Red Hat Product Errata RHSA-2026:24683 - Security Advisory Issued: 2026-06-09 Updated: 2026-06-09 RHSA-2026:24683 - Security Advisory Overview Updated Packages Synopsis Important: krb5 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for krb5 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC). Security Fix(es): krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read (CVE-2026-40356) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2463368 - CVE-2026-40356 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read CVEs CVE-2026-40356 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM krb5-1.21.1-8.el9_6.2.src.rpm SHA-256: d3d3b491c2e4d3c7bf658c1183d9816bb4e1d0260faf42b7ff115e5d768eff66 x86_64 krb5-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 19be5e72581c04ca7e1fbccd4559aa37b75acfe0da8635b869dcbe025e98ce36 krb5-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 19be5e72581c04ca7e1fbccd4559aa37b75acfe0da8635b869dcbe025e98ce36 krb5-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 451d1bd5374a13a245435d7d3f747df0bbfa390e5cd978690b1b9c21552e5aff krb5-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 451d1bd5374a13a245435d7d3f747df0bbfa390e5cd978690b1b9c21552e5aff krb5-debugsource-1.21.1-8.el9_6.2.i686.rpm SHA-256: 92e0d830bd5bc142b28b8ae95b090a76314b07de34cbb95fc7aab07ea7870e3b krb5-debugsource-1.21.1-8.el9_6.2.i686.rpm SHA-256: 92e0d830bd5bc142b28b8ae95b090a76314b07de34cbb95fc7aab07ea7870e3b krb5-debugsource-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: a58faf7c4ed655c2f2b7a181dcc37fae62bf800cc3194884af740474e042855b krb5-debugsource-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: a58faf7c4ed655c2f2b7a181dcc37fae62bf800cc3194884af740474e042855b krb5-devel-1.21.1-8.el9_6.2.i686.rpm SHA-256: d648cdd23a52fba0e4f94e9d0298c7ea21f428e8908f0f091282247eebe6667d krb5-devel-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 1e7ff133b6c6fcfd278998c63ed17efd3a51f6d67217384c8f64c1f479874ce3 krb5-libs-1.21.1-8.el9_6.2.i686.rpm SHA-256: d22970f85a60e0f3fddc8daad02756743f48b3144396fe173766302ed167392f krb5-libs-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 94ae9f96520c0db88e1efe4c3f65a30e31be3e52be939417ee0ef124bc9bf482 krb5-libs-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: fc42e59bf6b1b6c82eac01badf1c3bdbd4973a400f99ad81e7848e6876e44dcf krb5-libs-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: fc42e59bf6b1b6c82eac01badf1c3bdbd4973a400f99ad81e7848e6876e44dcf krb5-libs-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 8bdd0b08f3e5116fb40ff2da263d53b6fd569692f4c95199b575aaae0c5ae338 krb5-libs-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 8bdd0b08f3e5116fb40ff2da263d53b6fd569692f4c95199b575aaae0c5ae338 krb5-pkinit-1.21.1-8.el9_6.2.i686.rpm SHA-256: df956b813d85381c6cf2365fb300479025b8d75756ff6e54e2c2f9c039b9613d krb5-pkinit-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: da9d52ee76878498efe8128146304720f90a99e7a05be81e9684d2e249f15012 krb5-pkinit-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: ab5e1d66896ac1741f24daaba4dd7299fd8313575be934fc9a674d8f8958b233 krb5-pkinit-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: ab5e1d66896ac1741f24daaba4dd7299fd8313575be934fc9a674d8f8958b233 krb5-pkinit-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 4990d6ff508bdba7c0cb73ab6e22f3d06cdf24a353be447937b0f20f52ef8b79 krb5-pkinit-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 4990d6ff508bdba7c0cb73ab6e22f3d06cdf24a353be447937b0f20f52ef8b79 krb5-server-1.21.1-8.el9_6.2.i686.rpm SHA-256: da2ab47e9cdbbb742c21f279e7b9535fac31bbf4ca43d7f2c827887454d505a5 krb5-server-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: c66359a54e3922949f73741b39dfb9c7f4b97608bcfd7848141b7c15393c14d7 krb5-server-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 0d14dd4de8d59d51c2673a030a93b7e12f936f03005326111ed9174980995ba2 krb5-server-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 0d14dd4de8d59d51c2673a030a93b7e12f936f03005326111ed9174980995ba2 krb5-server-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 2992376555699c1bb71b0975c9ee63ea9011e77b4e638adce4d1b2115efe9d40 krb5-server-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 2992376555699c1bb71b0975c9ee63ea9011e77b4e638adce4d1b2115efe9d40 krb5-server-ldap-1.21.1-8.el9_6.2.i686.rpm SHA-256: 97e09e1fdd286f2e17e902c3642c9863c3bfaef4b14ba9ed0ee3c421206df4ad krb5-server-ldap-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 71a263365efc81862cb7852c4d5f278c5f7a83d9b0a2ba361760c2abe9f79ee0 krb5-server-ldap-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 4b593a758d9d16f5be6f8bf435ebf4216164527ba5d166b3e1b2d2228ed0c011 krb5-server-ldap-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 4b593a758d9d16f5be6f8bf435ebf4216164527ba5d166b3e1b2d2228ed0c011 krb5-server-ldap-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 33d96950dd90a3dc1b73cc31b109ebf7afcde1d15bd1e8b5ecf126c5d1df96ad krb5-server-ldap-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 33d96950dd90a3dc1b73cc31b109ebf7afcde1d15bd1e8b5ecf126c5d1df96ad krb5-workstation-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: cffd204051a17515cb2f1e6505a31b291456e7618f63d1eb4afb19c21949f934 krb5-workstation-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 8c7042cdf1d28a9591190102542c29b0a10f1d1dbd28d569ef1a62c3d73be46a krb5-workstation-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 8c7042cdf1d28a9591190102542c29b0a10f1d1dbd28d569ef1a62c3d73be46a krb5-workstation-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 1d60efa5c737037ec57a8fca353bdc810f5380466ad5c6b0007b0f9955570baa krb5-workstation-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 1d60efa5c737037ec57a8fca353bdc810f5380466ad5c6b0007b0f9955570baa libkadm5-1.21.1-8.el9_6.2.i686.rpm SHA-256: 81c10f4c410416ab3e1f898098e54b111caddaf4a0098a49f7d65e95f64ced83 libkadm5-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: b8b40feddadaf12f6d89e66e054f2a6601a7f1faf8bc9cda9cef2e6ab6d2abd6 libkadm5-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: eff452982550571fb8cc235ab02e65f022d987e3b06bfbe43315737661820aa8 libkadm5-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: eff452982550571fb8cc235ab02e65f022d987e3b06bfbe43315737661820aa8 libkadm5-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 4d5724fcea72ae7b41c44f4267b28460bfa90d72f5ea62469b2fd3b2384e7537 libkadm5-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 4d5724fcea72ae7b41c44f4267b28460bfa90d72f5ea62469b2fd3b2384e7537 Red Hat Enterprise Linux Server - AUS 9.6 SRPM krb5-1.21.1-8.el9_6.2.src.rpm SHA-256: d3d3b491c2e4d3c7bf658c1183d9816bb4e1d0260faf42b7ff115e5d768eff66 x86_64 krb5-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 19be5e72581c04ca7e1fbccd4559aa37b75acfe0da8635b869dcbe025e98ce36 krb5-debuginfo-1.21.1-8.el9_6.2.i686.rpm SHA-256: 19be5e72581c04ca7e1fbccd4559aa37b75acfe0da8635b869dcbe025e98ce36 krb5-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 451d1bd5374a13a245435d7d3f747df0bbfa390e5cd978690b1b9c21552e5aff krb5-debuginfo-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 451d1bd5374a13a245435d7d3f747df0bbfa390e5cd978690b1b9c21552e5aff krb5-debugsource-1.21.1-8.el9_6.2.i686.rpm SHA-256: 92e0d830bd5bc142b28b8ae95b090a76314b07de34cbb95fc7aab07ea7870e3b krb5-debugsource-1.21.1-8.el9_6.2.i686.rpm SHA-256: 92e0d830bd5bc142b28b8ae95b090a76314b07de34cbb95fc7aab07ea7870e3b krb5-debugsource-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: a58faf7c4ed655c2f2b7a181dcc37fae62bf800cc3194884af740474e042855b krb5-debugsource-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: a58faf7c4ed655c2f2b7a181dcc37fae62bf800cc3194884af740474e042855b krb5-devel-1.21.1-8.el9_6.2.i686.rpm SHA-256: d648cdd23a52fba0e4f94e9d0298c7ea21f428e8908f0f091282247eebe6667d krb5-devel-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 1e7ff133b6c6fcfd278998c63ed17efd3a51f6d67217384c8f64c1f479874ce3 krb5-libs-1.21.1-8.el9_6.2.i686.rpm SHA-256: d22970f85a60e0f3fddc8daad02756743f48b3144396fe173766302ed167392f krb5-libs-1.21.1-8.el9_6.2.x86_64.rpm SHA-256: 94ae9f96520c0db88e1efe4c3f65a30e31be3e52be939417ee0ef124bc9bf482 krb5-libs-debuginfo-1.21.