Red Hat Security Advisory

RHSA-2025:9430

krb5 security update

Released 2025-06-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) krb5-devel-1.21.1-8.el9_6
Red Hat Enterprise Linux BaseOS (v. 9) krb5-1.21.1-8.el9_6, krb5-libs-1.21.1-8.el9_6, krb5-pkinit-1.21.1-8.el9_6 +4

Fixes 1 record

TI-2025-03145 CVE-2025-3576 · GHSA-rfh5-gx7w-h7v7

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

LOW 26

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00351 Published 2025-04-15 Partial fix · 1.22, 1.21.3-8.el10_0 +10 CWE-328