Fedora 26 : krb5 (2017-bf74db7147)

Fix bypass of certauth module with malicious EKU cert missing a SAN. Security related; see upstream bug for more information. - Add kdcpolicy interface. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

CVE-2017-7562

An authentication bypass flaw was found in the way krb5's certauth interface handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances...