{"id":"CLSA-2026-1773145958","summary":"Fix CVE(s): CVE-2024-37370, CVE-2024-37371","details":"   * SECURITY UPDATE: Fix vulnerabilities in GSS message token handling\n     - debian/patches/CVE-2024-37370-CVE-2024-37371.patch: Verify Extra\n       Count field in CFX wrap tokens, validate plaintext length in\n       gss_unwrap, and prevent IOV unwrap header buffer overrun\n     - CVE-2024-37370\n     - CVE-2024-37371","modified":"2026-06-04T09:45:17.571319085Z","published":"2026-03-10T12:32:43Z","upstream":["CVE-2024-37370","CVE-2024-37371"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1773145958.html"}],"affected":[{"package":{"name":"krb5-admin-server","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-admin-server?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-gss-samples","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-gss-samples?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-k5tls","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-k5tls?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-kdc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-kdc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-kdc-ldap","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-kdc-ldap?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-kpropd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-kpropd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-locales","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-locales?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-multidev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-multidev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-otp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-otp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-pkinit","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-pkinit?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"krb5-user","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/krb5-user?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libgssapi-krb5-2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libgssapi-krb5-2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libgssrpc4","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libgssrpc4?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libk5crypto3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libk5crypto3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libkadm5clnt-mit11","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libkadm5clnt-mit11?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libkadm5srv-mit11","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libkadm5srv-mit11?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libkdb5-9","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libkdb5-9?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libkrad-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libkrad-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libkrad0","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libkrad0?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libkrb5-3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libkrb5-3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libkrb5-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libkrb5-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}},{"package":{"name":"libkrb5support0","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libkrb5support0?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3+deb10u6+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1773145958.json"}}],"schema_version":"1.7.5"}