Packages / openSUSE Tumbleweed / Source / Unspecified / krb5

Source Package: krb5 (1.22.2-4.2)

MIT Kerberos5 implementation

The following binary packages are built from this source package:

krb5
MIT Kerberos5 implementation
krb5-32bit
MIT Kerberos5 implementation
krb5-client
Client programs of the MIT Kerberos5 implementation
krb5-devel
Development files for MIT Kerberos5
krb5-devel-32bit
Development files for MIT Kerberos5
krb5-plugin-kdb-ldap
LDAP database plugin for MIT Kerberos5
krb5-plugin-preauth-otp
OTP preauthentication plugin for MIT Kerberos5
krb5-plugin-preauth-pkinit
PKINIT preauthentication plugin for MIT Kerberos5
krb5-plugin-preauth-spake
SPAKE preauthentication plugin for MIT Kerberos5
krb5-server
Server program of the MIT Kerberos5 implementation

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-11850] An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2)	Medium(5.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:46:21 PM UTC Dettagli (10) `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Corretta · Corretta: `1.22.2-4.1` nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-4.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed
[CVE-2026-40355] In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An una	Medium(5.9)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 10:26:20 PM UTC Dettagli (10) `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Corretta · Corretta: `1.22.2-3.1` nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.22.2-3.1` Version impact unknown nvd · krb5 · opensuse · tumbleweed
[CVE-2022-42898] samba: CVE-2022-42898	High(8.8)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:30:15 PM UTC Dettagli (10) `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Corretta · Corretta: `1.20.1-1.1` dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.20.1-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed
[CVE-2018-20217] krb5: CVE-2018-20217	Medium(6.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:35:59 PM UTC Dettagli (10) `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Corretta · Corretta: `1.19.2-3.1` dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-3.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed
[CVE-2002-2443] krb5: CVE-2002-2443	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:03:14 PM UTC Dettagli (10) `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Corretta · Corretta: `1.15-1.1` dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.15-1.1` Version impact unknown dsa · krb5 · opensuse · tumbleweed
[CVE-2006-6143] krb5: CVE-2006-6143	Critical	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:03:22 PM UTC Dettagli (10) `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Corretta · Corretta: `1.19.2-2.2` dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed `1.22.2-4.2` · x86_64 · tumbleweed Sconosciuto · Corretta: `1.19.2-2.2` Version impact unknown dsa · krb5 · opensuse · tumbleweed

Ultima sincronizzazione: Oct 24, 2026, 2:08:13 AM UTC

[Catalogo CVE]

Fonti

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable