Bug 44984 - Heimdal: KDC-REP issue (4.2)
Heimdal: KDC-REP issue (4.2)
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Security updates
UCS 4.2
Other Linux
: P5 normal (vote)
: UCS 4.2-1-errata
Assigned To: Arvid Requate
Felix Botner
https://www.orpheus-lyre.info/
:
Depends on:
Blocks: 44985 45028
  Show dependency treegraph
 
Reported: 2017-07-12 12:10 CEST by Arvid Requate
Modified: 2017-07-17 17:37 CEST (History)
0 users

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Ticket number:
Bug group (optional): Security
Max CVSS v3 score:
requate: Patch_Available+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2017-07-12 12:10:13 CEST
Created attachment 9019 [details]
0300-CVE-2017-11103-Orpheus-Lyre-KDC-REP-service-name-val.quilt

The following issue has been fixed in upstream Heimdal:

* Orpheus' Lyre KDC-REP service name validation (mutual auth bypass) in embedded Heimdal (CVE-2017-11103)
Comment 1 Arvid Requate univentionstaff 2017-07-12 13:31:12 CEST
Heimdal rebuilt in errata4.2-1 with patch.

Advisory: heimdal.yaml
Comment 2 Felix Botner univentionstaff 2017-07-12 15:00:03 CEST
OK - patch
OK - YAML
OK - installation
OK - kinit/ldapsearch -Y GSSAPI
OK - univention-system-check
Comment 3 Janek Walkenhorst univentionstaff 2017-07-12 16:49:32 CEST
<http://errata.software-univention.de/ucs/4.2/86.html>