openSUSE: 2019:1888-1 Moderate: libheimdal KDC Issues and Fixes

This update for libheimdal fixes the following issues:

libheimdal was updated to version 7.7.0:

+ Bug fixes:

- PKCS#11 hcrypto back-end:

+ initialize the p11_module_load function list

+ verify that not only is a mechanism present but that its mechanism

info states that it offers the required encryption, decryption or

digest services

- krb5:

+ Starting with 7.6, Heimdal permitted requesting authenticated

anonymous tickets. However, it did not verify that a KDC in fact

returned an anonymous ticket when one was requested.

+ Cease setting the KDCOption reaquest_anonymous flag when issuing

S4UProxy (constrained delegation) TGS requests.

+ when the Win2K PKINIT compatibility option is set, do not require

krbtgt otherName to match when validating KDC certificate.

+ set PKINIT_BTMM flag per Apple implementation

+ use memset_s() instead of memset()

- kdc:

...