Security update for krb5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0198-1 Final 1 1 2023-01-27T13:27:07Z current 2023-01-27T13:27:07Z 2023-01-27T13:27:07Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for krb5 This update for krb5 fixes the following issues: - CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container ses/7.1/ceph/grafana:latest-2023-198,Container ses/7.1/ceph/haproxy:latest-2023-198,Container ses/7.1/ceph/keepalived:latest-2023-198,Container ses/7.1/ceph/prometheus-alertmanager:latest-2023-198,Container ses/7.1/ceph/prometheus-node-exporter:latest-2023-198,Container ses/7.1/ceph/prometheus-server:latest-2023-198,Container ses/7.1/ceph/prometheus-snmp_notifier:latest-2023-198,Container ses/7.1/cephcsi/cephcsi:latest-2023-198,Container ses/7.1/cephcsi/csi-attacher:v4.1.0-2023-198,Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0-2023-198,Container ses/7.1/cephcsi/csi-provisioner:v3.4.0-2023-198,Container ses/7.1/cephcsi/csi-resizer:v1.7.0-2023-198,Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1-2023-198,Container ses/7.1/rook/ceph:latest-2023-198,Container suse/ltss/sle15.3/bci-base-fips:15.3-2023-198,Container suse/sle-micro-rancher/5.2:latest-2023-198,Container suse/sle-micro/5.1/toolbox:latest-2023-198,Container suse/sle-micro/5.2/toolbox:latest-2023-198,Container suse/sle15:15.3-2023-198,Container trento/trento-wanda:latest-2023-198,Container trento/trento-web:latest-2023-198,Image SLES15-SP3-CHOST-BYOS-Aliyun-2023-198,Image SLES15-SP3-CHOST-BYOS-Azure-2023-198,Image SLES15-SP3-CHOST-BYOS-EC2-2023-198,Image SLES15-SP3-CHOST-BYOS-GCE-2023-198,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2023-198,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2023-198,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2023-198,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2023-198,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2023-198,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2023-198,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-198,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2023-198,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2023-198,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2023-198,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2023-198,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2023-198,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2023-198,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2023-198,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2023-198,SUSE-2023-198,SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-198,SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-198,SUSE-SLE-Product-RT-15-SP3-2023-198,SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-198,SUSE-SLE-Product-SLES_SAP-15-SP3-2023-198,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-198,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-198,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-198,SUSE-SUSE-MicroOS-5.1-2023-198,SUSE-SUSE-MicroOS-5.2-2023-198,SUSE-Storage-7.1-2023-198,openSUSE-Leap-Micro-5.2-2023-198 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230198-1/ Link for SUSE-SU-2023:0198-1 https://lists.suse.com/pipermail/sle-security-updates/2023-January/013559.html E-Mail link for SUSE-SU-2023:0198-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1205126 SUSE Bug 1205126 https://www.suse.com/security/cve/CVE-2022-42898/ SUSE CVE CVE-2022-42898 page Container ses/7.1/ceph/grafana:latest Container ses/7.1/ceph/haproxy:latest Container ses/7.1/ceph/keepalived:latest Container ses/7.1/ceph/prometheus-alertmanager:latest Container ses/7.1/ceph/prometheus-node-exporter:latest Container ses/7.1/ceph/prometheus-server:latest Container ses/7.1/ceph/prometheus-snmp_notifier:latest Container ses/7.1/cephcsi/cephcsi:latest Container ses/7.1/cephcsi/csi-attacher:v4.1.0 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 Container ses/7.1/cephcsi/csi-resizer:v1.7.0 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 Container ses/7.1/rook/ceph:latest Container suse/ltss/sle15.3/bci-base-fips:15.3 Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro/5.1/toolbox:latest Container suse/sle-micro/5.2/toolbox:latest Container suse/sle15:15.3 Container trento/trento-wanda:latest Container trento/trento-web:latest Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap Micro 5.2 krb5-1.19.2-150300.10.1 krb5-client-1.19.2-150300.10.1 krb5-32bit-1.19.2-150300.10.1 krb5-64bit-1.19.2-150300.10.1 krb5-devel-1.19.2-150300.10.1 krb5-devel-32bit-1.19.2-150300.10.1 krb5-devel-64bit-1.19.2-150300.10.1 krb5-mini-1.19.2-150300.7.9.1 krb5-mini-devel-1.19.2-150300.7.9.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 krb5-server-1.19.2-150300.10.1 krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/ceph/grafana:latest krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/ceph/haproxy:latest krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/ceph/keepalived:latest krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/ceph/prometheus-alertmanager:latest krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/ceph/prometheus-node-exporter:latest krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/ceph/prometheus-server:latest krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/ceph/prometheus-snmp_notifier:latest krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/cephcsi/cephcsi:latest krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/cephcsi/csi-attacher:v4.1.0 krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0 krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/cephcsi/csi-provisioner:v3.4.0 krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/cephcsi/csi-resizer:v1.7.0 krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1 krb5-1.19.2-150300.10.1 as a component of Container ses/7.1/rook/ceph:latest krb5-1.19.2-150300.10.1 as a component of Container suse/ltss/sle15.3/bci-base-fips:15.3 krb5-1.19.2-150300.10.1 as a component of Container suse/sle-micro-rancher/5.2:latest krb5-1.19.2-150300.10.1 as a component of Container suse/sle-micro/5.1/toolbox:latest krb5-1.19.2-150300.10.1 as a component of Container suse/sle-micro/5.2/toolbox:latest krb5-1.19.2-150300.10.1 as a component of Container suse/sle15:15.3 krb5-1.19.2-150300.10.1 as a component of Container trento/trento-wanda:latest krb5-1.19.2-150300.10.1 as a component of Container trento/trento-web:latest krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure krb5-client-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM krb5-client-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE krb5-client-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure krb5-client-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM krb5-client-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE krb5-client-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production krb5-32bit-1.19.2-150300.10.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production krb5-client-1.19.2-150300.10.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production krb5-1.19.2-150300.10.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production krb5-32bit-1.19.2-150300.10.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production krb5-client-1.19.2-150300.10.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production krb5-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-client-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-devel-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-server-1.19.2-150300.10.1 as a component of SUSE Enterprise Storage 7.1 krb5-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-client-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-devel-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-server-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS krb5-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-client-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-devel-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-server-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS krb5-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Micro 5.1 krb5-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Micro 5.2 krb5-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-client-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-devel-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-server-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 krb5-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-client-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-devel-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-server-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS krb5-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-client-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-devel-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-server-1.19.2-150300.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 krb5-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-client-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-devel-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-server-1.19.2-150300.10.1 as a component of SUSE Manager Proxy 4.2 krb5-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-client-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-devel-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-server-1.19.2-150300.10.1 as a component of SUSE Manager Retail Branch Server 4.2 krb5-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-32bit-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-client-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-devel-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-plugin-kdb-ldap-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-plugin-preauth-otp-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-plugin-preauth-spake-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-server-1.19.2-150300.10.1 as a component of SUSE Manager Server 4.2 krb5-1.19.2-150300.10.1 as a component of openSUSE Leap Micro 5.2 PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has "a similar bug." CVE-2022-42898 Container ses/7.1/ceph/grafana:latest:krb5-1.19.2-150300.10.1 Container ses/7.1/ceph/haproxy:latest:krb5-1.19.2-150300.10.1 Container ses/7.1/ceph/keepalived:latest:krb5-1.19.2-150300.10.1 Container ses/7.1/ceph/prometheus-alertmanager:latest:krb5-1.19.2-150300.10.1 Container ses/7.1/ceph/prometheus-node-exporter:latest:krb5-1.19.2-150300.10.1 Container ses/7.1/ceph/prometheus-server:latest:krb5-1.19.2-150300.10.1 Container ses/7.1/ceph/prometheus-snmp_notifier:latest:krb5-1.19.2-150300.10.1 Container ses/7.1/cephcsi/cephcsi:latest:krb5-1.19.2-150300.10.1 Container ses/7.1/cephcsi/csi-attacher:v4.1.0:krb5-1.19.2-150300.10.1 Container ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0:krb5-1.19.2-150300.10.1 Container ses/7.1/cephcsi/csi-provisioner:v3.4.0:krb5-1.19.2-150300.10.1 Container ses/7.1/cephcsi/csi-resizer:v1.7.0:krb5-1.19.2-150300.10.1 Container ses/7.1/cephcsi/csi-snapshotter:v6.2.1:krb5-1.19.2-150300.10.1 Container ses/7.1/rook/ceph:latest:krb5-1.19.2-150300.10.1 Container suse/ltss/sle15.3/bci-base-fips:15.3:krb5-1.19.2-150300.10.1 Container suse/sle-micro-rancher/5.2:latest:krb5-1.19.2-150300.10.1 Container suse/sle-micro/5.1/toolbox:latest:krb5-1.19.2-150300.10.1 Container suse/sle-micro/5.2/toolbox:latest:krb5-1.19.2-150300.10.1 Container suse/sle15:15.3:krb5-1.19.2-150300.10.1 Container trento/trento-wanda:latest:krb5-1.19.2-150300.10.1 Container trento/trento-web:latest:krb5-1.19.2-150300.10.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:krb5-1.19.2-150300.10.1 Image SLES15-SP3-CHOST-BYOS-Azure:krb5-1.19.2-150300.10.1 Image SLES15-SP3-CHOST-BYOS-EC2:krb5-1.19.2-150300.10.1 Image SLES15-SP3-CHOST-BYOS-GCE:krb5-1.19.2-150300.10.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:krb5-client-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:krb5-client-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:krb5-client-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:krb5-client-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:krb5-client-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:krb5-client-1.19.2-150300.10.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:krb5-1.19.2-150300.10.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:krb5-1.19.2-150300.10.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:krb5-1.19.2-150300.10.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:krb5-32bit-1.19.2-150300.10.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:krb5-client-1.19.2-150300.10.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:krb5-1.19.2-150300.10.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:krb5-32bit-1.19.2-150300.10.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:krb5-client-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-32bit-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-client-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-devel-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Enterprise Storage 7.1:krb5-server-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-32bit-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-client-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-devel-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:krb5-server-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-32bit-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-client-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-devel-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:krb5-server-1.19.2-150300.10.1 SUSE Linux Enterprise Micro 5.1:krb5-1.19.2-150300.10.1 SUSE Linux Enterprise Micro 5.2:krb5-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-32bit-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-client-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-devel-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Linux Enterprise Real Time 15 SP3:krb5-server-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-32bit-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-client-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-devel-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Linux Enterprise Server 15 SP3-LTSS:krb5-server-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-32bit-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-client-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-devel-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:krb5-server-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-32bit-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-client-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-devel-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Manager Proxy 4.2:krb5-server-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-32bit-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-client-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-devel-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Manager Retail Branch Server 4.2:krb5-server-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-32bit-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-client-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-devel-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-plugin-kdb-ldap-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-plugin-preauth-otp-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-plugin-preauth-pkinit-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-plugin-preauth-spake-1.19.2-150300.10.1 SUSE Manager Server 4.2:krb5-server-1.19.2-150300.10.1 openSUSE Leap Micro 5.2:krb5-1.19.2-150300.10.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230198-1/ https://www.suse.com/security/cve/CVE-2022-42898.html CVE-2022-42898 https://bugzilla.suse.com/1205126 SUSE Bug 1205126 https://bugzilla.suse.com/1205667 SUSE Bug 1205667 https://bugzilla.suse.com/1207423 SUSE Bug 1207423 https://bugzilla.suse.com/1207690 SUSE Bug 1207690 https://bugzilla.suse.com/1211487 SUSE Bug 1211487