[AUTOPATCHER-CORE] Upgrade krb5 to 1.21.3 CVE-2024-37371, CVE-2024-37370 (#9922)

SPECS/krb5/krb5.signatures.json

@@ -1,6 +1,6 @@
 {
   "Signatures": {
     "krb5.conf": "54ce761ea22e55923f4b10b5a8ed306f98c579217b4253163437c33eec243720",
-    "krb5-1.21.2.tar.gz": "9560941a9d843c0243a71b17a7ac6fe31c7cebb5bce3983db79e52ae7e850491"
+    "krb5-1.21.3.tar.gz": "b7a4cd5ead67fb08b980b21abd150ff7217e85ea320c9ed0c6dadd304840ad35"
   }
 }

SPECS/krb5/krb5.spec

@@ -3,7 +3,7 @@
 
 Summary:        The Kerberos newtork authentication system
 Name:           krb5
-Version:        1.21.2
+Version:        1.21.3
 Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
@@ -125,6 +125,9 @@ make check
 %{_datarootdir}/locale/*
 
 %changelog
+* Wed Jul 24 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.21.3-1
+- Auto-upgrade to 1.21.3 - CVE-2024-37371, CVE-2024-37370
+
 * Tue Nov 21 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.21.2-1
 - Auto-upgrade to 1.21.2 - Azure Linux 3.0 - package upgrades
 

cgmanifest.json

@@ -8261,8 +8261,8 @@
         "type": "other",
         "other": {
           "name": "krb5",
-          "version": "1.21.2",
-          "downloadUrl": "https://kerberos.org/dist/krb5/1.21/krb5-1.21.2.tar.gz"
+          "version": "1.21.3",
+          "downloadUrl": "https://kerberos.org/dist/krb5/1.21/krb5-1.21.3.tar.gz"
         }
       }
     },

toolkit/resources/manifests/package/pkggen_core_aarch64.txt

@@ -189,7 +189,7 @@ libsolv-0.7.28-1.azl3.aarch64.rpm
 libsolv-devel-0.7.28-1.azl3.aarch64.rpm
 libssh2-1.11.0-1.azl3.aarch64.rpm
 libssh2-devel-1.11.0-1.azl3.aarch64.rpm
-krb5-1.21.2-1.azl3.aarch64.rpm
+krb5-1.21.3-1.azl3.aarch64.rpm
 nghttp2-1.59.0-1.azl3.aarch64.rpm
 curl-8.8.0-1.azl3.aarch64.rpm
 curl-devel-8.8.0-1.azl3.aarch64.rpm

toolkit/resources/manifests/package/pkggen_core_x86_64.txt

@@ -189,7 +189,7 @@ libsolv-0.7.28-1.azl3.x86_64.rpm
 libsolv-devel-0.7.28-1.azl3.x86_64.rpm
 libssh2-1.11.0-1.azl3.x86_64.rpm
 libssh2-devel-1.11.0-1.azl3.x86_64.rpm
-krb5-1.21.2-1.azl3.x86_64.rpm
+krb5-1.21.3-1.azl3.x86_64.rpm
 nghttp2-1.59.0-1.azl3.x86_64.rpm
 curl-8.8.0-1.azl3.x86_64.rpm
 curl-devel-8.8.0-1.azl3.x86_64.rpm

toolkit/resources/manifests/package/toolchain_aarch64.txt

@@ -156,10 +156,10 @@ kernel-headers-6.6.35.1-5.azl3.noarch.rpm
 kmod-30-1.azl3.aarch64.rpm
 kmod-debuginfo-30-1.azl3.aarch64.rpm
 kmod-devel-30-1.azl3.aarch64.rpm
-krb5-1.21.2-1.azl3.aarch64.rpm
-krb5-debuginfo-1.21.2-1.azl3.aarch64.rpm
-krb5-devel-1.21.2-1.azl3.aarch64.rpm
-krb5-lang-1.21.2-1.azl3.aarch64.rpm
+krb5-1.21.3-1.azl3.aarch64.rpm
+krb5-debuginfo-1.21.3-1.azl3.aarch64.rpm
+krb5-devel-1.21.3-1.azl3.aarch64.rpm
+krb5-lang-1.21.3-1.azl3.aarch64.rpm
 libarchive-3.7.1-2.azl3.aarch64.rpm
 libarchive-debuginfo-3.7.1-2.azl3.aarch64.rpm
 libarchive-devel-3.7.1-2.azl3.aarch64.rpm

toolkit/resources/manifests/package/toolchain_x86_64.txt

@@ -162,10 +162,10 @@ kernel-headers-6.6.35.1-5.azl3.noarch.rpm
 kmod-30-1.azl3.x86_64.rpm
 kmod-debuginfo-30-1.azl3.x86_64.rpm
 kmod-devel-30-1.azl3.x86_64.rpm
-krb5-1.21.2-1.azl3.x86_64.rpm
-krb5-debuginfo-1.21.2-1.azl3.x86_64.rpm
-krb5-devel-1.21.2-1.azl3.x86_64.rpm
-krb5-lang-1.21.2-1.azl3.x86_64.rpm
+krb5-1.21.3-1.azl3.x86_64.rpm
+krb5-debuginfo-1.21.3-1.azl3.x86_64.rpm
+krb5-devel-1.21.3-1.azl3.x86_64.rpm
+krb5-lang-1.21.3-1.azl3.x86_64.rpm
 libarchive-3.7.1-2.azl3.x86_64.rpm
 libarchive-debuginfo-3.7.1-2.azl3.x86_64.rpm
 libarchive-devel-3.7.1-2.azl3.x86_64.rpm