Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CentOS Kerberos packages can waste memory, causing performance loss
published 2 years ago
Summary
The Kerberos development, library, PKINIT, server, and server‑LDAP packages for CentOS contain code that may not release memory properly. Over time this can reduce system performance or cause services to stop responding. Install the latest updates for these packages to correct the issue.
What to do
- Update centos krb5-devel to version 1.18.2-14.el8.tuxcare.els2.
- Update centos krb5-libs to version 1.18.2-14.el8.tuxcare.els2.
- Update centos krb5-pkinit to version 1.18.2-14.el8.tuxcare.els2.
- Update centos krb5-server to version 1.18.2-14.el8.tuxcare.els2.
- Update centos krb5-server-ldap to version 1.18.2-14.el8.tuxcare.els2.
- Update centos krb5-workstation to version 1.18.2-14.el8.tuxcare.els2.
- Update centos libkadm5 to version 1.18.2-14.el8.tuxcare.els2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:8.4 | centos | krb5-devel |
< 1.18.2-14.el8.tuxcare.els2 Fix: upgrade to 1.18.2-14.el8.tuxcare.els2
|
| TuxCare:CentOS:8.4 | centos | krb5-libs |
< 1.18.2-14.el8.tuxcare.els2 Fix: upgrade to 1.18.2-14.el8.tuxcare.els2
|
| TuxCare:CentOS:8.4 | centos | krb5-pkinit |
< 1.18.2-14.el8.tuxcare.els2 Fix: upgrade to 1.18.2-14.el8.tuxcare.els2
|
| TuxCare:CentOS:8.4 | centos | krb5-server |
< 1.18.2-14.el8.tuxcare.els2 Fix: upgrade to 1.18.2-14.el8.tuxcare.els2
|
| TuxCare:CentOS:8.4 | centos | krb5-server-ldap |
< 1.18.2-14.el8.tuxcare.els2 Fix: upgrade to 1.18.2-14.el8.tuxcare.els2
|
| TuxCare:CentOS:8.4 | centos | krb5-workstation |
< 1.18.2-14.el8.tuxcare.els2 Fix: upgrade to 1.18.2-14.el8.tuxcare.els2
|
| TuxCare:CentOS:8.4 | centos | libkadm5 |
< 1.18.2-14.el8.tuxcare.els2 Fix: upgrade to 1.18.2-14.el8.tuxcare.els2
|
Original advisory text
krb5: Fix of 2 CVEs
- CVE-2024-26461: fix possible memory leak in /krb5/src/lib/gssapi/krb5/k5sealv3.c
- CVE-2024-26458: fix possible memory leak in /krb5/src/lib/rpc/pmap_rmt.c
- CVE-2024-26458: fix possible memory leak in /krb5/src/lib/rpc/pmap_rmt.c
References
Timeline
Published13 Jun 2024
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2024-1718290045 · OSV
Track software like this
Free during beta