Lucene search

K
suseSuseOPENSUSE-SU-2018:2376-1
HistoryAug 16, 2018 - 3:22 p.m.

Security update for libheimdal (important)

2018-08-1615:22:13
lists.opensuse.org
49

EPSS

0.66

Percentile

97.9%

This update for libheimdal to version 7.5.0 fixes the following issues:

The following security vulnerability was fixed:

  • CVE-2017-17439: Fixed a remote denial of service vulnerability through
    which remote unauthenticated attackers were able to crash the KDC by
    sending a crafted UDP packet containing empty data fields for client
    name or realm (boo#1071675)

The following other bugs were fixed:

  • Override the build date (boo#1047218)
  • Use constant hostname (boo#1084909)
  • Handle long input lines when reloading database dumps
  • In pre-forked mode, correctly clear the process ids of exited children,
    allowing new child processes to replace the old.
  • Fixed incorrect KDC response when no-cross realm TGT exists, allowing
    client requests to fail quickly rather than time out after trying to get
    a correct answer from each KDC.