-devel-1.21.3-10.0.1.el10_2.aarch64.rpm975e420800f143749880ebbba773fdb3be87004d3683704e5b94d769d8e2e8d6-ol10_aarch64_appstream
krb5-libs-1.21.3-10.0.1.el10_2.aarch64.rpmea5104cf4b9dfcf4c7e9a27fca3a55c3eed6bfb65074b0dc2b991f7928e575b0-ol10_aarch64_baseos_latest
krb5-libs-1.21.3-10.0.1.el10_2.aarch64.rpmea5104cf4b9dfcf4c7e9a27fca3a55c3eed6bfb65074b0dc2b991f7928e575b0-ol10_aarch64_u2_baseos_patch
krb5-pkinit-1.21.3-10.0.1.el10_2.aarch64.rpm29766819fea31818b6c1dd26e04dca7ffeb315b79076bb5429d6c08e98f93636-ol10_aarch64_baseos_latest
krb5-pkinit-1.21.3-10.0.1.el10_2.aarch64.rpm29766819fea31818b6c1dd26e04dca7ffeb315b79076bb5429d6c08e98f93636-ol10_aarch64_u2_baseos_patch
krb5-server-1.21.3-10.0.1.el10_2.aarch64.rpm4944a386b1d51f4a04a7d428c659e94206d8f00114f3443c34abe1a31ac57359-ol10_aarch64_baseos_latest
krb5-server-1.21.3-10.0.1.el10_2.aarch64.rpm4944a386b1d51f4a04a7d428c659e94206d8f00114f3443c34abe1a31ac57359-ol10_aarch64_u2_baseos_patch
krb5-server-ldap-1.21.3-10.0.1.el10_2.aarch64.rpmaae8e8713a6d0f2825394e2fc8a1158acbc685396dc46951e688e634ab1a8231-ol10_aarch64_baseos_latest
krb5-server-ldap-1.21.3-10.0.1.el10_2.aarch64.rpmaae8e8713a6d0f2825394e2fc8a1158acbc685396dc46951e688e634ab1a8231-ol10_aarch64_u2_baseos_patch
krb5-workstation-1.21.3-10.0.1.el10_2.aarch64.rpm82081cc303abd12b0615d5bf4956cc1684dba0ad23517d4130fc4ed5fa731ebf-ol10_aarch64_baseos_latest
krb5-workstation-1.21.3-10.0.1.el10_2.aarch64.rpm82081cc303abd12b0615d5bf4956cc1684dba0ad23517d4130fc4ed5fa731ebf-ol10_aarch64_u2_baseos_patch
krb5-xrealmauthz-1.21.3-10.0.1.el10_2.aarch64.rpm8a428d5396468b7739a25a0638966bf7afd9c53005d6c4cc9e030c731e2b7e25-ol10_aarch64_baseos_latest
krb5-xrealmauthz-1.21.3-10.0.1.el10_2.aarch64.rpm8a428d5396468b7739a25a0638966bf7afd9c53005d6c4cc9e030c731e2b7e25-ol10_aarch64_u2_baseos_patch
libkadm5-1.21.3-10.0.1.el10_2.aarch64.rpm479716eda7d09b76182cd2bdaef54fe993a955aee688db681c09170adbe3b4c6-ol10_aarch64_baseos_latest
libkadm5-1.21.3-10.0.1.el10_2.aarch64.rpm479716eda7d09b76182cd2bdaef54fe993a955aee688db681c09170adbe3b4c6-ol10_aarch64_u2_baseos_patch
Oracle Linux 10 (x86_64) krb5-1.21.3-10.0.1.el10_2.src.rpm8c994d8ba7373b8a53bcc9871eab709a69194b108ad57f2cd572ebb005a80525-ol10_x86_64_appstream
krb5-1.21.3-10.0.1.el10_2.src.rpm8c994d8ba7373b8a53bcc9871eab709a69194b108ad57f2cd572ebb005a80525-ol10_x86_64_baseos_latest
krb5-1.21.3-10.0.1.el10_2.src.rpm8c994d8ba7373b8a53bcc9871eab709a69194b108ad57f2cd572ebb005a80525-ol10_x86_64_u2_baseos_patch
krb5-devel-1.21.3-10.0.1.el10_2.x86_64.rpmb280fbe7d64d70d130e411bd8fff8ae8121cf6447f3379c715f91c4d95b20c35-ol10_x86_64_appstream
krb5-libs-1.21.3-10.0.1.el10_2.x86_64.rpmba6381a5195c21e4dff54d10d32709c079a644e6610212054647392c522163d0-ol10_x86_64_baseos_latest
krb5-libs-1.21.3-10.0.1.el10_2.x86_64.rpmba6381a5195c21e4dff54d10d32709c079a644e6610212054647392c522163d0-ol10_x86_64_u2_baseos_patch
krb5-pkinit-1.21.3-10.0.1.el10_2.x86_64.rpmdfc019456e5dfd9eb0be71beb0a773e612925c4c10d5943b93cc43e21ee2dc3e-ol10_x86_64_baseos_latest
krb5-pkinit-1.21.3-10.0.1.el10_2.x86_64.rpmdfc019456e5dfd9eb0be71beb0a773e612925c4c10d5943b93cc43e21ee2dc3e-ol10_x86_64_u2_baseos_patch
krb5-server-1.21.3-10.0.1.el10_2.x86_64.rpm24439819038c45f78c625ea9b5ac8011e34168bedf0d1f746369b1b8055c170e-ol10_x86_64_baseos_latest
krb5-server-1.21.3-10.0.1.el10_2.x86_64.rpm24439819038c45f78c625ea9b5ac8011e34168bedf0d1f746369b1b8055c170e-ol10_x86_64_u2_baseos_patch
krb5-server-ldap-1.21.3-10.0.1.el10_2.x86_64.rpmed79d7adc744c272dc6a14ecc412ca3ae60469e7e9e5f1cc6205c8514b902bc5-ol10_x86_64_baseos_latest
krb5-server-ldap-1.21.3-10.0.1.el10_2.x86_64.rpmed79d7adc744c272dc6a14ecc412ca3ae60469e7e9e5f1cc6205c8514b902bc5-ol10_x86_64_u2_baseos_patch
krb5-workstation-1.21.3-10.0.1.el10_2.x86_64.rpma27187751026b21ce5d4ba88714fdbde3af410ec4706656fed130f8e2ba36a64-ol10_x86_64_baseos_latest
krb5-workstation-1.21.3-10.0.1.el10_2.x86_64.rpma27187751026b21ce5d4ba88714fdbde3af410ec4706656fed130f8e2ba36a64-ol10_x86_64_u2_baseos_patch
krb5-xrealmauthz-1.21.3-10.0.1.el10_2.x86_64.rpmfb720f1015572377f981c5d81ae4d64c161c72754cb8daa17658c21bb817942f-ol10_x86_64_baseos_latest
krb5-xrealmauthz-1.21.3-10.0.1.el10_2.x86_64.rpmfb720f1015572377f981c5d81ae4d64c161c72754cb8daa17658c21bb817942f-ol10_x86_64_u2_baseos_patch
libkadm5-1.21.3-10.0.1.el10_2.x86_64.rpm2efdb417a5848c2e566ef1251645f9eedf89884deff383774fdb4b8e28640723-ol10_x86_64_baseos_latest
libkadm5-1.21.3-10.0.1.el10_2.x86_64.rpm2efdb417a5848c2e566ef1251645f9eedf89884deff383774fdb4b8e28640723-ol10_x86_64_u2_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete