Red Hat Product Errata RHSA-2026:24685 - Security Advisory Issued: 2026-06-09 Updated: 2026-06-09 RHSA-2026:24685 - Security Advisory Overview Updated Packages Synopsis Important: krb5 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for krb5 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2463368 - CVE-2026-40356 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read CVEs CVE-2026-40356 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM krb5-1.20.1-9.el9_2.6.src.rpm SHA-256: 34b062c500f4088012c1e49d9a0861089c5eddd912410a7539dbc6658fbe0c87 x86_64 krb5-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: 27715b03b8f1aed362d6c65b41bbe4631a665249108a849f57aa3aa740a3f55f krb5-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 6f3bebe053f2296f32a26714668068f83c36561182b913db462be00d65ab7896 krb5-debugsource-1.20.1-9.el9_2.6.i686.rpm SHA-256: 341e3f36a2aafbcfeff9ef01786aeb175419058fe5f66936f888420f4b5af737 krb5-debugsource-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 45fc193f121b1508370b9b76bb4871c04be2e29a19092a213b624689630a1cf5 krb5-devel-1.20.1-9.el9_2.6.i686.rpm SHA-256: d31ce7b7c179ce17cdd0c1c5d65209de0251f8625051f2af504aadf93222a5a8 krb5-devel-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: ab979e2569a718ab309af692ee21f21f45863b551213f156f42ef43952e48329 krb5-libs-1.20.1-9.el9_2.6.i686.rpm SHA-256: 7306b57eb161a80b1f9eda769c7f093a0e7a62919557f6037cac5b2f8d4d144e krb5-libs-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: b8809150a21470f9741d6c2a5a34cbf3a74889e5e78bd2514f5e08b69af9825e krb5-libs-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: 4278c3f270b414161fc12e9f331894fe38565a4f30362359c40ec20921c09967 krb5-libs-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 9399c12ab8e038f35ba976c073ae8c8bf9f61b025d42750b3fd16375fbdfb643 krb5-pkinit-1.20.1-9.el9_2.6.i686.rpm SHA-256: 0f74fb126e9e631606205d4e53a5b336ad385298ffcb0e40519b088f1fe69043 krb5-pkinit-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: a598daccbc8b9170d35fdcd7c21252d547e17d2d2a0d58f0442303b72c763819 krb5-pkinit-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: 10a1dd76bca272504dd90628d7cf4bca0b7c15d72c4ea199b6f01be3550c7cb1 krb5-pkinit-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 8d2461c0f5a6d5f3f3c5edfdeebee9fa81f8896e0b1679e1fbe18a192013429b krb5-server-1.20.1-9.el9_2.6.i686.rpm SHA-256: 3256f7f43f4b634fd968e72a93a20551473145d027a220dfe278d2864464fbeb krb5-server-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 2d45dd8365c1b5e350164e14ffc59711e7ca8b8a5faee9bab45cef76485f0567 krb5-server-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: 37e4369c66e8aedcf2cfe076c194b39ce71b0a499bd3c620c0af1110e93a2513 krb5-server-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: d331949073da9579bc2dbe97363b371df4af695c374af35978c76ec4b9193219 krb5-server-ldap-1.20.1-9.el9_2.6.i686.rpm SHA-256: 5f24293a7ea784968321cbdfd30679db825f0d7f0f4a3ab60c61f992bdc9190b krb5-server-ldap-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 3e74eb5557772561d48b0f4c9bd82166cdf0453632a3f3ded47d7846a71f4f38 krb5-server-ldap-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: 24482fc353d46f80c89f413ebe50cabf31c450efd5baeaf62be32c72a19e0893 krb5-server-ldap-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: c3205551a00d1bf0847f979678d9538e054d4bf72e1ae087aeaa90179d5f7e46 krb5-workstation-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 792ef89af120ccfea4a19c1f8cdccf7c00dc04ec101ab2e4e2cc35ba4f4ac500 krb5-workstation-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 10f1bd96397a6515f02e3f1a26ae97c5adaabd7f31d4e9ca80b6d41f39e1efb4 libkadm5-1.20.1-9.el9_2.6.i686.rpm SHA-256: 539725afe4649533f633ba90daec5a525cf8be0ff37aaabd5153d90db30c989c libkadm5-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 465e255be8537f3ce522591e3ef281907bb6843b406540b1d86ab78edccbfdd6 libkadm5-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: d5924d6d10474442b5cb6ff6e0fc185c9666ba64d89c2164ff0c5a97137b4040 libkadm5-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: a2df45bebf857935c5f4b804579d84ffd2f2bbf2e7ff17e1ad345aabdeb05c58 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM krb5-1.20.1-9.el9_2.6.src.rpm SHA-256: 34b062c500f4088012c1e49d9a0861089c5eddd912410a7539dbc6658fbe0c87 ppc64le krb5-debuginfo-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: dbe0e352eb40b33ff341ade63a207e7a898aecd9a3369935b1f889c8d1ef7320 krb5-debugsource-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: c3050e3d93e0bc35c08b464a431fbc36edf30f9cf001ea45e760e97110976108 krb5-devel-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: 3dae6b897746e1f4c9d3814260e871fd4c300f0fe556a446c712aa1f91e5c874 krb5-libs-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: 1532b39e85352d57d619acdc3193898476fa1b0cf1ec5150954f5b7e310558d6 krb5-libs-debuginfo-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: 85cf563767097b90e38c8cb29d0284fd3b08e172223b1a9abc5d794e9927ee08 krb5-pkinit-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: b2c78170cc24e5a264a299a266d8eb113e0131ee6d430b6ccdb5cce145b344a6 krb5-pkinit-debuginfo-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: f1939a45fde8da3298d44c5bbf554d7ab6f4f18e20f3facfb08cb4aa26b93fde krb5-server-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: 9cf3da3bcd32523799ca60fc70011e2b6c4dc0261966282d679acbce0768268e krb5-server-debuginfo-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: 99d495a3a8c64b3068d84ce7299b71c7ea0e8cf61ec8dbbef75cd1031d4dcaf3 krb5-server-ldap-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: e87ab519dd1119cbb82284a0de7bcd3969e5e89ee6bac26b3143bde78675cd68 krb5-server-ldap-debuginfo-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: b4958622dabe99c43a3d2e2486df291d4aafcb9ab02e3f8ca7b6815ecd04d9d8 krb5-workstation-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: 0cb61ce101d9a3c059711844ce7885aed7b848e4fc691241936555481479f00f krb5-workstation-debuginfo-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: 477cfbc5e44d5ed6e7b4349999144f5c2cb7498d51c8b18c6df512cd5c8fa71f libkadm5-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: f6282ce1d231afea17e88df22c23625bfc52bcd804afa64dfa5652671b3ec257 libkadm5-debuginfo-1.20.1-9.el9_2.6.ppc64le.rpm SHA-256: 1444a3b621ec1120804d9d04199449aba458a0b51ab51a09aba41cdcab5047a0 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM krb5-1.20.1-9.el9_2.6.src.rpm SHA-256: 34b062c500f4088012c1e49d9a0861089c5eddd912410a7539dbc6658fbe0c87 x86_64 krb5-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: 27715b03b8f1aed362d6c65b41bbe4631a665249108a849f57aa3aa740a3f55f krb5-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 6f3bebe053f2296f32a26714668068f83c36561182b913db462be00d65ab7896 krb5-debugsource-1.20.1-9.el9_2.6.i686.rpm SHA-256: 341e3f36a2aafbcfeff9ef01786aeb175419058fe5f66936f888420f4b5af737 krb5-debugsource-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 45fc193f121b1508370b9b76bb4871c04be2e29a19092a213b624689630a1cf5 krb5-devel-1.20.1-9.el9_2.6.i686.rpm SHA-256: d31ce7b7c179ce17cdd0c1c5d65209de0251f8625051f2af504aadf93222a5a8 krb5-devel-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: ab979e2569a718ab309af692ee21f21f45863b551213f156f42ef43952e48329 krb5-libs-1.20.1-9.el9_2.6.i686.rpm SHA-256: 7306b57eb161a80b1f9eda769c7f093a0e7a62919557f6037cac5b2f8d4d144e krb5-libs-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: b8809150a21470f9741d6c2a5a34cbf3a74889e5e78bd2514f5e08b69af9825e krb5-libs-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: 4278c3f270b414161fc12e9f331894fe38565a4f30362359c40ec20921c09967 krb5-libs-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 9399c12ab8e038f35ba976c073ae8c8bf9f61b025d42750b3fd16375fbdfb643 krb5-pkinit-1.20.1-9.el9_2.6.i686.rpm SHA-256: 0f74fb126e9e631606205d4e53a5b336ad385298ffcb0e40519b088f1fe69043 krb5-pkinit-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: a598daccbc8b9170d35fdcd7c21252d547e17d2d2a0d58f0442303b72c763819 krb5-pkinit-debuginfo-1.20.1-9.el9_2.6.i686.rpm SHA-256: 10a1dd76bca272504dd90628d7cf4bca0b7c15d72c4ea199b6f01be3550c7cb1 krb5-pkinit-debuginfo-1.20.1-9.el9_2.6.x86_64.rpm SHA-256: 8d2461c0f5a6d5f3f3c5edfdeebee9fa81f8896e0b1679e1fbe18a192013429b krb5-server-1.20.1-9.el9_2.6.i686.rpm SHA-256: 3256f7f43f4b634fd968e72a93a20551473145d027a220dfe278d2864464fbeb krb5-server-1.20.1-9.el9_2.6.x86_64.rp