SUSE-SU-2023:3363-1

Опубликовано: 18 авг. 2023

Источник: suse-cvrf

Описание

Security update for krb5

This update for krb5 fixes the following issues:

CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)

Список пакетов

Container bci/bci-init:15.4

krb5-1.19.2-150400.3.6.1

Container bci/node:16

krb5-1.19.2-150400.3.6.1

Container bci/python:3

krb5-1.19.2-150400.3.6.1

Container rancher/elemental-operator:latest

krb5-1.19.2-150400.3.6.1

Container rancher/elemental-teal-iso/5.4:latest

krb5-1.19.2-150400.3.6.1

Container rancher/elemental-teal-rt/5.4:latest

krb5-1.19.2-150400.3.6.1

Container rancher/elemental-teal/5.4:latest

krb5-1.19.2-150400.3.6.1

Container rancher/seedimage-builder:latest

krb5-1.19.2-150400.3.6.1

Container suse/ltss/sle15.4/bci-base:latest

krb5-1.19.2-150400.3.6.1

Container suse/manager/4.3/proxy-httpd:latest

krb5-1.19.2-150400.3.6.1

Container suse/manager/4.3/proxy-salt-broker:latest

krb5-1.19.2-150400.3.6.1

Container suse/manager/4.3/proxy-squid:latest

krb5-1.19.2-150400.3.6.1

Container suse/manager/4.3/proxy-ssh:latest

krb5-1.19.2-150400.3.6.1

Container suse/manager/4.3/proxy-tftpd:latest

krb5-1.19.2-150400.3.6.1

Container suse/pcp:5

krb5-1.19.2-150400.3.6.1

Container suse/postgres:14

krb5-1.19.2-150400.3.6.1

Container suse/sle-micro-rancher/5.3:latest

krb5-1.19.2-150400.3.6.1

Container suse/sle-micro-rancher/5.4:latest

krb5-1.19.2-150400.3.6.1

Container suse/sle-micro/5.3/toolbox:latest

krb5-1.19.2-150400.3.6.1

Container suse/sle-micro/5.4/toolbox:latest

krb5-1.19.2-150400.3.6.1

Container suse/sle15:15.4

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-BYOS

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-BYOS-Azure

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-BYOS-EC2

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-BYOS-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-CHOST-BYOS

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-CHOST-BYOS-Azure

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-CHOST-BYOS-EC2

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-CHOST-BYOS-GCE

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-HPC-BYOS

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-HPC-BYOS-Azure

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-HPC-BYOS-EC2

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-HPC-BYOS-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-HPC-EC2

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-HPC-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Hardened-BYOS

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Hardened-BYOS-Azure

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Hardened-BYOS-EC2

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Hardened-BYOS-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-3

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-3-BYOS

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-3-EC2

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-4

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-4-BYOS

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-4-EC2

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-Micro-5-4-GCE

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Azure

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-BYOS

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-BYOS-Azure

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-BYOS-EC2

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-BYOS-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-EC2

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-GCE

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Hardened

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Hardened-Azure

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Hardened-BYOS

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAP-Hardened-GCE

krb5-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAPCAL

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAPCAL-Azure

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAPCAL-EC2

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SAPCAL-GCE

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

krb5-1.19.2-150400.3.6.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

krb5-1.19.2-150400.3.6.1

SUSE Linux Enterprise Micro 5.3

krb5-1.19.2-150400.3.6.1

SUSE Linux Enterprise Micro 5.4

krb5-1.19.2-150400.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

krb5-devel-1.19.2-150400.3.6.1

krb5-plugin-preauth-otp-1.19.2-150400.3.6.1

krb5-plugin-preauth-pkinit-1.19.2-150400.3.6.1

SUSE Linux Enterprise Module for Server Applications 15 SP4

krb5-plugin-kdb-ldap-1.19.2-150400.3.6.1

krb5-server-1.19.2-150400.3.6.1

openSUSE Leap 15.4

krb5-1.19.2-150400.3.6.1

krb5-32bit-1.19.2-150400.3.6.1

krb5-client-1.19.2-150400.3.6.1

krb5-devel-1.19.2-150400.3.6.1

krb5-devel-32bit-1.19.2-150400.3.6.1

krb5-plugin-kdb-ldap-1.19.2-150400.3.6.1

krb5-plugin-preauth-otp-1.19.2-150400.3.6.1

krb5-plugin-preauth-pkinit-1.19.2-150400.3.6.1

krb5-plugin-preauth-spake-1.19.2-150400.3.6.1

krb5-server-1.19.2-150400.3.6.1

openSUSE Leap Micro 5.3

krb5-1.19.2-150400.3.6.1

openSUSE Leap Micro 5.4

krb5-1.19.2-150400.3.6.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20233363-1/
Link for SUSE-SU-2023:3363-1
https://lists.suse.com/pipermail/sle-security-updates/2023-August/015961.html
E-Mail link for SUSE-SU-2023:3363-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1214054
SUSE Bug 1214054
https://www.suse.com/security/cve/CVE-2023-36054/
SUSE CVE CVE-2023-36054 page

Описание

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Затронутые продукты

Container bci/bci-init:15.4:krb5-1.19.2-150400.3.6.1

Container bci/node:16:krb5-1.19.2-150400.3.6.1

Container bci/python:3:krb5-1.19.2-150400.3.6.1

Container rancher/elemental-operator:latest:krb5-1.19.2-150400.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-36054.html
CVE-2023-36054
https://bugzilla.suse.com/1214054
SUSE Bug 1214054
https://bugzilla.suse.com/1217441
SUSE Bug 1217441
https://bugzilla.suse.com/1217443
SUSE Bug 1217443
https://bugzilla.suse.com/1218348
SUSE Bug 1218348
https://bugzilla.suse.com/1219472
SUSE Bug 1219472
https://bugzilla.suse.com/1219710
SUSE Bug 1219710