USN-3353-1: Heimdal vulnerability
14 July 2017
Heimdal could allow unintended access to network services.
- heimdal - Heimdal Kerberos Network Authentication Protocol
Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered
that Heimdal clients incorrectly trusted unauthenticated portions
of Kerberos tickets. A remote attacker could use this to impersonate
trusted network services or perform other attacks.
The problem can be corrected by updating your system to the following package versions:
After a standard system update you need to restart any applications
using Heimdal libraries to make all the necessary changes.