what you don't know can hurt you

Debian Security Advisory 4455-1

Debian Security Advisory 4455-1
Posted Jun 3, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4455-1 - Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos.

tags | advisory, vulnerability
systems | linux, debian
advisories | CVE-2018-16860, CVE-2019-12098
MD5 | cef4f2ca45de7d4f8bbbcf6901f098fe

Debian Security Advisory 4455-1

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4455-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
June 03, 2019 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : heimdal
CVE ID : CVE-2018-16860 CVE-2019-12098
Debian Bug : 928966 929064

Several vulnerabilities were discovered in Heimdal, an implementation of
Kerberos 5 that aims to be compatible with MIT Kerberos.

CVE-2018-16860

Isaac Boukris and Andrew Bartlett discovered that Heimdal was
susceptible to man-in-the-middle attacks caused by incomplete
checksum validation. Details on the issue can be found in the Samba
advisory at https://www.samba.org/samba/security/CVE-2018-16860.html

CVE-2019-12098

It was discovered that failure of verification of the PA-PKINIT-KX key
exchange client-side could permit to perform man-in-the-middle attack.

For the stable distribution (stretch), these problems have been fixed in
version 7.1.0+dfsg-13+deb9u3.

We recommend that you upgrade your heimdal packages.

For the detailed security status of heimdal please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/heimdal

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=GEYX
-----END PGP SIGNATURE-----

Comments (1)

RSS Feed Subscribe to this comment feed
zaintech99

Thank you for your post, i got information about Debian Security Advisory, I look for such article along time, today i find it finally. this post give me lots of advise it is very useful for me.
<a href="www.technewworld.in">www.technewworld.in</a>

Comment by zaintech99
2019-06-06 03:05:27 UTC | Permalink | Reply
Login or Register to post a comment

File Archive:

August 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Aug 1st
    10 Files
  • 2
    Aug 2nd
    8 Files
  • 3
    Aug 3rd
    2 Files
  • 4
    Aug 4th
    1 Files
  • 5
    Aug 5th
    15 Files
  • 6
    Aug 6th
    79 Files
  • 7
    Aug 7th
    16 Files
  • 8
    Aug 8th
    10 Files
  • 9
    Aug 9th
    10 Files
  • 10
    Aug 10th
    0 Files
  • 11
    Aug 11th
    6 Files
  • 12
    Aug 12th
    26 Files
  • 13
    Aug 13th
    15 Files
  • 14
    Aug 14th
    19 Files
  • 15
    Aug 15th
    52 Files
  • 16
    Aug 16th
    11 Files
  • 17
    Aug 17th
    1 Files
  • 18
    Aug 18th
    0 Files
  • 19
    Aug 19th
    0 Files
  • 20
    Aug 20th
    0 Files
  • 21
    Aug 21st
    0 Files
  • 22
    Aug 22nd
    0 Files
  • 23
    Aug 23rd
    0 Files
  • 24
    Aug 24th
    0 Files
  • 25
    Aug 25th
    0 Files
  • 26
    Aug 26th
    0 Files
  • 27
    Aug 27th
    0 Files
  • 28
    Aug 28th
    0 Files
  • 29
    Aug 29th
    0 Files
  • 30
    Aug 30th
    0 Files
  • 31
    Aug 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close