TencentOS Server 2: python-kdcproxy (TSSA-2025:1029)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:1029 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Important: python-kdcproxy

Issue Overview: If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could...