Red Hat Security Advisory

RHSA-2025:2722

krb5 security update

Released 2025-03-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) krb5-1.18.2-31.el8_10, krb5-devel-1.18.2-31.el8_10, krb5-libs-1.18.2-31.el8_10 +5

Fixes 1 record

TI-2025-18245 CVE-2025-24528 · GHSA-wrjh-fhfj-xhfm

Integer overflow in moos-ivp Kerberos 5

LOW 32

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00507 Published 2026-01-16 Partial fix · 1.22 CWE-190