krb5-1.21.1-10.el9

エラータID: AXSA:2026-1204:04

リリース日: 
2026/07/07 Tuesday - 16:54
題名: 
krb5-1.21.1-10.el9
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- MIT Kerberos 5 には、NULL ポインタデリファレンスの問題が
あるため、リモートの攻撃者により、サービス拒否攻撃 (DoS) を
可能とする脆弱性が存在します。(CVE-2026-40355)

- MIT Kerberos 5 には、整数アンダーフロー、およびメモリ領域の
範囲外読み取りの問題があるため、リモートの攻撃者により、サービス
拒否攻撃 (DoS) を可能とする脆弱性が存在します。(CVE-2026-40356)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2026-40355
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.
CVE-2026-40356
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. krb5-1.21.1-10.el9.src.rpm
    MD5: ac9de884fcabc687cbd1ea7f7e782ee1
    SHA-256: 7df65b448d35868b27e41a6c77f9cdbeb36b70dbc4aa6dc7acb96dfd215bedc9
    Size: 8.55 MB

Asianux Server 9 for x86_64
  1. krb5-devel-1.21.1-10.el9.i686.rpm
    MD5: 50cc5b4ba4c6c84afc9e49d3bdfee2a6
    SHA-256: 55addf11fc59e55e8c11bbefb519c197aecccd17795f40334a9de9dcf507d131
    Size: 144.19 kB
  2. krb5-devel-1.21.1-10.el9.x86_64.rpm
    MD5: 78688292f895067a5fea3ca6c32f9bfb
    SHA-256: 20a0b249b8381ca313220534c5e9086251b3a5bced4c0ad1f928d317d6635197
    Size: 144.21 kB
  3. krb5-libs-1.21.1-10.el9.i686.rpm
    MD5: 8d898bb7e936e28422a9bc5a3348fca3
    SHA-256: cb27406cb6d8a6eb6f95b5cbf20046278163815c5b54ad1d0cbd8c0df64b27bc
    Size: 809.14 kB
  4. krb5-libs-1.21.1-10.el9.x86_64.rpm
    MD5: e4045e517b3f1589b117a5a96e149906
    SHA-256: c5d07ca25823dd91f72b6309e55a2482bb152803e164ccf8781f1d77c3adcfec
    Size: 760.31 kB
  5. krb5-pkinit-1.21.1-10.el9.i686.rpm
    MD5: f52a48802ad6301c7c9eb25aeb5ce185
    SHA-256: 6b46539019f7c2e7a464f9a13c7303c1793d33494c3e68573821632f7d08ba09
    Size: 62.04 kB
  6. krb5-pkinit-1.21.1-10.el9.x86_64.rpm
    MD5: 2620ff01561c06c63ddb52afe32fac05
    SHA-256: 0373678b04eef46b0fe9d63cf2bf64c7aaaf4296c9cdea30ba27b7cfc90713b5
    Size: 56.73 kB
  7. krb5-server-1.21.1-10.el9.i686.rpm
    MD5: 3d98d94dc2d98633d4a37f73c9fe68f0
    SHA-256: 6e9cd00648bfa3fa384a5ea31153c83eb41773bd12b33f94b8992fd7b89fa818
    Size: 311.64 kB
  8. krb5-server-1.21.1-10.el9.x86_64.rpm
    MD5: 272e803e7aab2d5310cfd40453442f47
    SHA-256: 151657b3a08e61aa6152d73fdf488519a8f16ad18b524d3df146088e94a59045
    Size: 300.15 kB
  9. krb5-server-ldap-1.21.1-10.el9.i686.rpm
    MD5: ed4fcfe61eebe2c4dedf81f2dd47e1cf
    SHA-256: a96a87af16dbd97a44d7f0eae2117c30f9743e4410eb37565bfd045e998c5ca2
    Size: 92.21 kB
  10. krb5-server-ldap-1.21.1-10.el9.x86_64.rpm
    MD5: a7121db26c2e589f1f02e0fe1b0e2088
    SHA-256: 4db21d0f159cf8bc9fe792f0b8ceec0a8860043f5452273ce4bf2e06a514ffaa
    Size: 87.95 kB
  11. krb5-workstation-1.21.1-10.el9.x86_64.rpm
    MD5: 616565d035982c467891d2140c869129
    SHA-256: 186d10e7b00e010e5e5636a733ea07c0fce30f06b6476b3c43228602f31190e3
    Size: 530.19 kB
  12. krb5-xrealmauthz-1.21.1-10.el9.i686.rpm
    MD5: 314187e5063604a857ee750e0a94bd74
    SHA-256: 50be9a03cea64770cef819cc072e5363824cb45f5cf93011e5b3b2d7a9508b8e
    Size: 14.56 kB
  13. krb5-xrealmauthz-1.21.1-10.el9.x86_64.rpm
    MD5: 4c9cabe212b29b72c641823b3d1149fd
    SHA-256: e08da0aeeffc60275e341040c6ca53842158edf30693ec23065dfd3471f48ed9
    Size: 14.55 kB
  14. libkadm5-1.21.1-10.el9.i686.rpm
    MD5: a71a0c295b71002253b379c879d549b8
    SHA-256: bdcf79cade7ad5f49aa512d087d4ee90262dddf622923ec180acf91f1316fe68
    Size: 78.30 kB
  15. libkadm5-1.21.1-10.el9.x86_64.rpm
    MD5: 59fd08d3913ca23e9f0551ec4c5f0a86
    SHA-256: ab48548abe73c4c56ea34cd11d99a42fde7f29c1472e7c55b092529273dd5e36
    Size: 74.80 kB