Bug 44985 - Heimdal: KDC-REP issue (4.1)
Summary: Heimdal: KDC-REP issue (4.1)
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Security updates
Version: UCS 4.1
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 4.1-4-errata
Assignee: Arvid Requate
QA Contact: Felix Botner
URL: https://www.orpheus-lyre.info/
Keywords:
Depends on: 44984
Blocks: 45028
  Show dependency tree / graph
 
Reported: 2017-07-12 12:18 CEST by Arvid Requate
Modified: 2017-07-17 17:37 CEST (History)
0 users

See Also:
What kind of report is it?: Security Issue
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Security
Customer ID:
Max CVSS v3 score:
requate: Patch_Available+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2017-07-12 12:18:32 CEST 
+++ This bug was initially created as a clone of Bug #44984 +++

The following issue has been fixed in upstream Heimdal:

* Orpheus' Lyre KDC-REP service name validation (mutual auth bypass) in embedded Heimdal (CVE-2017-11103)
Comment 1 Arvid Requate univentionstaff 2017-07-12 13:06:13 CEST 
Heimdal rebuilt in errata4.1-4 with patch.

Advisory: heimdal.yaml
Comment 2 Felix Botner univentionstaff 2017-07-12 13:51:16 CEST 
OK - patch
OK - test
OK - errata4.1-4 version smaller than 4.2-0
OK - yaml
Comment 3 Janek Walkenhorst univentionstaff 2017-07-12 15:45:15 CEST 
<http://errata.software-univention.de/ucs/4.1/440.html>