<?xml version="1.0" encoding="utf-8"?>
  <?xml-stylesheet type="text/xsl" href="sa-render.xsl"?>
  <update from="huaweicloud.com" type="security" status="stable" version="1">
    <id>HCE1-SA-2022-0013</id>
    <title>An update for krb5 is now available for HCE 1.1</title>
    <severity>Moderate</severity>
    <release>HCE 1.1</release>
    <issued date="2022-10-18 09:08:04"/>
    <updated date="2022-10-18 09:08:04"/>
    <references>
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2021-37750" id="CVE-2021-37750" title="CVE-2021-37750 Base Score: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" type="cve"/>
    </references>
    <description>Security Fix(es):

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field. (CVE-2021-37750)
</description>
    <pkglist>
      <collection short="HCE 1.1" package="krb5">
        <name>HCE 1.1</name>
        <package arch="x86_64" name="krb5-devel" version="1.15.1" release="54.hce1c">
          <filename>krb5-devel-1.15.1-54.hce1c.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="krb5-libs" version="1.15.1" release="54.hce1c">
          <filename>krb5-libs-1.15.1-54.hce1c.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="krb5-pkinit" version="1.15.1" release="54.hce1c">
          <filename>krb5-pkinit-1.15.1-54.hce1c.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="krb5-server" version="1.15.1" release="54.hce1c">
          <filename>krb5-server-1.15.1-54.hce1c.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="krb5-server-ldap" version="1.15.1" release="54.hce1c">
          <filename>krb5-server-ldap-1.15.1-54.hce1c.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="krb5-workstation" version="1.15.1" release="54.hce1c">
          <filename>krb5-workstation-1.15.1-54.hce1c.x86_64.rpm</filename>
        </package>
        <package arch="x86_64" name="libkadm5" version="1.15.1" release="54.hce1c">
          <filename>libkadm5-1.15.1-54.hce1c.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
  </update>
