Stay Secure with the Latest Linux Advisories

security advisoryFedorasoftware upgrade

Fedora 25: Heimdal 7.4.0 Critical Update: Metadata Exposure Risk

Update to 7.4.0 GA release (CVE-2017-11103). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-5d6a9e0c9c 2017-07-23 17:01:39.374509 --------------------------------------------------------------------------------Name : heimdal Product : Fedora 25 Version : 7.4.0 Release : 1.fc25 URL : https://github.com/heimdal/ Summary : A Kerberos 5 implementation without export restrictions Description : Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec (rfc1510 and successors) including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center server and support for ticket delegation (S4U2Self, S4U2Proxy). This package can coexist with MIT Kerberos 5 packages. Hesiod is disabled by default since it is deemed too big a security risk by the packager. --------------------------------------------------------------------------------Update Information: Update to 7.4.0 GA release (CVE-2017-11103) --------------------------------------------------------------------------------References: [ 1 ] Bug #1469998 - CVE-2017-11103 heimdal: krb5: Metadata taken from the unauthenticated plaintext [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1469998 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade heimdal' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announcemailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Important heimdal security patch releases for Fedora to resolve metadata leakage vulnerabilities. Update using dnf to ensure security.. Heimdal Update,Fedora Security,Kerberos Implementation,Package Upgrade. . LinuxSecurity.com Team

Jul 23, 2017 Fedora