Linux · Security advisory · May 15, 2023

ELSA-2023-2570: Security update for 7 packages

ELSA-2023-2570, released May 15, 2023, fixes 1 CVE across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1379
96th percentile

Fixed package versions

ProductReleaseFixed in
krb5-develol 90:1.20.1-8.0.1.el9
krb5-libsol 90:1.20.1-8.0.1.el9
krb5-pkinitol 90:1.20.1-8.0.1.el9
krb5-serverol 90:1.20.1-8.0.1.el9
krb5-server-ldapol 90:1.20.1-8.0.1.el9
krb5-workstationol 90:1.20.1-8.0.1.el9
libkadm5ol 90:1.20.1-8.0.1.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-17049 Kerberos KDC Security Feature Bypass Vulnerability 7.2 0.1379 Exploitation Less Likely
Showing 1 to 1 of 1 1