File _patchinfo of Package patchinfo.34552
<patchinfo incident="34552">
<issue tracker="cve" id="2024-37371"/>
<issue tracker="cve" id="2024-37370"/>
<issue tracker="bnc" id="1227187">VUL-0: CVE-2024-37371: krb5: invalid memory read when processing message tokens with invalid length fields</issue>
<issue tracker="bnc" id="1227186">VUL-0: CVE-2024-37370: krb5: confidential GSS krb5 wrap tokens with invalid plaintext Extra Count fields are errouneously accepted during unwrap</issue>
<packager>scabrero</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for krb5</summary>
<description>This update for krb5 fixes the following issues:
- CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186).
- CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid length fields (bsc#1227187).
</description>
</patchinfo>