Security update for krb5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2800-1 Final 1 1 2021-08-20T08:44:00Z current 2021-08-20T08:44:00Z 2021-08-20T08:44:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for krb5 This update for krb5 fixes the following issues: - CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge. (bsc#1188571) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/389-ds:1.4.2-2021-2800,Container caasp/v4/busybox:1.34.1-2021-2800,Container caasp/v4/caasp-dex:2.16.0-2021-2800,Container caasp/v4/cert-exporter:2.3.0-2021-2800,Container caasp/v4/cilium-etcd-operator:2.0.5-2021-2800,Container caasp/v4/cilium-init:1.5.3-2021-2800,Container caasp/v4/cilium-operator:1.6.6-2021-2800,Container caasp/v4/cilium:1.6.6-2021-2800,Container caasp/v4/cloud-provider-openstack:1.15.0-2021-2800,Container caasp/v4/configmap-reload:0.3.0-2021-2800,Container caasp/v4/coredns:1.6.7-2021-2800,Container caasp/v4/curl:7.60.0-2021-2800,Container caasp/v4/etcd:3.4.13-2021-2800,Container caasp/v4/gangway:3.1.0-2021-2800,Container caasp/v4/grafana:7.5.12-2021-2800,Container caasp/v4/helm-tiller:2.16.12-2021-2800,Container caasp/v4/hyperkube:v1.17.17-2021-2800,Container caasp/v4/k8s-sidecar:0.1.75-2021-2800,Container caasp/v4/kube-state-metrics:1.9.3-2021-2800,Container caasp/v4/kubernetes-client:1.17.17-2021-2800,Container caasp/v4/kucero:1.3.0-2021-2800,Container caasp/v4/kured:1.3.0-2021-2800,Container caasp/v4/metrics-server:0.3.6-2021-2800,Container caasp/v4/prometheus-alertmanager:0.16.2-2021-2800,Container caasp/v4/prometheus-node-exporter:1.1.2-2021-2800,Container caasp/v4/prometheus-pushgateway:0.6.0-2021-2800,Container caasp/v4/prometheus-server:2.7.1-2021-2800,Container caasp/v4/rsyslog:8.39.0-2021-2800,Container caasp/v4/skuba-tooling:0.1.0-2021-2800,Container caasp/v4/test-update:beta-2021-2800,Container caasp/v4/velero-plugin-for-aws:1.0.1-2021-2800,Container caasp/v4/velero-plugin-for-gcp:1.0.1-2021-2800,Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1-2021-2800,Container caasp/v4/velero-restic-restore-helper:1.3.1-2021-2800,Container caasp/v4/velero:1.3.1-2021-2800,Container ses/6/cephcsi/cephcsi:latest-2021-2800,Container ses/6/rook/ceph:latest-2021-2800,Container ses/7/ceph/grafana:latest-2021-2800,Container ses/7/ceph/prometheus-alertmanager:latest-2021-2800,Container ses/7/ceph/prometheus-node-exporter:latest-2021-2800,Container ses/7/ceph/prometheus-server:latest-2021-2800,Container ses/7/cephcsi/cephcsi:latest-2021-2800,Container ses/7/cephcsi/csi-attacher:v3.3.0-2021-2800,Container ses/7/cephcsi/csi-livenessprobe:v1.1.0-2021-2800,Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0-2021-2800,Container ses/7/cephcsi/csi-provisioner:v3.0.0-2021-2800,Container ses/7/cephcsi/csi-resizer:v1.3.0-2021-2800,Container ses/7/cephcsi/csi-snapshotter:v4.2.0-2021-2800,Container ses/7/prometheus-webhook-snmp:latest-2021-2800,Container ses/7/rook/ceph:latest-2021-2800,Container suse/sle15:15.1-2021-2800,Container suse/sle15:15.2-2021-2800,Container suse/sles/15.3/cdi-apiserver:1.37.1-2021-2800,Container suse/sles/15.3/cdi-cloner:1.37.1-2021-2800,Container suse/sles/15.3/cdi-controller:1.37.1-2021-2800,Container suse/sles/15.3/cdi-importer:1.37.1-2021-2800,Container suse/sles/15.3/cdi-operator:1.37.1-2021-2800,Container suse/sles/15.3/cdi-uploadproxy:1.37.1-2021-2800,Container suse/sles/15.3/cdi-uploadserver:1.37.1-2021-2800,Container suse/sles/15.3/libguestfs-tools:0.45.0-2021-2800,Container suse/sles/15.3/virt-api:0.45.0-2021-2800,Container suse/sles/15.3/virt-controller:0.45.0-2021-2800,Container suse/sles/15.3/virt-handler:0.45.0-2021-2800,Container suse/sles/15.3/virt-launcher:0.45.0-2021-2800,Container suse/sles/15.3/virt-operator:0.45.0-2021-2800,Image SLES15-SP3-Micro-BYOS-GCE-2021-2800,SUSE-2021-2800,SUSE-SLE-Module-Basesystem-15-SP2-2021-2800,SUSE-SLE-Module-Basesystem-15-SP3-2021-2800,SUSE-SLE-Module-Server-Applications-15-SP2-2021-2800,SUSE-SLE-Module-Server-Applications-15-SP3-2021-2800,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-2800,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-2800,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-2800,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-2800,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-2800,SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-2800,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-2800,SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-2800,SUSE-SUSE-MicroOS-5.0-2021-2800,SUSE-Storage-6-2021-2800 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212800-1/ Link for SUSE-SU-2021:2800-1 https://lists.suse.com/pipermail/sle-security-updates/2021-August/009316.html E-Mail link for SUSE-SU-2021:2800-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1188571 SUSE Bug 1188571 https://www.suse.com/security/cve/CVE-2021-36222/ SUSE CVE CVE-2021-36222 page Container caasp/v4/389-ds:1.4.2 Container caasp/v4/busybox:1.34.1 Container caasp/v4/caasp-dex:2.16.0 Container caasp/v4/cert-exporter:2.3.0 Container caasp/v4/cilium-etcd-operator:2.0.5 Container caasp/v4/cilium-init:1.5.3 Container caasp/v4/cilium-operator:1.6.6 Container caasp/v4/cilium:1.6.6 Container caasp/v4/cloud-provider-openstack:1.15.0 Container caasp/v4/configmap-reload:0.3.0 Container caasp/v4/coredns:1.6.7 Container caasp/v4/curl:7.60.0 Container caasp/v4/etcd:3.4.13 Container caasp/v4/gangway:3.1.0 Container caasp/v4/grafana:7.5.12 Container caasp/v4/helm-tiller:2.16.12 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/k8s-sidecar:0.1.75 Container caasp/v4/kube-state-metrics:1.9.3 Container caasp/v4/kubernetes-client:1.17.17 Container caasp/v4/kucero:1.3.0 Container caasp/v4/kured:1.3.0 Container caasp/v4/metrics-server:0.3.6 Container caasp/v4/prometheus-alertmanager:0.16.2 Container caasp/v4/prometheus-node-exporter:1.1.2 Container caasp/v4/prometheus-pushgateway:0.6.0 Container caasp/v4/prometheus-server:2.7.1 Container caasp/v4/rsyslog:8.39.0 Container caasp/v4/skuba-tooling:0.1.0 Container caasp/v4/test-update:beta Container caasp/v4/velero-plugin-for-aws:1.0.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 Container caasp/v4/velero-restic-restore-helper:1.3.1 Container caasp/v4/velero:1.3.1 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container ses/7/ceph/grafana:latest Container ses/7/ceph/prometheus-alertmanager:latest Container ses/7/ceph/prometheus-node-exporter:latest Container ses/7/ceph/prometheus-server:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/cephcsi/csi-attacher:v3.3.0 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 Container ses/7/cephcsi/csi-provisioner:v3.0.0 Container ses/7/cephcsi/csi-resizer:v1.3.0 Container ses/7/cephcsi/csi-snapshotter:v4.2.0 Container ses/7/prometheus-webhook-snmp:latest Container ses/7/rook/ceph:latest Container suse/sle15:15.1 Container suse/sle15:15.2 Container suse/sles/15.3/cdi-apiserver:1.37.1 Container suse/sles/15.3/cdi-cloner:1.37.1 Container suse/sles/15.3/cdi-controller:1.37.1 Container suse/sles/15.3/cdi-importer:1.37.1 Container suse/sles/15.3/cdi-operator:1.37.1 Container suse/sles/15.3/cdi-uploadproxy:1.37.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1 Container suse/sles/15.3/libguestfs-tools:0.45.0 Container suse/sles/15.3/virt-api:0.45.0 Container suse/sles/15.3/virt-controller:0.45.0 Container suse/sles/15.3/virt-handler:0.45.0 Container suse/sles/15.3/virt-launcher:0.45.0 Container suse/sles/15.3/virt-operator:0.45.0 Image SLES15-SP3-Micro-BYOS-GCE SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 krb5-1.16.3-3.21.1 krb5-client-1.16.3-3.21.1 krb5-32bit-1.16.3-3.21.1 krb5-64bit-1.16.3-3.21.1 krb5-devel-1.16.3-3.21.1 krb5-devel-32bit-1.16.3-3.21.1 krb5-devel-64bit-1.16.3-3.21.1 krb5-mini-1.16.3-3.21.1 krb5-mini-devel-1.16.3-3.21.1 krb5-plugin-kdb-ldap-1.16.3-3.21.1 krb5-plugin-preauth-otp-1.16.3-3.21.1 krb5-plugin-preauth-pkinit-1.16.3-3.21.1 krb5-server-1.16.3-3.21.1 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/389-ds:1.4.2 krb5-client-1.16.3-3.21.1 as a component of Container caasp/v4/389-ds:1.4.2 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/busybox:1.34.1 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/caasp-dex:2.16.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/cert-exporter:2.3.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/cilium-etcd-operator:2.0.5 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/cilium-init:1.5.3 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/cilium-operator:1.6.6 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/cilium:1.6.6 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/cloud-provider-openstack:1.15.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/configmap-reload:0.3.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/coredns:1.6.7 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/curl:7.60.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/etcd:3.4.13 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/gangway:3.1.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/grafana:7.5.12 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/helm-tiller:2.16.12 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/hyperkube:v1.17.17 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/kube-state-metrics:1.9.3 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/kubernetes-client:1.17.17 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/kucero:1.3.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/kured:1.3.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/metrics-server:0.3.6 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/prometheus-alertmanager:0.16.2 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/prometheus-node-exporter:1.1.2 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/prometheus-pushgateway:0.6.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/prometheus-server:2.7.1 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/rsyslog:8.39.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/skuba-tooling:0.1.0 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/test-update:beta krb5-1.16.3-3.21.1 as a component of Container caasp/v4/velero-plugin-for-aws:1.0.1 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/velero-plugin-for-gcp:1.0.1 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/velero-restic-restore-helper:1.3.1 krb5-1.16.3-3.21.1 as a component of Container caasp/v4/velero:1.3.1 krb5-1.16.3-3.21.1 as a component of Container ses/6/cephcsi/cephcsi:latest krb5-1.16.3-3.21.1 as a component of Container ses/6/rook/ceph:latest krb5-1.16.3-3.21.1 as a component of Container ses/7/ceph/grafana:latest krb5-1.16.3-3.21.1 as a component of Container ses/7/ceph/prometheus-alertmanager:latest krb5-1.16.3-3.21.1 as a component of Container ses/7/ceph/prometheus-node-exporter:latest krb5-1.16.3-3.21.1 as a component of Container ses/7/ceph/prometheus-server:latest krb5-1.16.3-3.21.1 as a component of Container ses/7/cephcsi/cephcsi:latest krb5-1.16.3-3.21.1 as a component of Container ses/7/cephcsi/csi-attacher:v3.3.0 krb5-1.16.3-3.21.1 as a component of Container ses/7/cephcsi/csi-livenessprobe:v1.1.0 krb5-1.16.3-3.21.1 as a component of Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0 krb5-1.16.3-3.21.1 as a component of Container ses/7/cephcsi/csi-provisioner:v3.0.0 krb5-1.16.3-3.21.1 as a component of Container ses/7/cephcsi/csi-resizer:v1.3.0 krb5-1.16.3-3.21.1 as a component of Container ses/7/cephcsi/csi-snapshotter:v4.2.0 krb5-1.16.3-3.21.1 as a component of Container ses/7/prometheus-webhook-snmp:latest krb5-1.16.3-3.21.1 as a component of Container ses/7/rook/ceph:latest krb5-1.16.3-3.21.1 as a component of Container suse/sle15:15.1 krb5-1.16.3-3.21.1 as a component of Container suse/sle15:15.2 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/cdi-apiserver:1.37.1 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/cdi-cloner:1.37.1 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/cdi-controller:1.37.1 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/cdi-operator:1.37.1 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/cdi-uploadproxy:1.37.1 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/cdi-uploadserver:1.37.1 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/virt-api:0.45.0 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/virt-controller:0.45.0 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/virt-handler:0.45.0 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 krb5-1.16.3-3.21.1 as a component of Container suse/sles/15.3/virt-operator:0.45.0 krb5-1.16.3-3.21.1 as a component of Image SLES15-SP3-Micro-BYOS-GCE krb5-1.16.3-3.21.1 as a component of SUSE Enterprise Storage 6 krb5-32bit-1.16.3-3.21.1 as a component of SUSE Enterprise Storage 6 krb5-client-1.16.3-3.21.1 as a component of SUSE Enterprise Storage 6 krb5-devel-1.16.3-3.21.1 as a component of SUSE Enterprise Storage 6 krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Enterprise Storage 6 krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Enterprise Storage 6 krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Enterprise Storage 6 krb5-server-1.16.3-3.21.1 as a component of SUSE Enterprise Storage 6 krb5-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS krb5-32bit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS krb5-client-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS krb5-devel-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS krb5-server-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS krb5-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-32bit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-client-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-devel-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-server-1.16.3-3.21.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS krb5-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Micro 5.0 krb5-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 krb5-32bit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 krb5-client-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 krb5-devel-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 krb5-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 krb5-32bit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 krb5-client-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 krb5-devel-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 krb5-server-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 krb5-server-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 krb5-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL krb5-32bit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL krb5-client-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL krb5-devel-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL krb5-server-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL krb5-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-32bit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-client-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-devel-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-server-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS krb5-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-32bit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-client-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-devel-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-server-1.16.3-3.21.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 krb5-1.16.3-3.21.1 as a component of SUSE Manager Proxy 4.0 krb5-32bit-1.16.3-3.21.1 as a component of SUSE Manager Proxy 4.0 krb5-client-1.16.3-3.21.1 as a component of SUSE Manager Proxy 4.0 krb5-devel-1.16.3-3.21.1 as a component of SUSE Manager Proxy 4.0 krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Manager Proxy 4.0 krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Manager Proxy 4.0 krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Manager Proxy 4.0 krb5-server-1.16.3-3.21.1 as a component of SUSE Manager Proxy 4.0 krb5-1.16.3-3.21.1 as a component of SUSE Manager Retail Branch Server 4.0 krb5-32bit-1.16.3-3.21.1 as a component of SUSE Manager Retail Branch Server 4.0 krb5-client-1.16.3-3.21.1 as a component of SUSE Manager Retail Branch Server 4.0 krb5-devel-1.16.3-3.21.1 as a component of SUSE Manager Retail Branch Server 4.0 krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Manager Retail Branch Server 4.0 krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Manager Retail Branch Server 4.0 krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Manager Retail Branch Server 4.0 krb5-server-1.16.3-3.21.1 as a component of SUSE Manager Retail Branch Server 4.0 krb5-1.16.3-3.21.1 as a component of SUSE Manager Server 4.0 krb5-32bit-1.16.3-3.21.1 as a component of SUSE Manager Server 4.0 krb5-client-1.16.3-3.21.1 as a component of SUSE Manager Server 4.0 krb5-devel-1.16.3-3.21.1 as a component of SUSE Manager Server 4.0 krb5-plugin-kdb-ldap-1.16.3-3.21.1 as a component of SUSE Manager Server 4.0 krb5-plugin-preauth-otp-1.16.3-3.21.1 as a component of SUSE Manager Server 4.0 krb5-plugin-preauth-pkinit-1.16.3-3.21.1 as a component of SUSE Manager Server 4.0 krb5-server-1.16.3-3.21.1 as a component of SUSE Manager Server 4.0 ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation. CVE-2021-36222 Container caasp/v4/389-ds:1.4.2:krb5-1.16.3-3.21.1 Container caasp/v4/389-ds:1.4.2:krb5-client-1.16.3-3.21.1 Container caasp/v4/busybox:1.34.1:krb5-1.16.3-3.21.1 Container caasp/v4/caasp-dex:2.16.0:krb5-1.16.3-3.21.1 Container caasp/v4/cert-exporter:2.3.0:krb5-1.16.3-3.21.1 Container caasp/v4/cilium-etcd-operator:2.0.5:krb5-1.16.3-3.21.1 Container caasp/v4/cilium-init:1.5.3:krb5-1.16.3-3.21.1 Container caasp/v4/cilium-operator:1.6.6:krb5-1.16.3-3.21.1 Container caasp/v4/cilium:1.6.6:krb5-1.16.3-3.21.1 Container caasp/v4/cloud-provider-openstack:1.15.0:krb5-1.16.3-3.21.1 Container caasp/v4/configmap-reload:0.3.0:krb5-1.16.3-3.21.1 Container caasp/v4/coredns:1.6.7:krb5-1.16.3-3.21.1 Container caasp/v4/curl:7.60.0:krb5-1.16.3-3.21.1 Container caasp/v4/etcd:3.4.13:krb5-1.16.3-3.21.1 Container caasp/v4/gangway:3.1.0:krb5-1.16.3-3.21.1 Container caasp/v4/grafana:7.5.12:krb5-1.16.3-3.21.1 Container caasp/v4/helm-tiller:2.16.12:krb5-1.16.3-3.21.1 Container caasp/v4/hyperkube:v1.17.17:krb5-1.16.3-3.21.1 Container caasp/v4/k8s-sidecar:0.1.75:krb5-1.16.3-3.21.1 Container caasp/v4/kube-state-metrics:1.9.3:krb5-1.16.3-3.21.1 Container caasp/v4/kubernetes-client:1.17.17:krb5-1.16.3-3.21.1 Container caasp/v4/kucero:1.3.0:krb5-1.16.3-3.21.1 Container caasp/v4/kured:1.3.0:krb5-1.16.3-3.21.1 Container caasp/v4/metrics-server:0.3.6:krb5-1.16.3-3.21.1 Container caasp/v4/prometheus-alertmanager:0.16.2:krb5-1.16.3-3.21.1 Container caasp/v4/prometheus-node-exporter:1.1.2:krb5-1.16.3-3.21.1 Container caasp/v4/prometheus-pushgateway:0.6.0:krb5-1.16.3-3.21.1 Container caasp/v4/prometheus-server:2.7.1:krb5-1.16.3-3.21.1 Container caasp/v4/rsyslog:8.39.0:krb5-1.16.3-3.21.1 Container caasp/v4/skuba-tooling:0.1.0:krb5-1.16.3-3.21.1 Container caasp/v4/test-update:beta:krb5-1.16.3-3.21.1 Container caasp/v4/velero-plugin-for-aws:1.0.1:krb5-1.16.3-3.21.1 Container caasp/v4/velero-plugin-for-gcp:1.0.1:krb5-1.16.3-3.21.1 Container caasp/v4/velero-plugin-for-microsoft-azure:1.0.1:krb5-1.16.3-3.21.1 Container caasp/v4/velero-restic-restore-helper:1.3.1:krb5-1.16.3-3.21.1 Container caasp/v4/velero:1.3.1:krb5-1.16.3-3.21.1 Container ses/6/cephcsi/cephcsi:latest:krb5-1.16.3-3.21.1 Container ses/6/rook/ceph:latest:krb5-1.16.3-3.21.1 Container ses/7/ceph/grafana:latest:krb5-1.16.3-3.21.1 Container ses/7/ceph/prometheus-alertmanager:latest:krb5-1.16.3-3.21.1 Container ses/7/ceph/prometheus-node-exporter:latest:krb5-1.16.3-3.21.1 Container ses/7/ceph/prometheus-server:latest:krb5-1.16.3-3.21.1 Container ses/7/cephcsi/cephcsi:latest:krb5-1.16.3-3.21.1 Container ses/7/cephcsi/csi-attacher:v3.3.0:krb5-1.16.3-3.21.1 Container ses/7/cephcsi/csi-livenessprobe:v1.1.0:krb5-1.16.3-3.21.1 Container ses/7/cephcsi/csi-node-driver-registrar:v2.3.0:krb5-1.16.3-3.21.1 Container ses/7/cephcsi/csi-provisioner:v3.0.0:krb5-1.16.3-3.21.1 Container ses/7/cephcsi/csi-resizer:v1.3.0:krb5-1.16.3-3.21.1 Container ses/7/cephcsi/csi-snapshotter:v4.2.0:krb5-1.16.3-3.21.1 Container ses/7/prometheus-webhook-snmp:latest:krb5-1.16.3-3.21.1 Container ses/7/rook/ceph:latest:krb5-1.16.3-3.21.1 Container suse/sle15:15.1:krb5-1.16.3-3.21.1 Container suse/sle15:15.2:krb5-1.16.3-3.21.1 Container suse/sles/15.3/cdi-apiserver:1.37.1:krb5-1.16.3-3.21.1 Container suse/sles/15.3/cdi-cloner:1.37.1:krb5-1.16.3-3.21.1 Container suse/sles/15.3/cdi-controller:1.37.1:krb5-1.16.3-3.21.1 Container suse/sles/15.3/cdi-importer:1.37.1:krb5-1.16.3-3.21.1 Container suse/sles/15.3/cdi-operator:1.37.1:krb5-1.16.3-3.21.1 Container suse/sles/15.3/cdi-uploadproxy:1.37.1:krb5-1.16.3-3.21.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:krb5-1.16.3-3.21.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:krb5-1.16.3-3.21.1 Container suse/sles/15.3/virt-api:0.45.0:krb5-1.16.3-3.21.1 Container suse/sles/15.3/virt-controller:0.45.0:krb5-1.16.3-3.21.1 Container suse/sles/15.3/virt-handler:0.45.0:krb5-1.16.3-3.21.1 Container suse/sles/15.3/virt-launcher:0.45.0:krb5-1.16.3-3.21.1 Container suse/sles/15.3/virt-operator:0.45.0:krb5-1.16.3-3.21.1 Image SLES15-SP3-Micro-BYOS-GCE:krb5-1.16.3-3.21.1 SUSE Enterprise Storage 6:krb5-1.16.3-3.21.1 SUSE Enterprise Storage 6:krb5-32bit-1.16.3-3.21.1 SUSE Enterprise Storage 6:krb5-client-1.16.3-3.21.1 SUSE Enterprise Storage 6:krb5-devel-1.16.3-3.21.1 SUSE Enterprise Storage 6:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Enterprise Storage 6:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Enterprise Storage 6:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Enterprise Storage 6:krb5-server-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:krb5-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:krb5-32bit-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:krb5-client-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:krb5-devel-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:krb5-server-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-32bit-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-client-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-devel-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:krb5-server-1.16.3-3.21.1 SUSE Linux Enterprise Micro 5.0:krb5-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:krb5-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:krb5-32bit-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:krb5-client-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:krb5-devel-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:krb5-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:krb5-32bit-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:krb5-client-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:krb5-devel-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:krb5-server-1.16.3-3.21.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:krb5-server-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-BCL:krb5-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-BCL:krb5-32bit-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-BCL:krb5-client-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-BCL:krb5-devel-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-BCL:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-BCL:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-BCL:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-BCL:krb5-server-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-32bit-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-client-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-devel-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Linux Enterprise Server 15 SP1-LTSS:krb5-server-1.16.3-3.21.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-1.16.3-3.21.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-32bit-1.16.3-3.21.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-client-1.16.3-3.21.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-devel-1.16.3-3.21.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:krb5-server-1.16.3-3.21.1 SUSE Manager Proxy 4.0:krb5-1.16.3-3.21.1 SUSE Manager Proxy 4.0:krb5-32bit-1.16.3-3.21.1 SUSE Manager Proxy 4.0:krb5-client-1.16.3-3.21.1 SUSE Manager Proxy 4.0:krb5-devel-1.16.3-3.21.1 SUSE Manager Proxy 4.0:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Manager Proxy 4.0:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Manager Proxy 4.0:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Manager Proxy 4.0:krb5-server-1.16.3-3.21.1 SUSE Manager Retail Branch Server 4.0:krb5-1.16.3-3.21.1 SUSE Manager Retail Branch Server 4.0:krb5-32bit-1.16.3-3.21.1 SUSE Manager Retail Branch Server 4.0:krb5-client-1.16.3-3.21.1 SUSE Manager Retail Branch Server 4.0:krb5-devel-1.16.3-3.21.1 SUSE Manager Retail Branch Server 4.0:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Manager Retail Branch Server 4.0:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Manager Retail Branch Server 4.0:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Manager Retail Branch Server 4.0:krb5-server-1.16.3-3.21.1 SUSE Manager Server 4.0:krb5-1.16.3-3.21.1 SUSE Manager Server 4.0:krb5-32bit-1.16.3-3.21.1 SUSE Manager Server 4.0:krb5-client-1.16.3-3.21.1 SUSE Manager Server 4.0:krb5-devel-1.16.3-3.21.1 SUSE Manager Server 4.0:krb5-plugin-kdb-ldap-1.16.3-3.21.1 SUSE Manager Server 4.0:krb5-plugin-preauth-otp-1.16.3-3.21.1 SUSE Manager Server 4.0:krb5-plugin-preauth-pkinit-1.16.3-3.21.1 SUSE Manager Server 4.0:krb5-server-1.16.3-3.21.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212800-1/ https://www.suse.com/security/cve/CVE-2021-36222.html CVE-2021-36222 https://bugzilla.suse.com/1188571 SUSE Bug 1188571