Red Hat Product Security issued advisory RHSA-2024:5884 addressing two moderate-impact vulnerabilities (CVE-2024-37370 and CVE-2024-37371) in the krb5 package used in Red Hat Enterprise Linux 8.2 AUS. Both vulnerabilities involve GSS message token handling within the Kerberos authentication system. The advisory references updated krb5 packages (version 1.17-19.el8_2.1) that fix these issues. The advisory does not provide CVSS scores but rates the impact as moderate. No exploits are known to be active in the wild. The update is available through Red Hat's official channels and should be applied to affected systems to remediate the vulnerabilities.

The vulnerabilities affect the krb5 component responsible for handling GSS message tokens in Kerberos, potentially impacting the security of network authentication processes. The advisory rates the impact as moderate but does not specify detailed consequences or exploitation methods. No known active exploits have been reported, indicating limited or no current exploitation in the wild.

Red Hat has released an official security update fixing these vulnerabilities in krb5 version 1.17-19.el8_2.1 for Red Hat Enterprise Linux 8.2 AUS. Users should apply this update promptly following Red Hat's published guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.