[ol10_baseos_latest] krb5-libs-1.21.3-10.0.1.el10_2.aarch64

Name:	krb5-libs
Version:	1.21.3
Release:	10.0.1.el10_2
Architecture:	aarch64
Group:	Unspecified
Size:	2711245
License:	Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision
RPM:	krb5-libs-1.21.3-10.0.1.el10_2.aarch64.rpm
Source RPM:	krb5-1.21.3-10.0.1.el10_2.src.rpm
Build Date:	Wed Jun 10 2026
Build Host:	build-ol10-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://web.mit.edu/kerberos/www/
Summary:	The non-admin shared libraries used by Kerberos 5
Description:	Kerberos is a network authentication system. The krb5-libs package contains the shared libraries needed by Kerberos 5. If you are using Kerberos, you need to install this package.

Changelog (Show File list) (Show related packages)

Tue Jun 09 2026 EL Errata <el-errata_ww@oracle.com> - 1.21.3-10.0.1
```
- Fixed race condition in krb5_set_password() [Orabug: 33609767]
```

Wed Apr 29 2026 Julien Rische <jrische@redhat.com> - 1.21.3-10

- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597

Fri Jan 30 2026 Julien Rische <jrische@redhat.com> - 1.21.3-9

- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397

Mon Apr 28 2025 Julien Rische <jrische@redhat.com> - 1.21.3-8

- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295

Wed Jan 29 2025 Julien Rische <jrische@redhat.com> - 1.21.3-7

- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758

Fri Jan 17 2025 Julien Rische <jrische@redhat.com> - 1.21.3-6

- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881

Mon Nov 04 2024 Julien Rische <jrische@redhat.com> - 1.21.3-5

- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724

Wed Oct 30 2024 Julien Rische <jrische@redhat.com> - 1.21.3-4

- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070

Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1.21.3-3

- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Fri Jul 12 2024 Julien Rische <jrische@redhat.com> - 1.21.3-2

- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995