Skip to content

Commit

Permalink
[Security] Fix krb5 CVE-2024-37370 (sonic-net#19577)
Browse files Browse the repository at this point in the history
Why I did it
[Security] Fix krb5 CVE-2024-37370

Work item tracking
Microsoft ADO (number only): 28432951
How I did it
Upgrade krb5 to version 1.18.3-6+deb11u5+fips
  • Loading branch information
xumia authored and arun1355492 committed Jul 26, 2024
1 parent e7378bf commit 3d872cb
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions rules/sonic-fips.mk
Original file line number Diff line number Diff line change
Expand Up @@ -12,14 +12,14 @@ FIPS_KRB5_VERSION = 1.20.1-2+deb12u1+fips
endif

ifeq ($(BLDENV), bullseye)
FIPS_VERSION = 0.12
FIPS_VERSION = 0.13
FIPS_OPENSSL_VERSION = 1.1.1n-0+deb11u5+fips
FIPS_OPENSSH_VERSION = 8.4p1-5+deb11u2+fips
FIPS_PYTHON_MAIN_VERSION = 3.9
FIPS_PYTHON_VERSION = 3.9.2-1+fips
FIPS_GOLANG_MAIN_VERSION = 1.15
FIPS_GOLANG_VERSION = 1.15.15-1~deb11u4+fips
FIPS_KRB5_VERSION = 1.18.3-6+deb11u4+fips
FIPS_KRB5_VERSION = 1.18.3-6+deb11u5+fips
endif

FIPS_URL_PREFIX = https://sonicstorage.blob.core.windows.net/public/fips/$(BLDENV)/$(FIPS_VERSION)/$(CONFIGURED_ARCH)
Expand Down

0 comments on commit 3d872cb

Please sign in to comment.