Red Hat Security Advisory

RHSA-2025:7067

krb5 security update

Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) krb5-devel-1.21.1-6.el9
Red Hat Enterprise Linux BaseOS (v. 9) krb5-1.21.1-6.el9, krb5-libs-1.21.1-6.el9, krb5-pkinit-1.21.1-6.el9 +4

Fixes 1 record

TI-2025-18245 CVE-2025-24528 · GHSA-wrjh-fhfj-xhfm

Integer overflow in moos-ivp Kerberos 5

LOW 32

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00507 Published 2026-01-16 Partial fix · 1.22 CWE-190