Red Hat Product Errata RHSA-2025:13777 - Security Advisory
Issued:
2025-08-13
Updated:
2025-08-13

RHSA-2025:13777 - Security Advisory

Synopsis

Moderate: krb5 security update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for krb5 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos key distribution center (KDC).

Security Fix(es):

  • krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions (CVE-2025-3576)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

  • BZ - 2359465 - CVE-2025-3576 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
krb5-1.20.1-9.el9_2.3.src.rpm SHA-256: 35556687ab96c654fdf0fa97af0ae3535061c2331784ca1b1763208dd0088a60
x86_64
krb5-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 9eefae6075d036321ee802093b79ecc93b86e375eed969b598400593b65a346a
krb5-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 8d1e61382d0ecdfa0ca80e672c916a425a4a24d6664fbed190da8d554561bcae
krb5-debugsource-1.20.1-9.el9_2.3.i686.rpm SHA-256: 40ea7e80160c17b6cb0c6576fb1e1b00f09964a7ce8a7d4f398891f4364db1c4
krb5-debugsource-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: bec3edf60fd30d7827baf14fbee4ace83e0db97434d1d06e8e7b33ac9c70b638
krb5-devel-1.20.1-9.el9_2.3.i686.rpm SHA-256: fa4a62df14dab1370f4f02a6c7f3f5b84376da49add552a493c96f6a1198282c
krb5-devel-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 9cc0b862310e07eb58fca7bc584ac296c2159069538a4e1e5c4cdef4c3716cdf
krb5-libs-1.20.1-9.el9_2.3.i686.rpm SHA-256: cbbe869ce682560f83783fc78235129f46454d82acec305286a201f9fe0e1f5c
krb5-libs-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: cab16f5ab1b1782a1aa9f9f99506e858fc043245bb227935b8ae070ef378cbb8
krb5-libs-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 65f035241cbaffc420fa49b07f90d31466da6b5a406c83beed5f80bad452bbd3
krb5-libs-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 5aa7425943f831035096f38ed2bef111c6fb5c367a36c63594603f078598c22d
krb5-pkinit-1.20.1-9.el9_2.3.i686.rpm SHA-256: 62e3bebca8b325faf43c03e29ecfd6a895429013c56e399406b1cfb495a9d166
krb5-pkinit-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 59fa93f61d83482ae94c57e0ba02e1aad13ec94d5dd84fb0dec3110bcb3d3afe
krb5-pkinit-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 243a6b68201f51d8a4670f586229d4b7d783a5f0effa29014573e87ae8261df3
krb5-pkinit-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 63131eaa006f600750714735c52a45b056ff56c17403298d3b03a608b30877d1
krb5-server-1.20.1-9.el9_2.3.i686.rpm SHA-256: 027348bc618b050adcd8726514bce5e00245df6be971e1d14a21313fb6aeeba5
krb5-server-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: db7c2105c2aa6e5d7b262091cd9f931f0464e1060c8984c083b0a397de9e98cd
krb5-server-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: e352347404c5585ce06b2a88bccb71e43aee7cbd8b94f0c0a2812a36e66d8a88
krb5-server-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 1810de1fdd96fe3b7b53172ab84000bb08c4a4679da53a8fdeece298125cb6e4
krb5-server-ldap-1.20.1-9.el9_2.3.i686.rpm SHA-256: 9cf1016992ab8d5a208df8204385284f9c29732e99665b30dd1e3b24c654946c
krb5-server-ldap-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: ac8de71f43bb8aad9cc7cdb93f48e7864813f35c3a8655f7a405da459d3955ee
krb5-server-ldap-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 04bf83d5512266e66f2f4d3fba3587d9d5bd367b312ed70f020186900ac89d66
krb5-server-ldap-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 74d6aadedc85bd99d97965353136b7612500004da6f695cfe36079aef592f188
krb5-workstation-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 481e3e9a56ae59c946a97e681a0056169d68123dab3dbc02cb1b7673e5d7af27
krb5-workstation-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: b8a5be38a616789a209b2c96ce37e49ed4546073669e6194d4ff34e469142d37
libkadm5-1.20.1-9.el9_2.3.i686.rpm SHA-256: 42d7d6a5c0f3603ebbf9a86a6e237c0bd34e23ffd70452085b03dd3d69e5974d
libkadm5-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 41ed84997e0c58e32695ff91615f8999268c2a2f0a2072496d3ecc387bc21f6e
libkadm5-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 555f2a8bd7bc373822df6a016fd8e9be6e4091a4799386f8b7b5c5c0999088c1
libkadm5-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 3aab0e8194b5c110f6c3646105dde154330a4994aa3ac4b04d86873c591a6f82

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
krb5-1.20.1-9.el9_2.3.src.rpm SHA-256: 35556687ab96c654fdf0fa97af0ae3535061c2331784ca1b1763208dd0088a60
ppc64le
krb5-debuginfo-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: aea8b90ecca57de1eb0339a1a73cd1483d23d8408dfce3e5d4307c9c51521327
krb5-debugsource-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 2da39e482220563203611e41499f16d83806a5ebcdaae09093cba73c63874791
krb5-devel-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 9bb7733f9e3c5dadd4044ceb586077de6e0c9e01aae60c17a737c728bb2c7730
krb5-libs-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: b782b01e3508d0d76cb830c90de7f99a8d38a5c6b7263edad28512f9038258e7
krb5-libs-debuginfo-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 618a89aaad48920ee5a4eba8804525988a508dc82ce59d10db350235121c8bc4
krb5-pkinit-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: b3ebaf97d3b50243aa6f55a31aa714d50b920f568dbc159bada3d25261fc780d
krb5-pkinit-debuginfo-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: a2476ebd756f8f1b04715cd63178734ca3d833ed078034662aeef40742a82b62
krb5-server-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 4c21e1a94de06d62e3383f22e9bb4dabd66b678fb41a5c6b48bd7382c924962d
krb5-server-debuginfo-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 25d16bd6124ea89e3dc646177b1b16e7f2f9cd1fe9d92fd93260d88a6b4bfcdb
krb5-server-ldap-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 99b932157616101a7ab45cd3062a21a16c10f9540dad458d3811445d842716a9
krb5-server-ldap-debuginfo-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 14c723bf9b081f4114ed439e9092e9407ef3c260ceeab69ce8ca09a9b80da824
krb5-workstation-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: e78d19a5925cf36349f3793f4dcca6cb53271c26fe51af633af179a58143f8a4
krb5-workstation-debuginfo-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: b8cbf5d008d47ae271f53f1b44fbc0d9f56d8c895e78d83f4207a61433ff64f7
libkadm5-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 863644254602fb9c0614aba928bd5b243dd66c2b526b0005cf2bd667700d97f2
libkadm5-debuginfo-1.20.1-9.el9_2.3.ppc64le.rpm SHA-256: 180425cb58906ef7e9d956f5fbaef225d75ed417e36c574a1a9a9b5d0cd76ff3

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
krb5-1.20.1-9.el9_2.3.src.rpm SHA-256: 35556687ab96c654fdf0fa97af0ae3535061c2331784ca1b1763208dd0088a60
x86_64
krb5-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 9eefae6075d036321ee802093b79ecc93b86e375eed969b598400593b65a346a
krb5-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 8d1e61382d0ecdfa0ca80e672c916a425a4a24d6664fbed190da8d554561bcae
krb5-debugsource-1.20.1-9.el9_2.3.i686.rpm SHA-256: 40ea7e80160c17b6cb0c6576fb1e1b00f09964a7ce8a7d4f398891f4364db1c4
krb5-debugsource-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: bec3edf60fd30d7827baf14fbee4ace83e0db97434d1d06e8e7b33ac9c70b638
krb5-devel-1.20.1-9.el9_2.3.i686.rpm SHA-256: fa4a62df14dab1370f4f02a6c7f3f5b84376da49add552a493c96f6a1198282c
krb5-devel-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 9cc0b862310e07eb58fca7bc584ac296c2159069538a4e1e5c4cdef4c3716cdf
krb5-libs-1.20.1-9.el9_2.3.i686.rpm SHA-256: cbbe869ce682560f83783fc78235129f46454d82acec305286a201f9fe0e1f5c
krb5-libs-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: cab16f5ab1b1782a1aa9f9f99506e858fc043245bb227935b8ae070ef378cbb8
krb5-libs-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 65f035241cbaffc420fa49b07f90d31466da6b5a406c83beed5f80bad452bbd3
krb5-libs-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 5aa7425943f831035096f38ed2bef111c6fb5c367a36c63594603f078598c22d
krb5-pkinit-1.20.1-9.el9_2.3.i686.rpm SHA-256: 62e3bebca8b325faf43c03e29ecfd6a895429013c56e399406b1cfb495a9d166
krb5-pkinit-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 59fa93f61d83482ae94c57e0ba02e1aad13ec94d5dd84fb0dec3110bcb3d3afe
krb5-pkinit-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 243a6b68201f51d8a4670f586229d4b7d783a5f0effa29014573e87ae8261df3
krb5-pkinit-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 63131eaa006f600750714735c52a45b056ff56c17403298d3b03a608b30877d1
krb5-server-1.20.1-9.el9_2.3.i686.rpm SHA-256: 027348bc618b050adcd8726514bce5e00245df6be971e1d14a21313fb6aeeba5
krb5-server-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: db7c2105c2aa6e5d7b262091cd9f931f0464e1060c8984c083b0a397de9e98cd
krb5-server-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: e352347404c5585ce06b2a88bccb71e43aee7cbd8b94f0c0a2812a36e66d8a88
krb5-server-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 1810de1fdd96fe3b7b53172ab84000bb08c4a4679da53a8fdeece298125cb6e4
krb5-server-ldap-1.20.1-9.el9_2.3.i686.rpm SHA-256: 9cf1016992ab8d5a208df8204385284f9c29732e99665b30dd1e3b24c654946c
krb5-server-ldap-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: ac8de71f43bb8aad9cc7cdb93f48e7864813f35c3a8655f7a405da459d3955ee
krb5-server-ldap-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 04bf83d5512266e66f2f4d3fba3587d9d5bd367b312ed70f020186900ac89d66
krb5-server-ldap-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 74d6aadedc85bd99d97965353136b7612500004da6f695cfe36079aef592f188
krb5-workstation-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 481e3e9a56ae59c946a97e681a0056169d68123dab3dbc02cb1b7673e5d7af27
krb5-workstation-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: b8a5be38a616789a209b2c96ce37e49ed4546073669e6194d4ff34e469142d37
libkadm5-1.20.1-9.el9_2.3.i686.rpm SHA-256: 42d7d6a5c0f3603ebbf9a86a6e237c0bd34e23ffd70452085b03dd3d69e5974d
libkadm5-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 41ed84997e0c58e32695ff91615f8999268c2a2f0a2072496d3ecc387bc21f6e
libkadm5-debuginfo-1.20.1-9.el9_2.3.i686.rpm SHA-256: 555f2a8bd7bc373822df6a016fd8e9be6e4091a4799386f8b7b5c5c0999088c1
libkadm5-debuginfo-1.20.1-9.el9_2.3.x86_64.rpm SHA-256: 3aab0e8194b5c110f6c3646105dde154330a4994aa3ac4b04d86873c591a6f82

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
krb5-1.20.1-9.el9_2.3.src.rpm SHA-256: 35556687ab96c654fdf0fa97af0ae3535061c2331784ca1b1763208dd0088a60
aarch64
krb5-debuginfo-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: 57cd8c1fb6476ce9fefd549e64f797d5eab99e641d1d24f20c403deae9356cb8
krb5-debugsource-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: ae82702e50441910347fe7786703c59bacd43df2dbfe45ea856c0aa7dfebf304
krb5-devel-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: d1e74bff1f2e05358d1f41c384857c1485cf59365f3ae4e7e40078e5188e2216
krb5-libs-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: 66cf914b1cd714387118bddc5b4fa53b7c4a2571d2b98103b833ea98ad6108c2
krb5-libs-debuginfo-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: de89119aca39d6a075f455e51631470a68caff7b5fd31b9d42d4e61638ae6d69
krb5-pkinit-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: 29dca5cc8fa758440c1863959db1e28fada4e043b98215a42c2149bde269903f
krb5-pkinit-debuginfo-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: 61e61c87b90d831475b205ba6cc1dcd9beb20902ad8971b66fe20033b82daf4a
krb5-server-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: c9a494da62dd0474cfa6c0619f6e6fda083d2054c7ace20b8e7f009685bb1105
krb5-server-debuginfo-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: c79d3c6213da4ca2a0801dd215baf6c7896eb5236a9385c4a1c8bb6b39890497
krb5-server-ldap-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: ff53744d91927c4e2d735286e1900833e5122d015b524f85d3fcc758865e2805
krb5-server-ldap-debuginfo-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: a8b73da07686d233e0f0b12ae9c26b734622322564c3683e2222582254378bd7
krb5-workstation-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: 7e3e22db7f38a035f1932077804794a2b8d2751de3f2a020801e3a90eb9f6eff
krb5-workstation-debuginfo-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: 9ef84ae9ea719f24405991ffa0364105ab053ad71ec8d6bf3b33d9846cd9b028
libkadm5-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: 8789c115fa223738cd75e1eadfe4c12ea16d9d99d8f9ff0a6c21661d7fa71290
libkadm5-debuginfo-1.20.1-9.el9_2.3.aarch64.rpm SHA-256: d57b00ccb1a99db3bfd055f68ee7b10a0b4ac7c41ca1a495dedd7b2e7eb62982

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
krb5-1.20.1-9.el9_2.3.src.rpm SHA-256: 35556687ab96c654fdf0fa97af0ae3535061c2331784ca1b1763208dd0088a60
s390x
krb5-debuginfo-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 1d6e0bdc5660b7d2ec87b06122a2916b54189efa8033fef63e4088de3434211a
krb5-debugsource-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 938d0a1b254799322ebf1c9859759bf973b09ae964a0ac842366c0b1b4fe609c
krb5-devel-1.20.1-9.el9_2.3.s390x.rpm SHA-256: a895a99e1167359c4a039c7099dbe0977e174bbb3bdb67e7a450ff247a1fce40
krb5-libs-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 07dcc731c6128df5258b47fc82a674036a0322956b8a1a14fd43a27793d023a9
krb5-libs-debuginfo-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 5087e68a1b07b932bd32d7f0e5229f2b04abaf3d5e70715abebc3277b2179717
krb5-pkinit-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 8c12b9607a429fe53d39245169cb74a75c68f49480d4d1c420c3fdc14f0ed8b2
krb5-pkinit-debuginfo-1.20.1-9.el9_2.3.s390x.rpm SHA-256: fa927e24affd4c481408d32473b06b8415f58b2b7c687c186140021c54f201ea
krb5-server-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 21eb2d10e7e811c742e07699c60cecb64c38d095c8408250f28c893a430c97f8
krb5-server-debuginfo-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 8a93d5388b557a863fe495187fc6d7fad6b326a14b60dd7eb7acfc722ef4ebaa
krb5-server-ldap-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 104676f31728040a4c08b62ea87f6f2e0609ecad7f5333f5c39994ecf7722c28
krb5-server-ldap-debuginfo-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 01a9ca5714365038386b8c6b8004f0a01ab2898d449a569dd8451707570b5136
krb5-workstation-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 89c6a0ea8cfde3c4e77e6db5006f330bcf8d62897ea487680b842cf4eec7ec0f
krb5-workstation-debuginfo-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 28aa1ce8ff49c5f66b79505a5903346f2c2ac527821d8e09a7d1d993f7edf2c2
libkadm5-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 11b4ec8635041529f2f9e84573559c8e7f8479f60064fb7448238e96751b9aa8
libkadm5-debuginfo-1.20.1-9.el9_2.3.s390x.rpm SHA-256: 54c83b93ef4782f8ebaf69330c7a9cea3826d16aaead0f5a6e7b529197b261ee

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.