[ol10_baseos_latest] krb5-libs-1.21.3-9.el10_1.aarch64

Name:	krb5-libs
Version:	1.21.3
Release:	9.el10_1
Architecture:	aarch64
Group:	Unspecified
Size:	2711157
License:	Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision
RPM:	krb5-libs-1.21.3-9.el10_1.aarch64.rpm
Source RPM:	krb5-1.21.3-9.el10_1.src.rpm
Build Date:	Fri Apr 03 2026
Build Host:	build-ol10-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://web.mit.edu/kerberos/www/
Summary:	The non-admin shared libraries used by Kerberos 5
Description:	Kerberos is a network authentication system. The krb5-libs package contains the shared libraries needed by Kerberos 5. If you are using Kerberos, you need to install this package.

Changelog (Show File list) (Show related packages)

Fri Jan 30 2026 Julien Rische <jrische@redhat.com> - 1.21.3-9

- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397

Mon Apr 28 2025 Julien Rische <jrische@redhat.com> - 1.21.3-8

- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295

Wed Jan 29 2025 Julien Rische <jrische@redhat.com> - 1.21.3-7

- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758

Fri Jan 17 2025 Julien Rische <jrische@redhat.com> - 1.21.3-6

- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881

Mon Nov 04 2024 Julien Rische <jrische@redhat.com> - 1.21.3-5

- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724

Wed Oct 30 2024 Julien Rische <jrische@redhat.com> - 1.21.3-4

- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070

Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1.21.3-3

- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Fri Jul 12 2024 Julien Rische <jrische@redhat.com> - 1.21.3-2

- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995

Fri Jul 12 2024 Julien Rische <jrische@redhat.com> - 1.21.3-1

- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278

Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1.21.2-7
```
- Bump release for June 2024 mass rebuild
```