FEDORA-EPEL-2022-be3947859f

Packages in this update:

heimdal-7.7.1-1.el8

Update description:

This release fixes the following Security Vulnerabilities:

CVE-2022-42898 PAC parse integer overflows
CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour
CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array
CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors
CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec

Note that CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common Vulnerability Scoring System (CVSS) v3.

Read More

FEDORA-2022-c6e50d409b

Packages in this update:

heimdal-7.7.1-1.fc35

Update description:

This release fixes the following Security Vulnerabilities:

CVE-2022-42898 PAC parse integer overflows
CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour
CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array
CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors
CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec

Note that CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common Vulnerability Scoring System (CVSS) v3.

Read More

FEDORA-2022-fbca84b938

Packages in this update:

heimdal-7.7.1-1.fc36

Update description:

This release fixes the following Security Vulnerabilities:

CVE-2022-42898 PAC parse integer overflows
CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour
CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array
CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors
CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec

Note that CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common Vulnerability Scoring System (CVSS) v3.

Read More

FEDORA-2022-ea403b373f

Packages in this update:

heimdal-7.7.1-1.fc37

Update description:

This release fixes the following Security Vulnerabilities:

CVE-2022-42898 PAC parse integer overflows
CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour
CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array
CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors
CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec

Note that CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common Vulnerability Scoring System (CVSS) v3.

Read More

FEDORA-2022-a1747aca80

Packages in this update:

krb5-1.19.2-13.fc37

Update description:

Security fix for CVE-2022-42898

Read More

FEDORA-2022-78038a4441

Packages in this update:

krb5-1.19.2-12.fc36

Update description:

Security fix for CVE-2022-42898

Read More

FEDORA-2022-88cefef88c

Packages in this update:

krb5-1.19.2-9.fc35

Update description:

Security fix for CVE-2022-42898

Read More

FEDORA-2022-243616c548

Packages in this update:

ntfs-3g-2022.10.3-1.fc37

Update description:

Update to 2022.10.3. Fixes CVE-2022-40284

Read More

FEDORA-2022-4915124227

Packages in this update:

ntfs-3g-2022.10.3-1.fc36

Update description:

Update to 2022.10.3. Fixes CVE-2022-40284

Read More

FEDORA-EPEL-2022-9e1d9b40a7

Packages in this update:

ntfs-3g-2022.10.3-1.el7

Update description:

Update to 2022.10.3. Fixes CVE-2022-40284

Read More