Bug 44984 - Heimdal: KDC-REP issue (4.2)
Heimdal: KDC-REP issue (4.2)
Product: UCS
Classification: Unclassified
Component: Security updates
UCS 4.2
Other Linux
: P5 normal (vote)
: UCS 4.2-1-errata
Assigned To: Arvid Requate
Felix Botner
Depends on:
Blocks: 44985 45028
  Show dependency treegraph
Reported: 2017-07-12 12:10 CEST by Arvid Requate
Modified: 2018-01-29 09:29 CET (History)
1 user (show)

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Security
Max CVSS v3 score:
requate: Patch_Available+


Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2017-07-12 12:10:13 CEST
Created attachment 9019 [details]

The following issue has been fixed in upstream Heimdal:

* Orpheus' Lyre KDC-REP service name validation (mutual auth bypass) in embedded Heimdal (CVE-2017-11103)
Comment 1 Arvid Requate univentionstaff 2017-07-12 13:31:12 CEST
Heimdal rebuilt in errata4.2-1 with patch.

Advisory: heimdal.yaml
Comment 2 Felix Botner univentionstaff 2017-07-12 15:00:03 CEST
OK - patch
OK - installation
OK - kinit/ldapsearch -Y GSSAPI
OK - univention-system-check
Comment 3 Janek Walkenhorst univentionstaff 2017-07-12 16:49:32 CEST
Comment 4 Philipp Hahn univentionstaff 2018-01-29 09:29:04 CET
d153aab1 Bug #44984 debmirror: Skip heimdal-1.6~rc2+dfsg-9+deb8u1 import