Vulnerability Bulletins

DSA-4589 debian-edu-config - security update

   
Affected software Debian
 
It was discovered that debian-edu-config, a set of configuration filesused for the Debian Edu blend, configured too permissive ACLs for theKerberos admin server, which allowed password changes for other userprincipals.

More info:

https://www.debian.org/security/2019/dsa-4589