← Back to team overview

enterprise-support team mailing list archive

[Question #817828]: Expected timeline for CVE-2024-37370 & CVE-2024-37371 fix

 

New question #817828 on krb5 in Ubuntu:
https://answers.launchpad.net/ubuntu/+source/krb5/+question/817828

New vulnerabilities CVE-2024-37370 & CVE-2024-37371 are reported in the krb5-user package.  The krb5 git repository has already fixed these vulnerabilities and released a new version. In the Ubuntu focal krb5-user package changelog, I don't see any fix pulled in yet. When can the fix be implemented in the Ubuntu focal krb5-user package?

-- 
You received this question notification because your team Ubuntu
Server/Client Support Team is an answer contact for krb5 in Ubuntu.