--===============7398083544477057986==
Content-Type: multipart/signed; micalg="pgp-sha256";
	protocol="application/pgp-signature";
 boundary="=-JcgSW+j/OYNPfOIgpbDv"


--=-JcgSW+j/OYNPfOIgpbDv
Content-Type: text/plain; charset="UTF-8
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-3353-3
July 24, 2017

heimdal vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 ESM

Summary:

Heimdal could allow unintended access to network services.

Software Description:
- heimdal: Heimdal Kerberos Network Authentication Protocol

Details:

USN-3353-1 fixed a vulnerability in Heimdal. This update provides
the corresponding updade for Ubuntu 12.04 ESM.

Original advisory details:

 Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered
 that Heimdal clients incorrectly trusted unauthenticated portions
 of Kerberos tickets. A remote attacker could use this to impersonate
 trusted network services or perform other attacks.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
 
 libkrb5-26-heimdal              1.6~git20120311.dfsg.1-2ubuntu0.2

After a standard system update you need to restart any applications
using Heimdal libraries to make all the necessary changes.

References:
  https://www.ubuntu.com/usn/usn-3353-3
  https://www.ubuntu.com/usn/usn-3353-1
  CVE-2017-11103

--ÓcgSW+j/OYNPfOIgpbDv
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=APFp
-----END PGP SIGNATURE-----

--=-JcgSW+j/OYNPfOIgpbDv--



--===============7398083544477057986==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============7398083544477057986==--