Mageia alert MGASA-2026-0233 (krb5)

From:
             
 
Mageia Updates <updates-announce@ml.mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2026-0233: Updated krb5 packages fix security vulnerabilities
Date:
             
 
Sat, 27 Jun 2026 19:17:25 +0200
Message-ID:
             
 
<20260627171725.29E65A0D44@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2026-0233 - Updated krb5 packages fix security vulnerabilities

Publication date: 27 Jun 2026
URL: https://advisories.mageia.org/MGASA-2026-0233.html
Type: security
Affected Mageia releases: 9
CVE: CVE-2025-3576,
     CVE-2026-40355,
     CVE-2026-40356

Description:
CVE-2025-3576, A vulnerability in the MIT Kerberos implementation allows
GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to
weaknesses in the MD5 checksum design. If RC4 is preferred over stronger
encryption types, an attacker could exploit MD5 collisions to forge
message integrity codes. This may lead to unauthorized message
tampering.
CVE-2026-40355, there is a NULL pointer dereference if an application
calls gss_accept_sec_context() on a system with a NegoEx mechanism
registered in /etc/gss/mech. An unauthenticated remote attacker can
trigger this, causing the process to terminate in parse_nego_message.
CVE-2026-40356, there is an integer underflow and resultant
out-of-bounds read if an application calls gss_accept_sec_context() on a
system with a NegoEx mechanism registered in /etc/gss/mech. An
unauthenticated remote attacker can trigger this, possibly causing the
process to terminate in parse_message.

References:
- https://bugs.mageia.org/show_bug.cgi?id=34335
- https://ubuntu.com/security/notices/USN-7542-1
-
https://lists.fedoraproject.org/archives/list/package-ann...
- https://www.openwall.com/lists/oss-security/2026/04/27/8
- https://cems.fun/2026/04/27/krb5-two-unauthenticated-netw...
-
https://lists.opensuse.org/archives/list/security-announc...
- https://www.cve.org/CVERecord?id=CVE-2025-3576
- https://www.cve.org/CVERecord?id=CVE-2026-40355
- https://www.cve.org/CVERecord?id=CVE-2026-40356

SRPMS:
- 9/core/krb5-1.20.1-1.5.mga9