debian-lan-config vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

* Ubuntu 18.04 LTS

Summary

Debian-LAN could be made to change Kerberos user passwords or run
programs as an administrator.

Software Description

* debian-lan-config - FAI config space for the Debian-LAN system

Details

Wolfgang Schweer discovered that Debian-LAN did not properly
handle ACLs for the Kerberos admin server. A local attacker could
possibly use this issue to change the passwords of other users,
leading to root privilege escalation. (CVE-2019-3467)

Update instructions

The problem can be corrected by updating your system to the
following package versions:

Ubuntu 18.04 LTS
debian-lan-config - 0.23+deb9u1build0.18.04.1

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary
changes.

References

* CVE-2019-3467

--- Mystic BBS v1.12 A46 (Linux/64)
* Origin: BZ&BZ BBS (21:4/110)