# krb5-1.22.3 is released, with fixes for 21 CVEs

Source: [Open Source Security](https://seclists.org/oss-sec/2026/q4/618) · 2026-11-09 · Security
Page: https://themorning.dev/story/krb5-1-22-3-is-released-with-fixes-for-21-cves-fd38c8adaeebd5d1
Kind: security · Impact: high

## In brief

- MIT Kerberos krb5 1.22.3 has been released.
- The release fixes 21 CVEs, according to the Open Source Security post.
- The security advisory MITKRB5-SA-2026-001 accompanies the release.

## Why it matters

Systems running MIT Kerberos (krb5) are affected by 21 fixed CVEs, so they should move to the patched release.

## What to do

- Upgrade MIT Kerberos (krb5) to 1.22.3 or later

## Versions

- krb5 1.22.3

## Timeline

- 2026-11-09: krb5 1.22.3 released and announced on the kerberos-announce mailing list

## Coverage

- [krb5-1.22.3 is released, with fixes for 21 CVEs](https://seclists.org/oss-sec/2026/q4/618) — Open Source Security, 2026-11-09

Tags: kerberos, krb5, security, authentication, cve

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev