An update for krb5 is now available for openEuler-24.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4492 Final 1.0 1.0 2026-10-22 Initial 2026-10-22 2026-10-22 openEuler SA Tool V1.0 2026-10-22 krb5 security update An update for krb5 is now available for openEuler-24.03-LTS-SP3 Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fix(es): MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication.(CVE-2026-107708) MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.(CVE-2026-107778) An update for krb5 is now available for openEuler-24.03-LTS-SP3. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium krb5 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4492 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-107708 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-107778 https://nvd.nist.gov/vuln/detail/CVE-2026-107708 https://nvd.nist.gov/vuln/detail/CVE-2026-107778 openEuler-24.03-LTS-SP3 krb5-1.21.2-23.oe2403sp3.aarch64.rpm krb5-client-1.21.2-23.oe2403sp3.aarch64.rpm krb5-debuginfo-1.21.2-23.oe2403sp3.aarch64.rpm krb5-debugsource-1.21.2-23.oe2403sp3.aarch64.rpm krb5-devel-1.21.2-23.oe2403sp3.aarch64.rpm krb5-libs-1.21.2-23.oe2403sp3.aarch64.rpm krb5-server-1.21.2-23.oe2403sp3.aarch64.rpm krb5-1.21.2-23.oe2403sp3.src.rpm krb5-1.21.2-23.oe2403sp3.x86_64.rpm krb5-client-1.21.2-23.oe2403sp3.x86_64.rpm krb5-debuginfo-1.21.2-23.oe2403sp3.x86_64.rpm krb5-debugsource-1.21.2-23.oe2403sp3.x86_64.rpm krb5-devel-1.21.2-23.oe2403sp3.x86_64.rpm krb5-libs-1.21.2-23.oe2403sp3.x86_64.rpm krb5-server-1.21.2-23.oe2403sp3.x86_64.rpm krb5-help-1.21.2-23.oe2403sp3.noarch.rpm MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication. 2026-10-22 CVE-2026-107708 openEuler-24.03-LTS-SP3 Medium 6.9 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X krb5 security update 2026-10-22 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4492 MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service. 2026-10-22 CVE-2026-107778 openEuler-24.03-LTS-SP3 Medium 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H krb5 security update 2026-10-22 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4492