--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-be3947859f
2022-11-25 00:38:32.724310
--------------------------------------------------------------------------------
Name : heimdal
Product : Fedora EPEL 8
Version : 7.7.1
Release : 1.el8
URL :
http://www.heimdal.software/
Summary : A Kerberos 5 implementation without export restrictions
Description :
Kerberos 5 is a network authentication and single sign-on system.
Heimdal is a free Kerberos 5 implementation without export restrictions
written from the spec (rfc1510 and successors) including advanced features
like thread safety, IPv6, master-slave replication of Kerberos Key
Distribution Center server and support for ticket delegation (S4U2Self,
S4U2Proxy).
This package can coexist with MIT Kerberos 5 packages. Hesiod is disabled
by default since it is deemed too big a security risk by the packager.
--------------------------------------------------------------------------------
Update Information:
This release fixes the following Security Vulnerabilities: * CVE-2022-42898 PAC
parse integer overflows * CVE-2022-3437 Overflows and non-constant time leaks in
DES{,3} and arcfour * CVE-2022-41916 Fix Unicode normalization read of 1 bytes
past end of array * CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors *
CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
* CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec Note that
CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common
Vulnerability Scoring System (CVSS) v3.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Nov 16 2022 Alexander Bostr��m <abo(a)root.snowtree.se> - 7.7.1-1
- Update to 7.7.1
- Remove upstreamed patch
- Replace patch with sed command
* Thu Jul 21 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-12
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-11
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-10
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Apr 13 2021 Alexander Bostr��m <abo(a)root.snowtree.se> - 7.7.0-9
- Backport autoconf-2.70 fix
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-8
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.7.0-7
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update heimdal' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------