Security · High impactFan score 42 · Tier B
krb5-1.22.3 is released, with fixes for 21 CVEs
The Brief
- MIT Kerberos krb5 1.22.3 has been released.
- The release fixes 21 CVEs, according to the Open Source Security post.
- The security advisory MITKRB5-SA-2026-001 accompanies the release.
Why it matters
Systems running MIT Kerberos (krb5) are affected by 21 fixed CVEs, so they should move to the patched release.
Who’s affected
- Operators of MIT Kerberos (krb5) installations
What to do
- Upgrade MIT Kerberos (krb5) to 1.22.3 or later
- krb5 1.22.3
- #kerberos
- #krb5
- #security
- #authentication
- #cve
Posted by Alan Coopersmith on Nov 09 https://mailman.mit.edu/pipermail/kerberos-announce/2026q4/000212.html announces: https://web.mit.edu/kerberos/advisories/MITKRB5-SA-2026-001.txt advises:
Timeline
krb5 1.22.3 released and announced on the kerberos-announce mailing list
Open Source Security
krb5-1.22.3 is released, with fixes for 21 CVEs