SUSE-SU-2021:2800-1

UNKNOWN

Security update for krb5

Published Aug 20, 2021

Modified 4 years ago

Fix available

Details

This update for krb5 fixes the following issues:

CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge. (bsc#1188571)

Affected Packages

krb5

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Micro 5.0SUSE Linux Enterprise Module for Basesystem 15 SP2

Fixed in:

1.16.3-3.21.1

krb5-32bit

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP2SUSE Linux Enterprise Module for Basesystem 15 SP3

Fixed in:

1.16.3-3.21.1

krb5-client

Fixed in:

1.16.3-3.21.1

krb5-devel

Fixed in:

1.16.3-3.21.1

krb5-plugin-kdb-ldap

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Module for Server Applications 15 SP2SUSE Linux Enterprise Module for Server Applications 15 SP3

Fixed in:

1.16.3-3.21.1

krb5-plugin-preauth-otp

Fixed in:

1.16.3-3.21.1

krb5-plugin-preauth-pkinit

Fixed in:

1.16.3-3.21.1

krb5-server

SUSE Enterprise Storage 6SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Module for Server Applications 15 SP2SUSE Linux Enterprise Module for Server Applications 15 SP3

Fixed in:

1.16.3-3.21.1

References

REPORT

https://bugzilla.suse.com/1188571

WEB

https://www.suse.com/security/cve/CVE-2021-36222

ADVISORY

https://www.suse.com/support/update/announcement/2021/suse-su-20212800-1/

Upstream

CVE-2021-36222

Ecosystems(14)

SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Module for Basesystem 15 SP2

Timeline

PublishedAug 20, 2021

ModifiedAug 20, 2021

SUSE-SU-2021:2800-1 | Mondoo Vulnerability Intelligence