[blfs] branch trunk updated: Fix CVE-2026-40355 and CVE-2026-40356 in krb5 (Security Update)

This is an automated email from the git hooks/post-receive script.

git pushed a commit to branch trunk
in repository blfs.

The following commit(s) were added to refs/heads/trunk by this push:
     new c1642c81e3 Fix CVE-2026-40355 and CVE-2026-40356 in krb5 (Security Update)
c1642c81e3 is described below

commit c1642c81e3e73eaff0a89fe0632c0c9840b1a89f
Author: Joe Locash <[email protected]>
AuthorDate: Sun May 3 17:02:23 2026 -0400

    Fix CVE-2026-40355 and CVE-2026-40356 in krb5 (Security Update)
---
 introduction/welcome/changelog.xml |  4 ++++
 postlfs/security/mitkrb.xml        | 12 ++++++++++++
 2 files changed, 16 insertions(+)

diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index 038f4eb539..6feb2b5b64 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -42,6 +42,10 @@
     <listitem>
       <para>May 3rd, 2026</para>
       <itemizedlist>
+        <listitem>
+          <para>[jlocash] - Add a patch for mitkrb to fix 2 CVE's (Security Update). Fixes
+          <ulink url="&blfs-ticket-root;23215">#23215</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[jlocash] - Update to libgsf-1.14.57. Fixes
           <ulink url="&blfs-ticket-root;23220">#23220</ulink>.</para>
diff --git a/postlfs/security/mitkrb.xml b/postlfs/security/mitkrb.xml
index 9dd13905cb..04695a5c13 100644
--- a/postlfs/security/mitkrb.xml
+++ b/postlfs/security/mitkrb.xml
@@ -78,6 +78,12 @@
            <ulink url="&patch-root;/mitkrb-&mitkrb-version;-upstream_fix-1.patch"/>
         </para>
       </listitem>
+      <listitem>
+        <para>
+          Required patch:
+           <ulink url="&patch-root;/mitkrb-&mitkrb-version;-security_fix-1.patch"/>
+        </para>
+      </listitem>
     </itemizedlist>
 
     <bridgehead renderas="sect3">MIT Kerberos V5 Dependencies</bridgehead>
@@ -123,6 +129,12 @@
 
 <screen><userinput remap="pre">patch -Np1 -i ../mitkrb-&mitkrb-version;-upstream_fix-1.patch</userinput></screen>
 
+    <para>
+      Next, fix two security issues identified upstream:
+    </para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../mitkrb-&mitkrb-version;-security_fix-1.patch</userinput></screen>
+
     <para>
       Build <application>MIT Kerberos V5</application> by running the
       following commands:

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page