SUSE-SU-2024:0997-1

Опубликовано: 26 мар. 2024

Источник: suse-cvrf

Описание

Security update for krb5

This update for krb5 fixes the following issues:

CVE-2024-26458: Fixed memory leak at /krb5/src/lib/rpc/pmap_rmt.c (bsc#1220770).
CVE-2024-26461: Fixed memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (bsc#1220771).
CVE-2024-26462: Fixed memory leak at /krb5/src/kdc/ndr.c (bsc#1220772).

Список пакетов

Container bci/bci-init:15.5

krb5-1.20.1-150500.3.6.1

Container bci/bci-sle15-kernel-module-devel:15.5

krb5-1.20.1-150500.3.6.1

Container bci/golang:1.20-openssl

krb5-1.20.1-150500.3.6.1

Container bci/golang:1.21

krb5-1.20.1-150500.3.6.1

Container bci/golang:latest

krb5-1.20.1-150500.3.6.1

Container bci/node:18

krb5-1.20.1-150500.3.6.1

Container bci/nodejs:latest

krb5-1.20.1-150500.3.6.1

Container bci/openjdk-devel:11

krb5-1.20.1-150500.3.6.1

Container bci/openjdk-devel:17

krb5-1.20.1-150500.3.6.1

Container bci/openjdk:11

krb5-1.20.1-150500.3.6.1

Container bci/openjdk:17

krb5-1.20.1-150500.3.6.1

Container bci/php-apache:latest

krb5-1.20.1-150500.3.6.1

Container bci/php-fpm:latest

krb5-1.20.1-150500.3.6.1

Container bci/php:latest

krb5-1.20.1-150500.3.6.1

Container bci/python:3

krb5-1.20.1-150500.3.6.1

Container bci/python:latest

krb5-1.20.1-150500.3.6.1

Container bci/ruby:latest

krb5-1.20.1-150500.3.6.1

Container bci/rust:1.77

krb5-1.20.1-150500.3.6.1

Container bci/rust:latest

krb5-1.20.1-150500.3.6.1

Container rancher/seedimage-builder:latest

krb5-1.20.1-150500.3.6.1

Container suse/389-ds:latest

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Container suse/git:latest

krb5-1.20.1-150500.3.6.1

Container suse/ltss/sle15.5/sle15:latest

krb5-1.20.1-150500.3.6.1

Container suse/nginx:latest

krb5-1.20.1-150500.3.6.1

Container suse/pcp:latest

krb5-1.20.1-150500.3.6.1

Container suse/postgres:15

krb5-1.20.1-150500.3.6.1

Container suse/postgres:latest

krb5-1.20.1-150500.3.6.1

Container suse/registry:latest

krb5-1.20.1-150500.3.6.1

Container suse/rmt-mariadb-client:latest

krb5-1.20.1-150500.3.6.1

Container suse/rmt-mariadb:latest

krb5-1.20.1-150500.3.6.1

Container suse/rmt-server:latest

krb5-1.20.1-150500.3.6.1

Container suse/sle-micro/5.5/toolbox:latest

krb5-1.20.1-150500.3.6.1

Container suse/sle-micro/5.5:latest

krb5-1.20.1-150500.3.6.1

Container suse/sle-micro/base-5.5:latest

krb5-1.20.1-150500.3.6.1

Container suse/sle-micro/kvm-5.5:latest

krb5-1.20.1-150500.3.6.1

Container suse/sle-micro/rt-5.5:latest

krb5-1.20.1-150500.3.6.1

Container suse/sle15:15.5

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Azure-3P

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-Azure-Basic

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-Azure-Standard

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-BYOS-Azure

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-BYOS-EC2

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-BYOS-GCE

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-CHOST-BYOS-Azure

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-CHOST-BYOS-EC2

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-CHOST-BYOS-GCE

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-CHOST-BYOS-GDC

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-EC2

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-GCE

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-HPC-Azure

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-HPC-BYOS-Azure

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-HPC-BYOS-EC2

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-HPC-BYOS-GCE

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-Hardened-BYOS-Azure

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-Hardened-BYOS-EC2

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-Hardened-BYOS-GCE

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Micro-5-5

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Micro-5-5-Azure

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Micro-5-5-BYOS

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Micro-5-5-EC2

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-Micro-5-5-GCE

krb5-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Azure-3P

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-BYOS-Azure

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-BYOS-EC2

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-BYOS-GCE

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Hardened-Azure

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAP-Hardened-GCE

krb5-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAPCAL-Azure

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAPCAL-EC2

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

Image SLES15-SP5-SAPCAL-GCE

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

SUSE Linux Enterprise Micro 5.5

krb5-1.20.1-150500.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

krb5-devel-1.20.1-150500.3.6.1

krb5-plugin-preauth-otp-1.20.1-150500.3.6.1

krb5-plugin-preauth-pkinit-1.20.1-150500.3.6.1

SUSE Linux Enterprise Module for Server Applications 15 SP5

krb5-plugin-kdb-ldap-1.20.1-150500.3.6.1

krb5-server-1.20.1-150500.3.6.1

openSUSE Leap 15.5

krb5-1.20.1-150500.3.6.1

krb5-32bit-1.20.1-150500.3.6.1

krb5-client-1.20.1-150500.3.6.1

krb5-devel-1.20.1-150500.3.6.1

krb5-devel-32bit-1.20.1-150500.3.6.1

krb5-plugin-kdb-ldap-1.20.1-150500.3.6.1

krb5-plugin-preauth-otp-1.20.1-150500.3.6.1

krb5-plugin-preauth-pkinit-1.20.1-150500.3.6.1

krb5-plugin-preauth-spake-1.20.1-150500.3.6.1

krb5-server-1.20.1-150500.3.6.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240997-1/
Link for SUSE-SU-2024:0997-1
https://lists.suse.com/pipermail/sle-updates/2024-March/034770.html
E-Mail link for SUSE-SU-2024:0997-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1220770
SUSE Bug 1220770
https://bugzilla.suse.com/1220771
SUSE Bug 1220771
https://bugzilla.suse.com/1220772
SUSE Bug 1220772
https://www.suse.com/security/cve/CVE-2024-26458/
SUSE CVE CVE-2024-26458 page
https://www.suse.com/security/cve/CVE-2024-26461/
SUSE CVE CVE-2024-26461 page
https://www.suse.com/security/cve/CVE-2024-26462/
SUSE CVE CVE-2024-26462 page

Описание

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.

Затронутые продукты

Container bci/bci-init:15.5:krb5-1.20.1-150500.3.6.1

Container bci/bci-sle15-kernel-module-devel:15.5:krb5-1.20.1-150500.3.6.1

Container bci/golang:1.20-openssl:krb5-1.20.1-150500.3.6.1

Container bci/golang:1.21:krb5-1.20.1-150500.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-26458.html
CVE-2024-26458
https://bugzilla.suse.com/1220770
SUSE Bug 1220770

Описание

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

Затронутые продукты

Container bci/bci-init:15.5:krb5-1.20.1-150500.3.6.1

Container bci/bci-sle15-kernel-module-devel:15.5:krb5-1.20.1-150500.3.6.1

Container bci/golang:1.20-openssl:krb5-1.20.1-150500.3.6.1

Container bci/golang:1.21:krb5-1.20.1-150500.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-26461.html
CVE-2024-26461
https://bugzilla.suse.com/1220770
SUSE Bug 1220770
https://bugzilla.suse.com/1220771
SUSE Bug 1220771

Описание

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.

Затронутые продукты

Container bci/bci-init:15.5:krb5-1.20.1-150500.3.6.1

Container bci/bci-sle15-kernel-module-devel:15.5:krb5-1.20.1-150500.3.6.1

Container bci/golang:1.20-openssl:krb5-1.20.1-150500.3.6.1

Container bci/golang:1.21:krb5-1.20.1-150500.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-26462.html
CVE-2024-26462
https://bugzilla.suse.com/1220770
SUSE Bug 1220770
https://bugzilla.suse.com/1220772
SUSE Bug 1220772