tocsin

Alpine/krb5: high 7.5

An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assign

Action: Upgrade krb5 to 1.15.3-r0 or later.

Affected

introducedfixedlast affected
01.15.3-r0-

Fixed versions

1.15.3-r0

Sources

published · modified · JSON