Security update for krb5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3434-1 Final 1 1 2023-08-24T13:08:21Z current 2023-08-24T13:08:21Z 2023-08-24T13:08:21Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for krb5 This update for krb5 fixes the following issues: - CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/cilium-operator:1.6.6-2023-3434,Container caasp/v4/cilium:1.6.6-2023-3434,Container suse/sle15:15.1-2023-3434,Container suse/sle15:15.2-2023-3434,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2023-3434,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2023-3434,Image SLES15-SP2-BYOS-Azure-2023-3434,Image SLES15-SP2-HPC-BYOS-Azure-2023-3434,Image SLES15-SP2-SAP-Azure-2023-3434,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2023-3434,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2023-3434,Image SLES15-SP2-SAP-BYOS-Azure-2023-3434,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2023-3434,Image SLES15-SP2-SAP-BYOS-GCE-2023-3434,Image SLES15-SP2-SAP-EC2-HVM-2023-3434,Image SLES15-SP2-SAP-GCE-2023-3434,SUSE-2023-3434,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3434,SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3434,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3434,SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3434,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3434,SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3434 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233434-1/ Link for SUSE-SU-2023:3434-1 https://lists.suse.com/pipermail/sle-security-updates/2023-August/016024.html E-Mail link for SUSE-SU-2023:3434-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1214054 SUSE Bug 1214054 https://www.suse.com/security/cve/CVE-2023-36054/ SUSE CVE CVE-2023-36054 page Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container suse/sle15:15.1 Container suse/sle15:15.2 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 krb5-1.16.3-150100.3.30.1 krb5-32bit-1.16.3-150100.3.30.1 krb5-client-1.16.3-150100.3.30.1 krb5-64bit-1.16.3-150100.3.30.1 krb5-devel-1.16.3-150100.3.30.1 krb5-devel-32bit-1.16.3-150100.3.30.1 krb5-devel-64bit-1.16.3-150100.3.30.1 krb5-mini-1.16.3-150100.3.30.1 krb5-mini-devel-1.16.3-150100.3.30.1 krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 krb5-server-1.16.3-150100.3.30.1 krb5-1.16.3-150100.3.30.1 as a component of Container caasp/v4/cilium-operator:1.6.6 krb5-1.16.3-150100.3.30.1 as a component of Container caasp/v4/cilium:1.6.6 krb5-1.16.3-150100.3.30.1 as a component of Container suse/sle15:15.1 krb5-1.16.3-150100.3.30.1 as a component of Container suse/sle15:15.2 krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production krb5-32bit-1.16.3-150100.3.30.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production krb5-32bit-1.16.3-150100.3.30.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-BYOS-Azure krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-BYOS-Azure krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-Azure krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-Azure krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production krb5-32bit-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production krb5-32bit-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-EC2-HVM krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-EC2-HVM krb5-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-GCE krb5-client-1.16.3-150100.3.30.1 as a component of Image SLES15-SP2-SAP-GCE krb5-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-32bit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-client-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-devel-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-server-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS krb5-32bit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS krb5-client-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS krb5-devel-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS krb5-server-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS krb5-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-32bit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-client-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-devel-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-server-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS krb5-32bit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS krb5-client-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS krb5-devel-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS krb5-server-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS krb5-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-32bit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-client-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-devel-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-server-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 krb5-32bit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 krb5-client-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 krb5-devel-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 krb5-server-1.16.3-150100.3.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count. CVE-2023-36054 Container caasp/v4/cilium-operator:1.6.6:krb5-1.16.3-150100.3.30.1 Container caasp/v4/cilium:1.6.6:krb5-1.16.3-150100.3.30.1 Container suse/sle15:15.1:krb5-1.16.3-150100.3.30.1 Container suse/sle15:15.2:krb5-1.16.3-150100.3.30.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:krb5-1.16.3-150100.3.30.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:krb5-32bit-1.16.3-150100.3.30.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:krb5-1.16.3-150100.3.30.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:krb5-32bit-1.16.3-150100.3.30.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-BYOS-Azure:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-BYOS-Azure:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-HPC-BYOS-Azure:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-HPC-BYOS-Azure:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:krb5-32bit-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:krb5-32bit-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-Azure:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-Azure:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-BYOS-Azure:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-BYOS-Azure:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-BYOS-GCE:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-BYOS-GCE:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-EC2-HVM:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-EC2-HVM:krb5-client-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-GCE:krb5-1.16.3-150100.3.30.1 Image SLES15-SP2-SAP-GCE:krb5-client-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-32bit-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-client-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-devel-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-server-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:krb5-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:krb5-32bit-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:krb5-client-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:krb5-devel-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:krb5-server-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-32bit-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-client-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-devel-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-server-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP2-LTSS:krb5-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP2-LTSS:krb5-32bit-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP2-LTSS:krb5-client-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP2-LTSS:krb5-devel-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP2-LTSS:krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP2-LTSS:krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP2-LTSS:krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server 15 SP2-LTSS:krb5-server-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-32bit-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-client-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-devel-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-server-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:krb5-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:krb5-32bit-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:krb5-client-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:krb5-devel-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:krb5-server-1.16.3-150100.3.30.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233434-1/ https://www.suse.com/security/cve/CVE-2023-36054.html CVE-2023-36054 https://bugzilla.suse.com/1214054 SUSE Bug 1214054 https://bugzilla.suse.com/1217441 SUSE Bug 1217441 https://bugzilla.suse.com/1217443 SUSE Bug 1217443 https://bugzilla.suse.com/1218348 SUSE Bug 1218348 https://bugzilla.suse.com/1219472 SUSE Bug 1219472 https://bugzilla.suse.com/1219710 SUSE Bug 1219710