Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE 15: Kubernetes1.18 Important Access Control Fix CVE-2021-3121

suse
Calendar Grey August 25, 2025
Dist Suse Esm H88
SUSE announced a security update for Kubernetes 1.18, focusing on critical vulnerabilities and essential security enhancements.
* bsc#1182185 * bsc#1246989 Cross-References: * CVE-2021-3121

Summary

## This update for kubernetes1.18 fixes the following issues: * Update to version 1.18.20: * CVE-2021-3121: Fixed a lack of certain index validation in plugin/unmarshal/unmarshal.go. (bsc#1182185) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2977=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2977=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2977=1 * SUSE Enterprise Storage 7.1

Topics%20covered

Topics Covered

security advisory SuSE access control important web security kubernetes1.18

References

* bsc#1182185

* bsc#1246989

Cross-

* CVE-2021-3121

CVSS scores:

* CVE-2021-3121 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2021-3121 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected Products:

* openSUSE Leap 15.6

* SUSE Enterprise Storage 7.1

* SUSE Linux Enterprise High Performance Computing 15 SP3

* SUSE Linux Enterprise High Performance Computing 15 SP4

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

* SUSE Linux Enterprise Server 15 SP3

* SUSE Linux Enterprise Server 15 SP3 LTSS

* SUSE Linux Enterprise Server 15 SP4

* SUSE Linux Enterprise Server 15 SP4 LTSS

* SUSE Linux Enterprise Server for SAP Applications 15 SP3

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:02977-1
Release Date: 2025-08-25T12:18:40Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE access control important web security kubernetes1.18

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here