crítica
openSUSE-SU-2023:0020-1
Security update for libheimdal
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for libheimdal fixes the following issues: Update to version 7.8.0 - CVE-2022-42898 PAC parse integer overflows - CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array - CVE-2021-44758 A null pointer de-reference DoS in SPNEGO acceptors - CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ - CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec - CVE-2019-14870: Validate client attributes in protocol-transition
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.3 | libasn1-8, libgssapi3, libhcrypto4 y 15 más | 7.8.0-bp153.2.4.1 |
Mostrar las 18 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.3 | libasn1-8 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libgssapi3 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libhcrypto4 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libhdb9 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libheimbase1 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libheimdal-devel | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libheimedit0 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libheimntlm0 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libhx509-5 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libkadm5clnt7 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libkadm5srv8 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libkafs0 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libkdc2 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libkrb5-26 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libotp0 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libroken18 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libsl0 | 7.8.0-bp153.2.4.1 |
| openSUSE Leap 15.3 | libwind0 | 7.8.0-bp153.2.4.1 |
Referencias
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCW7YX6RG5EAFBRU3SLTXKN5NWVODXTH/
- https://www.suse.com/security/cve/CVE-2019-14870/
- https://www.suse.com/security/cve/CVE-2021-3671/
- https://www.suse.com/security/cve/CVE-2021-44758/
- https://www.suse.com/security/cve/CVE-2022-3437/
- https://www.suse.com/security/cve/CVE-2022-41916/
- https://www.suse.com/security/cve/CVE-2022-42898/
- https://www.suse.com/security/cve/CVE-2022-44640/