Linux · Security advisory · May 30, 2025
DLA-4195-1: krb5 security update
DLA-4195-1, released May 30, 2025, fixes 1 CVE in krb5 (version 1.18.3-6+deb11u7). None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.
RoutineUnsupported product
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0035
28th percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| krb5 | Debian 11.6 (bullseye) | 1.18.3-6+deb11u7 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Routine | CVE-2025-3576 | libkadm5srv-mit12: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed... | 5.9 | 0.0035 | None reported |
Showing 1 to 1 of 1
1