Security update for krb5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3325-1 Final 1 1 2023-08-16T06:26:10Z current 2023-08-16T06:26:10Z 2023-08-16T06:26:10Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for krb5 This update for krb5 fixes the following issues: - CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-init:15.5-2023-3325,Container bci/bci-sle15-kernel-module-devel:15.5-2023-3325,Container bci/golang:1.20-openssl-2023-3325,Container bci/golang:1.21-2023-3325,Container bci/golang:latest-2023-3325,Container bci/node:16-2023-3325,Container bci/node:18-2023-3325,Container bci/nodejs:latest-2023-3325,Container bci/openjdk-devel:11-2023-3325,Container bci/openjdk-devel:17-2023-3325,Container bci/openjdk:11-2023-3325,Container bci/openjdk:17-2023-3325,Container bci/php-apache:latest-2023-3325,Container bci/php-fpm:latest-2023-3325,Container bci/php:latest-2023-3325,Container bci/python:3-2023-3325,Container bci/python:latest-2023-3325,Container bci/ruby:latest-2023-3325,Container bci/rust:1.77-2023-3325,Container bci/rust:latest-2023-3325,Container rancher/seedimage-builder:latest-2023-3325,Container suse/389-ds:latest-2023-3325,Container suse/git:latest-2023-3325,Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest-2023-3325,Container suse/ltss/sle15.5/sle15:latest-2023-3325,Container suse/nginx:latest-2023-3325,Container suse/pcp:latest-2023-3325,Container suse/postgres:14-2023-3325,Container suse/postgres:15-2023-3325,Container suse/postgres:latest-2023-3325,Container suse/registry:latest-2023-3325,Container suse/rmt-mariadb-client:latest-2023-3325,Container suse/rmt-mariadb:latest-2023-3325,Container suse/rmt-server:latest-2023-3325,Container suse/sle-micro/5.5/toolbox:latest-2023-3325,Container suse/sle-micro/5.5:latest-2023-3325,Container suse/sle-micro/base-5.5:latest-2023-3325,Container suse/sle-micro/kvm-5.5:latest-2023-3325,Container suse/sle-micro/rt-5.5:latest-2023-3325,Container suse/sle15:15.5-2023-3325,Image SLES15-SP5-Azure-3P-2023-3325,Image SLES15-SP5-Azure-Basic-2023-3325,Image SLES15-SP5-Azure-Standard-2023-3325,Image SLES15-SP5-BYOS-Azure-2023-3325,Image SLES15-SP5-BYOS-EC2-2023-3325,Image SLES15-SP5-BYOS-GCE-2023-3325,Image SLES15-SP5-CHOST-BYOS-Aliyun-2023-3325,Image SLES15-SP5-CHOST-BYOS-Azure-2023-3325,Image SLES15-SP5-CHOST-BYOS-EC2-2023-3325,Image SLES15-SP5-CHOST-BYOS-GCE-2023-3325,Image SLES15-SP5-CHOST-BYOS-GDC-2023-3325,Image SLES15-SP5-CHOST-BYOS-SAP-CCloud-2023-3325,Image SLES15-SP5-EC2-2023-3325,Image SLES15-SP5-GCE-2023-3325,Image SLES15-SP5-HPC-Azure-2023-3325,Image SLES15-SP5-HPC-BYOS-Azure-2023-3325,Image SLES15-SP5-HPC-BYOS-EC2-2023-3325,Image SLES15-SP5-HPC-BYOS-GCE-2023-3325,Image SLES15-SP5-Hardened-BYOS-Azure-2023-3325,Image SLES15-SP5-Hardened-BYOS-EC2-2023-3325,Image SLES15-SP5-Hardened-BYOS-GCE-2023-3325,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-2023-3325,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure-2023-3325,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2-2023-3325,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE-2023-3325,Image SLES15-SP5-Manager-Server-5-0-2023-3325,Image SLES15-SP5-Manager-Server-5-0-Azure-llc-2023-3325,Image SLES15-SP5-Manager-Server-5-0-Azure-ltd-2023-3325,Image SLES15-SP5-Manager-Server-5-0-BYOS-2023-3325,Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure-2023-3325,Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2-2023-3325,Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE-2023-3325,Image SLES15-SP5-Manager-Server-5-0-EC2-llc-2023-3325,Image SLES15-SP5-Manager-Server-5-0-EC2-ltd-2023-3325,Image SLES15-SP5-Micro-5-5-2023-3325,Image SLES15-SP5-Micro-5-5-Azure-2023-3325,Image SLES15-SP5-Micro-5-5-BYOS-2023-3325,Image SLES15-SP5-Micro-5-5-BYOS-Azure-2023-3325,Image SLES15-SP5-Micro-5-5-BYOS-EC2-2023-3325,Image SLES15-SP5-Micro-5-5-BYOS-GCE-2023-3325,Image SLES15-SP5-Micro-5-5-EC2-2023-3325,Image SLES15-SP5-Micro-5-5-GCE-2023-3325,Image SLES15-SP5-SAP-Azure-3P-2023-3325,Image SLES15-SP5-SAP-Azure-LI-BYOS-2023-3325,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2023-3325,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2023-3325,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2023-3325,Image SLES15-SP5-SAP-BYOS-Azure-2023-3325,Image SLES15-SP5-SAP-BYOS-EC2-2023-3325,Image SLES15-SP5-SAP-BYOS-GCE-2023-3325,Image SLES15-SP5-SAP-Hardened-Azure-2023-3325,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2023-3325,Image SLES15-SP5-SAP-Hardened-BYOS-EC2-2023-3325,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2023-3325,Image SLES15-SP5-SAP-Hardened-GCE-2023-3325,Image SLES15-SP5-SAPCAL-Azure-2023-3325,Image SLES15-SP5-SAPCAL-EC2-2023-3325,Image SLES15-SP5-SAPCAL-GCE-2023-3325,SUSE-2023-3325,SUSE-SLE-Module-Basesystem-15-SP5-2023-3325,SUSE-SLE-Module-Server-Applications-15-SP5-2023-3325,openSUSE-SLE-15.5-2023-3325 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233325-1/ Link for SUSE-SU-2023:3325-1 https://lists.suse.com/pipermail/sle-updates/2023-August/031023.html E-Mail link for SUSE-SU-2023:3325-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1214054 SUSE Bug 1214054 https://www.suse.com/security/cve/CVE-2023-36054/ SUSE CVE CVE-2023-36054 page Container bci/bci-init:15.5 Container bci/bci-sle15-kernel-module-devel:15.5 Container bci/golang:1.20-openssl Container bci/golang:1.21 Container bci/golang:latest Container bci/node:16 Container bci/node:18 Container bci/nodejs:latest Container bci/openjdk-devel:11 Container bci/openjdk-devel:17 Container bci/openjdk:11 Container bci/openjdk:17 Container bci/php-apache:latest Container bci/php-fpm:latest Container bci/php:latest Container bci/python:3 Container bci/python:latest Container bci/ruby:latest Container bci/rust:1.77 Container bci/rust:latest Container rancher/seedimage-builder:latest Container suse/389-ds:latest Container suse/git:latest Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container suse/ltss/sle15.5/sle15:latest Container suse/nginx:latest Container suse/pcp:latest Container suse/postgres:14 Container suse/postgres:15 Container suse/postgres:latest Container suse/registry:latest Container suse/rmt-mariadb-client:latest Container suse/rmt-mariadb:latest Container suse/rmt-server:latest Container suse/sle-micro/5.5/toolbox:latest Container suse/sle-micro/5.5:latest Container suse/sle-micro/base-5.5:latest Container suse/sle-micro/kvm-5.5:latest Container suse/sle-micro/rt-5.5:latest Container suse/sle15:15.5 Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0 Image SLES15-SP5-Manager-Server-5-0-Azure-llc Image SLES15-SP5-Manager-Server-5-0-Azure-ltd Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-EC2-llc Image SLES15-SP5-Manager-Server-5-0-EC2-ltd Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-Azure-3P Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 openSUSE Leap 15.5 krb5-1.20.1-150500.3.3.1 krb5-client-1.20.1-150500.3.3.1 krb5-32bit-1.20.1-150500.3.3.1 krb5-64bit-1.20.1-150500.3.3.1 krb5-devel-1.20.1-150500.3.3.1 krb5-devel-32bit-1.20.1-150500.3.3.1 krb5-devel-64bit-1.20.1-150500.3.3.1 krb5-mini-1.20.1-150500.3.3.1 krb5-mini-devel-1.20.1-150500.3.3.1 krb5-plugin-kdb-ldap-1.20.1-150500.3.3.1 krb5-plugin-preauth-otp-1.20.1-150500.3.3.1 krb5-plugin-preauth-pkinit-1.20.1-150500.3.3.1 krb5-plugin-preauth-spake-1.20.1-150500.3.3.1 krb5-server-1.20.1-150500.3.3.1 krb5-1.20.1-150500.3.3.1 as a component of Container bci/bci-init:15.5 krb5-1.20.1-150500.3.3.1 as a component of Container bci/bci-sle15-kernel-module-devel:15.5 krb5-1.20.1-150500.3.3.1 as a component of Container bci/golang:1.20-openssl krb5-1.20.1-150500.3.3.1 as a component of Container bci/golang:1.21 krb5-1.20.1-150500.3.3.1 as a component of Container bci/golang:latest krb5-1.20.1-150500.3.3.1 as a component of Container bci/node:16 krb5-1.20.1-150500.3.3.1 as a component of Container bci/node:18 krb5-1.20.1-150500.3.3.1 as a component of Container bci/nodejs:latest krb5-1.20.1-150500.3.3.1 as a component of Container bci/openjdk-devel:11 krb5-1.20.1-150500.3.3.1 as a component of Container bci/openjdk-devel:17 krb5-1.20.1-150500.3.3.1 as a component of Container bci/openjdk:11 krb5-1.20.1-150500.3.3.1 as a component of Container bci/openjdk:17 krb5-1.20.1-150500.3.3.1 as a component of Container bci/php-apache:latest krb5-1.20.1-150500.3.3.1 as a component of Container bci/php-fpm:latest krb5-1.20.1-150500.3.3.1 as a component of Container bci/php:latest krb5-1.20.1-150500.3.3.1 as a component of Container bci/python:3 krb5-1.20.1-150500.3.3.1 as a component of Container bci/python:latest krb5-1.20.1-150500.3.3.1 as a component of Container bci/ruby:latest krb5-1.20.1-150500.3.3.1 as a component of Container bci/rust:1.77 krb5-1.20.1-150500.3.3.1 as a component of Container bci/rust:latest krb5-1.20.1-150500.3.3.1 as a component of Container rancher/seedimage-builder:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/389-ds:latest krb5-client-1.20.1-150500.3.3.1 as a component of Container suse/389-ds:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/git:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/ltss/sle15.5/sle15:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/nginx:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/pcp:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/postgres:14 krb5-1.20.1-150500.3.3.1 as a component of Container suse/postgres:15 krb5-1.20.1-150500.3.3.1 as a component of Container suse/postgres:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/registry:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/rmt-mariadb-client:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/rmt-mariadb:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/rmt-server:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/sle-micro/5.5/toolbox:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/sle-micro/5.5:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/sle-micro/base-5.5:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/sle-micro/kvm-5.5:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/sle-micro/rt-5.5:latest krb5-1.20.1-150500.3.3.1 as a component of Container suse/sle15:15.5 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Azure-3P krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Azure-3P krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Azure-Basic krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Azure-Basic krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Azure-Standard krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Azure-Standard krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-BYOS-Azure krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-BYOS-EC2 krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-BYOS-GCE krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-Aliyun krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-GDC krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-EC2 krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-GCE krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-HPC-Azure krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-HPC-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-HPC-BYOS-Azure krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-HPC-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-HPC-BYOS-EC2 krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-HPC-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-HPC-BYOS-GCE krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-HPC-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-EC2 krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0-Azure-llc krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0-Azure-ltd krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-llc krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-ltd krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Micro-5-5 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Micro-5-5-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-Micro-5-5-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-3P krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-3P krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS krb5-32bit-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production krb5-32bit-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS krb5-32bit-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production krb5-32bit-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-Azure krb5-32bit-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-Azure krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-Azure krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-EC2 krb5-32bit-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-EC2 krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-EC2 krb5-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-GCE krb5-32bit-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-GCE krb5-client-1.20.1-150500.3.3.1 as a component of Image SLES15-SP5-SAPCAL-GCE krb5-1.20.1-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 krb5-32bit-1.20.1-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 krb5-client-1.20.1-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 krb5-devel-1.20.1-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 krb5-plugin-preauth-otp-1.20.1-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 krb5-plugin-preauth-pkinit-1.20.1-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 krb5-plugin-kdb-ldap-1.20.1-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 krb5-server-1.20.1-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 krb5-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-32bit-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-client-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-devel-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-devel-32bit-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-plugin-kdb-ldap-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-plugin-preauth-otp-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-plugin-preauth-pkinit-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-plugin-preauth-spake-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 krb5-server-1.20.1-150500.3.3.1 as a component of openSUSE Leap 15.5 lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count. CVE-2023-36054 Container bci/bci-init:15.5:krb5-1.20.1-150500.3.3.1 Container bci/bci-sle15-kernel-module-devel:15.5:krb5-1.20.1-150500.3.3.1 Container bci/golang:1.20-openssl:krb5-1.20.1-150500.3.3.1 Container bci/golang:1.21:krb5-1.20.1-150500.3.3.1 Container bci/golang:latest:krb5-1.20.1-150500.3.3.1 Container bci/node:16:krb5-1.20.1-150500.3.3.1 Container bci/node:18:krb5-1.20.1-150500.3.3.1 Container bci/nodejs:latest:krb5-1.20.1-150500.3.3.1 Container bci/openjdk-devel:11:krb5-1.20.1-150500.3.3.1 Container bci/openjdk-devel:17:krb5-1.20.1-150500.3.3.1 Container bci/openjdk:11:krb5-1.20.1-150500.3.3.1 Container bci/openjdk:17:krb5-1.20.1-150500.3.3.1 Container bci/php-apache:latest:krb5-1.20.1-150500.3.3.1 Container bci/php-fpm:latest:krb5-1.20.1-150500.3.3.1 Container bci/php:latest:krb5-1.20.1-150500.3.3.1 Container bci/python:3:krb5-1.20.1-150500.3.3.1 Container bci/python:latest:krb5-1.20.1-150500.3.3.1 Container bci/ruby:latest:krb5-1.20.1-150500.3.3.1 Container bci/rust:1.77:krb5-1.20.1-150500.3.3.1 Container bci/rust:latest:krb5-1.20.1-150500.3.3.1 Container rancher/seedimage-builder:latest:krb5-1.20.1-150500.3.3.1 Container suse/389-ds:latest:krb5-1.20.1-150500.3.3.1 Container suse/389-ds:latest:krb5-client-1.20.1-150500.3.3.1 Container suse/git:latest:krb5-1.20.1-150500.3.3.1 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:krb5-1.20.1-150500.3.3.1 Container suse/ltss/sle15.5/sle15:latest:krb5-1.20.1-150500.3.3.1 Container suse/nginx:latest:krb5-1.20.1-150500.3.3.1 Container suse/pcp:latest:krb5-1.20.1-150500.3.3.1 Container suse/postgres:14:krb5-1.20.1-150500.3.3.1 Container suse/postgres:15:krb5-1.20.1-150500.3.3.1 Container suse/postgres:latest:krb5-1.20.1-150500.3.3.1 Container suse/registry:latest:krb5-1.20.1-150500.3.3.1 Container suse/rmt-mariadb-client:latest:krb5-1.20.1-150500.3.3.1 Container suse/rmt-mariadb:latest:krb5-1.20.1-150500.3.3.1 Container suse/rmt-server:latest:krb5-1.20.1-150500.3.3.1 Container suse/sle-micro/5.5/toolbox:latest:krb5-1.20.1-150500.3.3.1 Container suse/sle-micro/5.5:latest:krb5-1.20.1-150500.3.3.1 Container suse/sle-micro/base-5.5:latest:krb5-1.20.1-150500.3.3.1 Container suse/sle-micro/kvm-5.5:latest:krb5-1.20.1-150500.3.3.1 Container suse/sle-micro/rt-5.5:latest:krb5-1.20.1-150500.3.3.1 Container suse/sle15:15.5:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Azure-3P:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Azure-3P:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-Azure-Basic:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Azure-Basic:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-Azure-Standard:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Azure-Standard:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-BYOS-Azure:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-BYOS-EC2:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-BYOS-GCE:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-CHOST-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-CHOST-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-CHOST-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-CHOST-BYOS-GDC:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-EC2:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-GCE:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-HPC-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-HPC-Azure:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-HPC-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-HPC-BYOS-Azure:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-HPC-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-HPC-BYOS-EC2:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-HPC-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-HPC-BYOS-GCE:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-Hardened-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Hardened-BYOS-Azure:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-Hardened-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Hardened-BYOS-EC2:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0-Azure-llc:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0-Azure-ltd:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0-BYOS:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0-EC2-llc:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0-EC2-ltd:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Manager-Server-5-0:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Micro-5-5-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Micro-5-5-BYOS:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Micro-5-5-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Micro-5-5-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-Micro-5-5:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-3P:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-3P:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:krb5-32bit-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:krb5-32bit-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:krb5-32bit-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:krb5-32bit-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-BYOS-Azure:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-BYOS-EC2:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-Azure:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-Azure:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-Azure:krb5-32bit-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-Azure:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-EC2:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-EC2:krb5-32bit-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-EC2:krb5-client-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-GCE:krb5-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-GCE:krb5-32bit-1.20.1-150500.3.3.1 Image SLES15-SP5-SAPCAL-GCE:krb5-client-1.20.1-150500.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:krb5-1.20.1-150500.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:krb5-32bit-1.20.1-150500.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:krb5-client-1.20.1-150500.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:krb5-devel-1.20.1-150500.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:krb5-plugin-preauth-otp-1.20.1-150500.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:krb5-plugin-preauth-pkinit-1.20.1-150500.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:krb5-plugin-kdb-ldap-1.20.1-150500.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:krb5-server-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-32bit-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-client-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-devel-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-devel-32bit-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-plugin-kdb-ldap-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-plugin-preauth-otp-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-plugin-preauth-pkinit-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-plugin-preauth-spake-1.20.1-150500.3.3.1 openSUSE Leap 15.5:krb5-server-1.20.1-150500.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233325-1/ https://www.suse.com/security/cve/CVE-2023-36054.html CVE-2023-36054 https://bugzilla.suse.com/1214054 SUSE Bug 1214054 https://bugzilla.suse.com/1217441 SUSE Bug 1217441 https://bugzilla.suse.com/1217443 SUSE Bug 1217443 https://bugzilla.suse.com/1218348 SUSE Bug 1218348 https://bugzilla.suse.com/1219472 SUSE Bug 1219472 https://bugzilla.suse.com/1219710 SUSE Bug 1219710