==========================================================================
Ubuntu Security Notice USN-3353-3
July 24, 2017

heimdal vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 12.04 ESM

Summary:

Heimdal could allow unintended access to network services.

Software Description:
– heimdal: Heimdal Kerberos Network Authentication Protocol

Details:

USN-3353-1 fixed a vulnerability in Heimdal. This update provides
the corresponding updade for Ubuntu 12.04 ESM.

Original advisory details:

 Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered
 that Heimdal clients incorrectly trusted unauthenticated portions
 of Kerberos tickets. A remote attacker could use this to impersonate
 trusted network services or perform other attacks.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  libkrb5-26-heimdal              1.6~git20120311.dfsg.1-2ubuntu0.2

After a standard system update you need to restart any applications
using Heimdal libraries to make all the necessary changes.

References:
  https://www.ubuntu.com/usn/usn-3353-3
  https://www.ubuntu.com/usn/usn-3353-1
  CVE-2017-11103
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2

iQIcBAABCAAGBQJZdf0GAAoJEEW851uECx9pT+AP/0SyAWkF9LUodnOdlyYrzjrX
571zGV6q1fbbBG2Gs9gfMBkXx2Sfqf5X0eHwWO6mcxPsJ3JpWKENtOk0uTyjq29S
TREGn8UD2leyPYWf6s2VvwYenJsncCVmfXnnW9guGWx+0lFmD7nE6NrqElWxBuyl
YhFfHldwxRt511DobE8UXR0j2vgE5yZ3V/FWXcLXrrYATX0LYErT7mC9GSJdRc36
TI/RAmfqcrbMDPs8hmliqYY2z0tSeukqHF5XSBcYUzNJ1kaSHKPNtHHe/ysgKKQk
9KcaB/I49EDm3TmPWrLPNOEvPjpTCMZDl7LyV9PcrnF8KonoQqsPRdSrZLN9oUZn
24JLNzUQUmitJTlZlvaIpXfYJq9cwz8K+EZEGqF/LtzHCBscU+wiKC7spWaQ5768
Lnjm5y91uVy9vM6IrsTPKyvkqszmld68GlMFRK/dA/5i0XwUtIUhoZmb7wpBgOvt
f0+cS3RQPYfqQD47q6mvWt/cOLfsHS7kkh2SZ+Tuss7g9trM9ITVbuWY6srfQvT3
rSJYII5l3+PFQ0vVup7rELT5JgmiZ0tUSg7bJsPCCaQzzy4GjWwNWruO2CQCpM0A
RNXaC2ttkq2whrBuLEcMSEHkI7ERUSux25IQ3tTOb/DBLHRSzhydiw+2Wz11F1wk
XazxzSQBwuj2rHUjue8Q
=APFp
—–END PGP SIGNATURE—–
—