[ubuntu/noble-updates] krb5 1.20.1-6ubuntu2.3 (Accepted)

[Ubuntu Archive Robot]

krb5 (1.20.1-6ubuntu2.3) noble-security; urgency=medium

  * SECURITY UPDATE: Use of MD5-based message authentication over plaintext
    communications could lead to forgery attacks.
    - debian/patches/CVE-2024-3596.patch: Secure Response Authenticator
      by adding support for the Message-Authenticator attribute in non-EAP
      authentication methods.
    - CVE-2024-3596 
  * Update libk5crypto3 symbols: add k5_hmac_md5 symbol.

Date: 2025-02-04 15:59:36.058346+00:00
Changed-By: nicolas campuzano jimenez <nicolas.campuzano at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/krb5/1.20.1-6ubuntu2.3
-------------- next part --------------
Sorry, changesfile not available.