{"id":"CLSA-2024-1727288271","summary":"Fix CVE(s): CVE-2021-37370, CVE-2021-37371, CVE-2024-37370, CVE-2024-37371","details":"   * SECURITY UPDATE: fix GSS vulnerabilities\n     - debian/patches/CVE-2021-37370.patch: prevent modification of Extra\n       Count field in GSS krb5 wrap CFX wrap token to avoid appearing\n       truncated to application header\n     - debian/patches/CVE-2021-37371.patch: fix invalid memory reads\n       during GSS message token handling\n     - CVE-2024-37370\n     - CVE-2024-37371","modified":"2026-06-04T09:47:14.724514972Z","published":"2024-09-25T18:17:56Z","upstream":["CVE-2021-37370","CVE-2021-37371","CVE-2024-37370","CVE-2024-37371"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1727288271.html"}],"affected":[{"package":{"name":"krb5-admin-server","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-admin-server?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-gss-samples","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-gss-samples?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-k5tls","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-k5tls?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-kdc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-kdc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-kdc-ldap","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-kdc-ldap?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-kpropd","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-kpropd?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-locales","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-locales?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-multidev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-multidev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-otp","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-otp?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-pkinit","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-pkinit?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"krb5-user","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/krb5-user?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libgssapi-krb5-2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgssapi-krb5-2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libgssrpc4","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgssrpc4?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libk5crypto3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libk5crypto3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libkadm5clnt-mit11","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libkadm5clnt-mit11?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libkadm5srv-mit11","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libkadm5srv-mit11?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libkdb5-9","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libkdb5-9?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libkrad-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libkrad-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libkrad0","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libkrad0?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libkrb5-3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libkrb5-3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libkrb5-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libkrb5-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}},{"package":{"name":"libkrb5support0","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libkrb5support0?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-2ubuntu0.4+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1727288271.json"}}],"schema_version":"1.7.5"}