File _patchinfo of Package patchinfo.8574
<patchinfo incident="8574">
<issue tracker="bnc" id="1084909"></issue>
<issue tracker="bnc" id="1071675"></issue>
<issue tracker="bnc" id="1047218"></issue>
<issue tracker="cve" id="2017-17439"/>
<category>security</category>
<rating>important</rating>
<packager>enzokiel</packager>
<description>This update for libheimdal to version 7.5.0 fixes the following issues:
The following security vulnerability was fixed:
- CVE-2017-17439: Fixed a remote denial of service vulnerability through which
remote unauthenticated attackers were able to crash the KDC by sending a
crafted UDP packet containing empty data fields for client name or realm
(boo#1071675)
The following other bugs were fixed:
- Override the build date (boo#1047218)
- Use constant hostname (boo#1084909)
- Handle long input lines when reloading database dumps
- In pre-forked mode, correctly clear the process ids of exited children,
allowing new child processes to replace the old.
- Fixed incorrect KDC response when no-cross realm TGT exists, allowing client
requests to fail quickly rather than time out after trying to get a correct
answer from each KDC.
</description>
<summary>Security update for libheimdal</summary>
</patchinfo>