diff --git a/freeipa.spec b/freeipa.spec
index ec28bc2..d340cdc 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -76,7 +76,7 @@
 %global package_name freeipa
 %global alt_name ipa
 # Fix for CVE-2018-20217
-%global krb5_version 1.19
+%global krb5_version 1.18
 %global krb5_kdb_version 8.0
 # 0.7.16: https://github.com/drkjam/netaddr/issues/71
 %global python_netaddr_version 0.7.16