Security update for crypto-policies, krb5 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:0401-1 Final 1 1 2025-02-10T09:38:29Z current 2025-02-10T09:38:29Z 2025-02-10T09:38:29Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for crypto-policies, krb5 This update for crypto-policies and krb5 fixes the following issues: Security issue fixed: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619). Feature addition: - Add crypto-policies support; (jsc#PED-12018) * The default krb5.conf has been updated to include config snippets in the krb5.conf.d directory, where crypto-policies drops its. - Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); * This key derivation function is used by AES256-CTS-HMAC-SHA1-96 and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active directory. If these encryption types are allowed or not in FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-base-fips:15.7-2025-401,Container bci/bci-base-fips:latest-2025-401,Container bci/bci-init:15.7-2025-401,Container bci/bci-init:latest-2025-401,Container bci/bci-sle15-kernel-module-devel:15.7-2025-401,Container bci/bci-sle15-kernel-module-devel:latest-2025-401,Container bci/dotnet-aspnet:8.0-2025-401,Container bci/dotnet-aspnet:latest-2025-401,Container bci/dotnet-runtime:8.0-2025-401,Container bci/dotnet-runtime:latest-2025-401,Container bci/dotnet-sdk:8.0-2025-401,Container bci/dotnet-sdk:latest-2025-401,Container bci/gcc:latest-2025-401,Container bci/golang:1.22-openssl-2025-401,Container bci/golang:1.23-2025-401,Container bci/golang:latest-2025-401,Container bci/kiwi:latest-2025-401,Container bci/node:22-2025-401,Container bci/nodejs:latest-2025-401,Container bci/openjdk-devel:17-2025-401,Container bci/openjdk-devel:latest-2025-401,Container bci/openjdk:17-2025-401,Container bci/openjdk:latest-2025-401,Container bci/php-apache:latest-2025-401,Container bci/php-fpm:latest-2025-401,Container bci/php:latest-2025-401,Container bci/python:3-2025-401,Container bci/python:3.13-2025-401,Container bci/python:latest-2025-401,Container bci/ruby:3-2025-401,Container bci/ruby:latest-2025-401,Container bci/rust:1.84-2025-401,Container bci/rust:latest-2025-401,Container bci/spack:0.23-2025-401,Container bci/spack:latest-2025-401,Container containers/apache-tomcat:10.1-openjdk11-2025-401,Container containers/apache-tomcat:10.1-openjdk17-2025-401,Container containers/apache-tomcat:10.1-openjdk21-2025-401,Container containers/apache-tomcat:9-openjdk11-2025-401,Container containers/apache-tomcat:9-openjdk17-2025-401,Container containers/apache-tomcat:9-openjdk21-2025-401,Container containers/apache-tomcat:9-openjdk8-2025-401,Container containers/milvus:2.4-2025-401,Container containers/ollama:0-2025-401,Container containers/open-webui:0-2025-401,Container containers/python:3.11-2025-401,Container containers/python:3.9-2025-401,Container containers/pytorch:2-nvidia-2025-401,Container containers/pytorch:2.5.0-2025-401,Container suse/389-ds:latest-2025-401,Container suse/git:latest-2025-401,Container suse/helm:latest-2025-401,Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest-2025-401,Container suse/manager/5.0/x86_64/server-attestation:latest-2025-401,Container suse/manager/5.0/x86_64/server:latest-2025-401,Container suse/mariadb-client:latest-2025-401,Container suse/mariadb:latest-2025-401,Container suse/nginx:latest-2025-401,Container suse/pcp:latest-2025-401,Container suse/postgres:16-2025-401,Container suse/postgres:latest-2025-401,Container suse/registry:latest-2025-401,Container suse/rmt-server:latest-2025-401,Container suse/sle15:15.6-2025-401,Container suse/sle15:15.7-2025-401,Container suse/sles/15.7/cdi-apiserver:1.58.0-2025-401,Container suse/sles/15.7/cdi-cloner:1.58.0-2025-401,Container suse/sles/15.7/cdi-controller:1.58.0-2025-401,Container suse/sles/15.7/cdi-importer:1.58.0-2025-401,Container suse/sles/15.7/cdi-operator:1.58.0-2025-401,Container suse/sles/15.7/cdi-uploadproxy:1.58.0-2025-401,Container suse/sles/15.7/cdi-uploadserver:1.58.0-2025-401,Container suse/sles/15.7/libguestfs-tools:1.4.0-2025-401,Container suse/sles/15.7/virt-api:1.4.0-2025-401,Container suse/sles/15.7/virt-controller:1.4.0-2025-401,Container suse/sles/15.7/virt-exportproxy:1.4.0-2025-401,Container suse/sles/15.7/virt-exportserver:1.4.0-2025-401,Container suse/sles/15.7/virt-handler:1.4.0-2025-401,Container suse/sles/15.7/virt-launcher:1.4.0-2025-401,Container suse/sles/15.7/virt-operator:1.4.0-2025-401,Container suse/stunnel:latest-2025-401,Image SLES15-SP6-2025-401,Image SLES15-SP6-BYOS-2025-401,Image SLES15-SP6-BYOS-GCE-2025-401,Image SLES15-SP6-CHOST-BYOS-2025-401,Image SLES15-SP6-CHOST-BYOS-Azure-2025-401,Image SLES15-SP6-CHOST-BYOS-EC2-2025-401,Image SLES15-SP6-CHOST-BYOS-GCE-2025-401,Image SLES15-SP6-CHOST-BYOS-GDC-2025-401,Image SLES15-SP6-CHOST-BYOS-SAP-CCloud-2025-401,Image SLES15-SP6-GCE-2025-401,Image SLES15-SP6-Hardened-BYOS-2025-401,Image SLES15-SP6-Hardened-BYOS-GCE-2025-401,Image SLES15-SP6-SAP-BYOS-2025-401,Image SLES15-SP6-SAP-BYOS-GCE-2025-401,Image ai_15_6-2025-401,Image python_15_6-2025-401,SUSE-2025-401,SUSE-SLE-Module-Basesystem-15-SP6-2025-401,SUSE-SLE-Module-Server-Applications-15-SP6-2025-401,openSUSE-SLE-15.6-2025-401 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20250401-1/ Link for SUSE-SU-2025:0401-1 https://lists.suse.com/pipermail/sle-security-updates/2025-February/020299.html E-Mail link for SUSE-SU-2025:0401-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1236619 SUSE Bug 1236619 https://www.suse.com/security/cve/CVE-2025-24528/ SUSE CVE CVE-2025-24528 page Container bci/bci-base-fips:15.7 Container bci/bci-base-fips:latest Container bci/bci-init:15.7 Container bci/bci-init:latest Container bci/bci-sle15-kernel-module-devel:15.7 Container bci/bci-sle15-kernel-module-devel:latest Container bci/dotnet-aspnet:8.0 Container bci/dotnet-aspnet:latest Container bci/dotnet-runtime:8.0 Container bci/dotnet-runtime:latest Container bci/dotnet-sdk:8.0 Container bci/dotnet-sdk:latest Container bci/gcc:latest Container bci/golang:1.22-openssl Container bci/golang:1.23 Container bci/golang:latest Container bci/kiwi:latest Container bci/node:22 Container bci/nodejs:latest Container bci/openjdk-devel:17 Container bci/openjdk-devel:latest Container bci/openjdk:17 Container bci/openjdk:latest Container bci/php-apache:latest Container bci/php-fpm:latest Container bci/php:latest Container bci/python:3 Container bci/python:3.13 Container bci/python:latest Container bci/ruby:3 Container bci/ruby:latest Container bci/rust:1.84 Container bci/rust:latest Container bci/spack:0.23 Container bci/spack:latest Container containers/apache-tomcat:10.1-openjdk11 Container containers/apache-tomcat:10.1-openjdk17 Container containers/apache-tomcat:10.1-openjdk21 Container containers/apache-tomcat:9-openjdk11 Container containers/apache-tomcat:9-openjdk17 Container containers/apache-tomcat:9-openjdk21 Container containers/apache-tomcat:9-openjdk8 Container containers/milvus:2.4 Container containers/ollama:0 Container containers/open-webui:0 Container containers/python:3.11 Container containers/python:3.9 Container containers/pytorch:2-nvidia Container containers/pytorch:2.5.0 Container suse/389-ds:latest Container suse/git:latest Container suse/helm:latest Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container suse/manager/5.0/x86_64/server-attestation:latest Container suse/manager/5.0/x86_64/server:latest Container suse/mariadb-client:latest Container suse/mariadb:latest Container suse/nginx:latest Container suse/pcp:latest Container suse/postgres:16 Container suse/postgres:latest Container suse/registry:latest Container suse/rmt-server:latest Container suse/sle15:15.6 Container suse/sle15:15.7 Container suse/sles/15.7/cdi-apiserver:1.58.0 Container suse/sles/15.7/cdi-cloner:1.58.0 Container suse/sles/15.7/cdi-controller:1.58.0 Container suse/sles/15.7/cdi-importer:1.58.0 Container suse/sles/15.7/cdi-operator:1.58.0 Container suse/sles/15.7/cdi-uploadproxy:1.58.0 Container suse/sles/15.7/cdi-uploadserver:1.58.0 Container suse/sles/15.7/libguestfs-tools:1.4.0 Container suse/sles/15.7/virt-api:1.4.0 Container suse/sles/15.7/virt-controller:1.4.0 Container suse/sles/15.7/virt-exportproxy:1.4.0 Container suse/sles/15.7/virt-exportserver:1.4.0 Container suse/sles/15.7/virt-handler:1.4.0 Container suse/sles/15.7/virt-launcher:1.4.0 Container suse/sles/15.7/virt-operator:1.4.0 Container suse/stunnel:latest Image SLES15-SP6 Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-GCE Image ai_15_6 Image python_15_6 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP6 openSUSE Leap 15.6 crypto-policies-20230920.570ea89-150600.3.3.1 crypto-policies-scripts-20230920.570ea89-150600.3.3.1 krb5-1.20.1-150600.11.8.1 krb5-client-1.20.1-150600.11.8.1 krb5-32bit-1.20.1-150600.11.8.1 krb5-64bit-1.20.1-150600.11.8.1 krb5-devel-1.20.1-150600.11.8.1 krb5-devel-32bit-1.20.1-150600.11.8.1 krb5-devel-64bit-1.20.1-150600.11.8.1 krb5-mini-1.20.1-150600.11.8.1 krb5-mini-devel-1.20.1-150600.11.8.1 krb5-plugin-kdb-ldap-1.20.1-150600.11.8.1 krb5-plugin-preauth-otp-1.20.1-150600.11.8.1 krb5-plugin-preauth-pkinit-1.20.1-150600.11.8.1 krb5-plugin-preauth-spake-1.20.1-150600.11.8.1 krb5-server-1.20.1-150600.11.8.1 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/bci-base-fips:15.7 crypto-policies-scripts-20230920.570ea89-150600.3.3.1 as a component of Container bci/bci-base-fips:15.7 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/bci-base-fips:latest crypto-policies-scripts-20230920.570ea89-150600.3.3.1 as a component of Container bci/bci-base-fips:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/bci-init:15.7 krb5-1.20.1-150600.11.8.1 as a component of Container bci/bci-init:15.7 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/bci-init:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/bci-init:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/bci-sle15-kernel-module-devel:15.7 krb5-1.20.1-150600.11.8.1 as a component of Container bci/bci-sle15-kernel-module-devel:15.7 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/bci-sle15-kernel-module-devel:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/bci-sle15-kernel-module-devel:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/dotnet-aspnet:8.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/dotnet-aspnet:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/dotnet-runtime:8.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/dotnet-runtime:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/dotnet-sdk:8.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/dotnet-sdk:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/gcc:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/gcc:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/golang:1.22-openssl krb5-1.20.1-150600.11.8.1 as a component of Container bci/golang:1.22-openssl crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/golang:1.23 krb5-1.20.1-150600.11.8.1 as a component of Container bci/golang:1.23 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/golang:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/golang:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/kiwi:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/kiwi:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/node:22 krb5-1.20.1-150600.11.8.1 as a component of Container bci/node:22 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/nodejs:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/nodejs:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/openjdk-devel:17 krb5-1.20.1-150600.11.8.1 as a component of Container bci/openjdk-devel:17 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/openjdk-devel:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/openjdk-devel:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/openjdk:17 krb5-1.20.1-150600.11.8.1 as a component of Container bci/openjdk:17 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/openjdk:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/openjdk:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/php-apache:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/php-apache:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/php-fpm:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/php-fpm:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/php:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/php:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/python:3 krb5-1.20.1-150600.11.8.1 as a component of Container bci/python:3 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/python:3.13 krb5-1.20.1-150600.11.8.1 as a component of Container bci/python:3.13 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/python:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/python:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/ruby:3 krb5-1.20.1-150600.11.8.1 as a component of Container bci/ruby:3 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/ruby:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/ruby:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/rust:1.84 krb5-1.20.1-150600.11.8.1 as a component of Container bci/rust:1.84 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/rust:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/rust:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/spack:0.23 krb5-1.20.1-150600.11.8.1 as a component of Container bci/spack:0.23 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container bci/spack:latest krb5-1.20.1-150600.11.8.1 as a component of Container bci/spack:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/apache-tomcat:10.1-openjdk11 krb5-1.20.1-150600.11.8.1 as a component of Container containers/apache-tomcat:10.1-openjdk11 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/apache-tomcat:10.1-openjdk17 krb5-1.20.1-150600.11.8.1 as a component of Container containers/apache-tomcat:10.1-openjdk17 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/apache-tomcat:10.1-openjdk21 krb5-1.20.1-150600.11.8.1 as a component of Container containers/apache-tomcat:10.1-openjdk21 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/apache-tomcat:9-openjdk11 krb5-1.20.1-150600.11.8.1 as a component of Container containers/apache-tomcat:9-openjdk11 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/apache-tomcat:9-openjdk17 krb5-1.20.1-150600.11.8.1 as a component of Container containers/apache-tomcat:9-openjdk17 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/apache-tomcat:9-openjdk21 krb5-1.20.1-150600.11.8.1 as a component of Container containers/apache-tomcat:9-openjdk21 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/apache-tomcat:9-openjdk8 krb5-1.20.1-150600.11.8.1 as a component of Container containers/apache-tomcat:9-openjdk8 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/milvus:2.4 krb5-1.20.1-150600.11.8.1 as a component of Container containers/milvus:2.4 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/ollama:0 krb5-1.20.1-150600.11.8.1 as a component of Container containers/ollama:0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/open-webui:0 krb5-1.20.1-150600.11.8.1 as a component of Container containers/open-webui:0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/python:3.11 krb5-1.20.1-150600.11.8.1 as a component of Container containers/python:3.11 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/python:3.9 krb5-1.20.1-150600.11.8.1 as a component of Container containers/python:3.9 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/pytorch:2-nvidia krb5-1.20.1-150600.11.8.1 as a component of Container containers/pytorch:2-nvidia crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container containers/pytorch:2.5.0 krb5-1.20.1-150600.11.8.1 as a component of Container containers/pytorch:2.5.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/389-ds:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/389-ds:latest krb5-client-1.20.1-150600.11.8.1 as a component of Container suse/389-ds:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/git:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/git:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/helm:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/manager/5.0/x86_64/server-attestation:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/manager/5.0/x86_64/server:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/manager/5.0/x86_64/server:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/mariadb-client:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/mariadb-client:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/mariadb:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/mariadb:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/nginx:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/nginx:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/pcp:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/pcp:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/postgres:16 krb5-1.20.1-150600.11.8.1 as a component of Container suse/postgres:16 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/postgres:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/postgres:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/registry:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/registry:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/rmt-server:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/rmt-server:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sle15:15.6 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sle15:15.6 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sle15:15.7 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sle15:15.7 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/cdi-apiserver:1.58.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/cdi-apiserver:1.58.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/cdi-cloner:1.58.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/cdi-cloner:1.58.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/cdi-controller:1.58.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/cdi-controller:1.58.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/cdi-importer:1.58.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/cdi-importer:1.58.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/cdi-operator:1.58.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/cdi-operator:1.58.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/cdi-uploadproxy:1.58.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/cdi-uploadproxy:1.58.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/cdi-uploadserver:1.58.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/cdi-uploadserver:1.58.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/libguestfs-tools:1.4.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/libguestfs-tools:1.4.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/virt-api:1.4.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/virt-api:1.4.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/virt-controller:1.4.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/virt-controller:1.4.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/virt-exportproxy:1.4.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/virt-exportproxy:1.4.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/virt-exportserver:1.4.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/virt-exportserver:1.4.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/virt-handler:1.4.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/virt-handler:1.4.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/virt-launcher:1.4.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/virt-launcher:1.4.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/sles/15.7/virt-operator:1.4.0 krb5-1.20.1-150600.11.8.1 as a component of Container suse/sles/15.7/virt-operator:1.4.0 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Container suse/stunnel:latest krb5-1.20.1-150600.11.8.1 as a component of Container suse/stunnel:latest crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6 krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6 krb5-client-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-BYOS krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-BYOS krb5-client-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-BYOS crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-BYOS-GCE krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-BYOS-GCE krb5-client-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-BYOS-GCE crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-CHOST-BYOS krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-CHOST-BYOS crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-CHOST-BYOS-Azure krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-CHOST-BYOS-Azure crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-CHOST-BYOS-EC2 krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-CHOST-BYOS-EC2 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-CHOST-BYOS-GCE krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-CHOST-BYOS-GCE crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-CHOST-BYOS-GDC krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-CHOST-BYOS-GDC crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-CHOST-BYOS-SAP-CCloud krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-CHOST-BYOS-SAP-CCloud crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-GCE krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-GCE krb5-client-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-GCE crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-Hardened-BYOS krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-Hardened-BYOS krb5-client-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-Hardened-BYOS crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-Hardened-BYOS-GCE krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-Hardened-BYOS-GCE krb5-client-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-Hardened-BYOS-GCE crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-SAP-BYOS krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-SAP-BYOS krb5-client-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-SAP-BYOS crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image SLES15-SP6-SAP-BYOS-GCE krb5-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-SAP-BYOS-GCE krb5-client-1.20.1-150600.11.8.1 as a component of Image SLES15-SP6-SAP-BYOS-GCE crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image ai_15_6 krb5-1.20.1-150600.11.8.1 as a component of Image ai_15_6 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of Image python_15_6 krb5-1.20.1-150600.11.8.1 as a component of Image python_15_6 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 crypto-policies-scripts-20230920.570ea89-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 krb5-1.20.1-150600.11.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 krb5-32bit-1.20.1-150600.11.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 krb5-client-1.20.1-150600.11.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 krb5-devel-1.20.1-150600.11.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 krb5-plugin-preauth-otp-1.20.1-150600.11.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 krb5-plugin-preauth-pkinit-1.20.1-150600.11.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 krb5-plugin-kdb-ldap-1.20.1-150600.11.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 krb5-server-1.20.1-150600.11.8.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 crypto-policies-20230920.570ea89-150600.3.3.1 as a component of openSUSE Leap 15.6 crypto-policies-scripts-20230920.570ea89-150600.3.3.1 as a component of openSUSE Leap 15.6 krb5-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-32bit-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-client-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-devel-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-devel-32bit-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-plugin-kdb-ldap-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-plugin-preauth-otp-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-plugin-preauth-pkinit-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-plugin-preauth-spake-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 krb5-server-1.20.1-150600.11.8.1 as a component of openSUSE Leap 15.6 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. CVE-2025-24528 Container bci/bci-base-fips:15.7:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/bci-base-fips:15.7:crypto-policies-scripts-20230920.570ea89-150600.3.3.1 Container bci/bci-base-fips:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/bci-base-fips:latest:crypto-policies-scripts-20230920.570ea89-150600.3.3.1 Container bci/bci-init:15.7:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/bci-init:15.7:krb5-1.20.1-150600.11.8.1 Container bci/bci-init:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/bci-init:latest:krb5-1.20.1-150600.11.8.1 Container bci/bci-sle15-kernel-module-devel:15.7:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/bci-sle15-kernel-module-devel:15.7:krb5-1.20.1-150600.11.8.1 Container bci/bci-sle15-kernel-module-devel:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/bci-sle15-kernel-module-devel:latest:krb5-1.20.1-150600.11.8.1 Container bci/dotnet-aspnet:8.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/dotnet-aspnet:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/dotnet-runtime:8.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/dotnet-runtime:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/dotnet-sdk:8.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/dotnet-sdk:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/gcc:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/gcc:latest:krb5-1.20.1-150600.11.8.1 Container bci/golang:1.22-openssl:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/golang:1.22-openssl:krb5-1.20.1-150600.11.8.1 Container bci/golang:1.23:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/golang:1.23:krb5-1.20.1-150600.11.8.1 Container bci/golang:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/golang:latest:krb5-1.20.1-150600.11.8.1 Container bci/kiwi:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/kiwi:latest:krb5-1.20.1-150600.11.8.1 Container bci/node:22:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/node:22:krb5-1.20.1-150600.11.8.1 Container bci/nodejs:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/nodejs:latest:krb5-1.20.1-150600.11.8.1 Container bci/openjdk-devel:17:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/openjdk-devel:17:krb5-1.20.1-150600.11.8.1 Container bci/openjdk-devel:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/openjdk-devel:latest:krb5-1.20.1-150600.11.8.1 Container bci/openjdk:17:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/openjdk:17:krb5-1.20.1-150600.11.8.1 Container bci/openjdk:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/openjdk:latest:krb5-1.20.1-150600.11.8.1 Container bci/php-apache:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/php-apache:latest:krb5-1.20.1-150600.11.8.1 Container bci/php-fpm:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/php-fpm:latest:krb5-1.20.1-150600.11.8.1 Container bci/php:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/php:latest:krb5-1.20.1-150600.11.8.1 Container bci/python:3.13:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/python:3.13:krb5-1.20.1-150600.11.8.1 Container bci/python:3:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/python:3:krb5-1.20.1-150600.11.8.1 Container bci/python:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/python:latest:krb5-1.20.1-150600.11.8.1 Container bci/ruby:3:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/ruby:3:krb5-1.20.1-150600.11.8.1 Container bci/ruby:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/ruby:latest:krb5-1.20.1-150600.11.8.1 Container bci/rust:1.84:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/rust:1.84:krb5-1.20.1-150600.11.8.1 Container bci/rust:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/rust:latest:krb5-1.20.1-150600.11.8.1 Container bci/spack:0.23:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/spack:0.23:krb5-1.20.1-150600.11.8.1 Container bci/spack:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container bci/spack:latest:krb5-1.20.1-150600.11.8.1 Container containers/apache-tomcat:10.1-openjdk11:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/apache-tomcat:10.1-openjdk11:krb5-1.20.1-150600.11.8.1 Container containers/apache-tomcat:10.1-openjdk17:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/apache-tomcat:10.1-openjdk17:krb5-1.20.1-150600.11.8.1 Container containers/apache-tomcat:10.1-openjdk21:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/apache-tomcat:10.1-openjdk21:krb5-1.20.1-150600.11.8.1 Container containers/apache-tomcat:9-openjdk11:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/apache-tomcat:9-openjdk11:krb5-1.20.1-150600.11.8.1 Container containers/apache-tomcat:9-openjdk17:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/apache-tomcat:9-openjdk17:krb5-1.20.1-150600.11.8.1 Container containers/apache-tomcat:9-openjdk21:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/apache-tomcat:9-openjdk21:krb5-1.20.1-150600.11.8.1 Container containers/apache-tomcat:9-openjdk8:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/apache-tomcat:9-openjdk8:krb5-1.20.1-150600.11.8.1 Container containers/milvus:2.4:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/milvus:2.4:krb5-1.20.1-150600.11.8.1 Container containers/ollama:0:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/ollama:0:krb5-1.20.1-150600.11.8.1 Container containers/open-webui:0:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/open-webui:0:krb5-1.20.1-150600.11.8.1 Container containers/python:3.11:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/python:3.11:krb5-1.20.1-150600.11.8.1 Container containers/python:3.9:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/python:3.9:krb5-1.20.1-150600.11.8.1 Container containers/pytorch:2-nvidia:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/pytorch:2-nvidia:krb5-1.20.1-150600.11.8.1 Container containers/pytorch:2.5.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container containers/pytorch:2.5.0:krb5-1.20.1-150600.11.8.1 Container suse/389-ds:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/389-ds:latest:krb5-1.20.1-150600.11.8.1 Container suse/389-ds:latest:krb5-client-1.20.1-150600.11.8.1 Container suse/git:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/git:latest:krb5-1.20.1-150600.11.8.1 Container suse/helm:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:krb5-1.20.1-150600.11.8.1 Container suse/manager/5.0/x86_64/server-attestation:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/manager/5.0/x86_64/server:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/manager/5.0/x86_64/server:latest:krb5-1.20.1-150600.11.8.1 Container suse/mariadb-client:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/mariadb-client:latest:krb5-1.20.1-150600.11.8.1 Container suse/mariadb:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/mariadb:latest:krb5-1.20.1-150600.11.8.1 Container suse/nginx:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/nginx:latest:krb5-1.20.1-150600.11.8.1 Container suse/pcp:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/pcp:latest:krb5-1.20.1-150600.11.8.1 Container suse/postgres:16:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/postgres:16:krb5-1.20.1-150600.11.8.1 Container suse/postgres:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/postgres:latest:krb5-1.20.1-150600.11.8.1 Container suse/registry:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/registry:latest:krb5-1.20.1-150600.11.8.1 Container suse/rmt-server:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/rmt-server:latest:krb5-1.20.1-150600.11.8.1 Container suse/sle15:15.6:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sle15:15.6:krb5-1.20.1-150600.11.8.1 Container suse/sle15:15.7:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sle15:15.7:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/cdi-apiserver:1.58.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/cdi-apiserver:1.58.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/cdi-cloner:1.58.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/cdi-cloner:1.58.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/cdi-controller:1.58.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/cdi-controller:1.58.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/cdi-importer:1.58.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/cdi-importer:1.58.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/cdi-operator:1.58.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/cdi-operator:1.58.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/cdi-uploadproxy:1.58.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/cdi-uploadproxy:1.58.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/cdi-uploadserver:1.58.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/cdi-uploadserver:1.58.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/libguestfs-tools:1.4.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/libguestfs-tools:1.4.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/virt-api:1.4.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/virt-api:1.4.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/virt-controller:1.4.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/virt-controller:1.4.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/virt-exportproxy:1.4.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/virt-exportproxy:1.4.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/virt-exportserver:1.4.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/virt-exportserver:1.4.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/virt-handler:1.4.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/virt-handler:1.4.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/virt-launcher:1.4.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/virt-launcher:1.4.0:krb5-1.20.1-150600.11.8.1 Container suse/sles/15.7/virt-operator:1.4.0:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/sles/15.7/virt-operator:1.4.0:krb5-1.20.1-150600.11.8.1 Container suse/stunnel:latest:crypto-policies-20230920.570ea89-150600.3.3.1 Container suse/stunnel:latest:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-BYOS-GCE:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-BYOS-GCE:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-BYOS-GCE:krb5-client-1.20.1-150600.11.8.1 Image SLES15-SP6-BYOS:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-BYOS:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-BYOS:krb5-client-1.20.1-150600.11.8.1 Image SLES15-SP6-CHOST-BYOS-Azure:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-CHOST-BYOS-Azure:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-CHOST-BYOS-EC2:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-CHOST-BYOS-EC2:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-CHOST-BYOS-GCE:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-CHOST-BYOS-GCE:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-CHOST-BYOS-GDC:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-CHOST-BYOS-GDC:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-CHOST-BYOS-SAP-CCloud:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-CHOST-BYOS-SAP-CCloud:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-CHOST-BYOS:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-CHOST-BYOS:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-GCE:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-GCE:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-GCE:krb5-client-1.20.1-150600.11.8.1 Image SLES15-SP6-Hardened-BYOS-GCE:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-Hardened-BYOS-GCE:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-Hardened-BYOS-GCE:krb5-client-1.20.1-150600.11.8.1 Image SLES15-SP6-Hardened-BYOS:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-Hardened-BYOS:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-Hardened-BYOS:krb5-client-1.20.1-150600.11.8.1 Image SLES15-SP6-SAP-BYOS-GCE:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-SAP-BYOS-GCE:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-SAP-BYOS-GCE:krb5-client-1.20.1-150600.11.8.1 Image SLES15-SP6-SAP-BYOS:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6-SAP-BYOS:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6-SAP-BYOS:krb5-client-1.20.1-150600.11.8.1 Image SLES15-SP6:crypto-policies-20230920.570ea89-150600.3.3.1 Image SLES15-SP6:krb5-1.20.1-150600.11.8.1 Image SLES15-SP6:krb5-client-1.20.1-150600.11.8.1 Image ai_15_6:crypto-policies-20230920.570ea89-150600.3.3.1 Image ai_15_6:krb5-1.20.1-150600.11.8.1 Image python_15_6:crypto-policies-20230920.570ea89-150600.3.3.1 Image python_15_6:krb5-1.20.1-150600.11.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:crypto-policies-20230920.570ea89-150600.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:crypto-policies-scripts-20230920.570ea89-150600.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:krb5-1.20.1-150600.11.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:krb5-32bit-1.20.1-150600.11.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:krb5-client-1.20.1-150600.11.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:krb5-devel-1.20.1-150600.11.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:krb5-plugin-preauth-otp-1.20.1-150600.11.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:krb5-plugin-preauth-pkinit-1.20.1-150600.11.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:krb5-plugin-kdb-ldap-1.20.1-150600.11.8.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:krb5-server-1.20.1-150600.11.8.1 openSUSE Leap 15.6:crypto-policies-20230920.570ea89-150600.3.3.1 openSUSE Leap 15.6:crypto-policies-scripts-20230920.570ea89-150600.3.3.1 openSUSE Leap 15.6:krb5-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-32bit-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-client-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-devel-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-devel-32bit-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-plugin-kdb-ldap-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-plugin-preauth-otp-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-plugin-preauth-pkinit-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-plugin-preauth-spake-1.20.1-150600.11.8.1 openSUSE Leap 15.6:krb5-server-1.20.1-150600.11.8.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250401-1/ https://www.suse.com/security/cve/CVE-2025-24528.html CVE-2025-24528 https://bugzilla.suse.com/1236619 SUSE Bug 1236619