product: ucs
release: "4.3"
version: [3,4]
scope: ucs_4.3-0-errata4.3-4
src: samba
fix: 2:4.7.8-1A~4.3.0.201905081755
desc: |
 This update addresses the following issue:
 * The checksum validation in the S4U2Self handler in
   the embedded Heimdal KDC did not first confirm that the
   checksum was keyed, allowing replacement of the
   requested target (client) principal.
   For details and possible mitigations see
   <https://www.samba.org/samba/security/CVE-2018-16860.html>
bug: [49433]
cve:
 - CVE-2018-16860
