-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-5344-1
security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 08, 2023
https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : heimdal
CVE ID : CVE-2022-45142
Debian Bug : 1030849
Helmut Grohne discovered a flaw in Heimdal, an implementation of
Kerberos 5 that aims to be compatible with MIT Kerberos. The backports
of fixes for CVE-2022-3437 accidentally inverted important memory
comparisons in the arcfour-hmac-md5 and rc4-hmac integrity check
handlers for gssapi, resulting in incorrect validation of message
integrity codes.
For the stable distribution (bullseye), this problem has been fixed in
version 7.7.0+dfsg-2+deb11u3.
We recommend that you upgrade your heimdal packages.
For the detailed security status of heimdal please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/heimdal
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at:
https://www.debian.org/security/
Mailing list:
debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmPjmWZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Rw+RAAjSGizyQ7+71isP3z4Wtj8ZB1JMAjy+x8VfHL5F9Fh6ufV27fiH8WzrAo dm4JHFwVRuEYby9JLl0DiHPffwx76TG61/TGLpGR5wcOeB9d7I/WZ5eNm92qEMCg Q4sWpQRmD9L3TvKHoQV088yUUZYhkFedB2GbmabTBwa71FJ089ccvZX/ZvQVBvp/ QfFl1IgnNjkkRLdVQxUtMdgvxhkgkGC+gmLT/QxNcGXQX0/joVhw9vhKZahcP1er 1nQ34JEyNxogjuBHLCerMvwrJ4wHDLVg0luw8uuCK/hc4q8NxjNzty4ANAk0z6w4 9X4xJjf7LIHU/lNq25GtY6g9llSIhGVF1W92iPUuh6tTC99/qgmghVfx4Q+GZS+C Sfnm23Aj+gXPzhBgcCeeWhzLT8idsk0RsJHAUI7Se/YCU/JnwunwS2LGuDiwO4e9 GdQyTY5jN0a/9K7nl3g6l+VZbEvoHlqdbJIOZGckUlwQRpiMRBMvKKXj8sF4a9TW bcKOjUzp9TPDbtsfEBOrnUHnkar87aBliaWSr4uE320+9rPpgycSBwViAHnuC1ay XGSiNmKaAYGyKdHWCPuawpVnPiCTQ+dVQuEw48uvLfgHf97Erdw919XRrKiyDtEG hWTtki4dF9jWIESk9ba/bIavk7emo3Tny5h6PS1l/MV8Ior6S7k=
=naJG
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)