Home / mailings

PDF

[USN-9068-1] Debian-LAN vulnerability

Posted on 13 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9068-1
November 12, 2026

debian-lan-config vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Debian-LAN could allow users to change the Kerberos passwords of other
users.

Software Description:
- debian-lan-config: FAI config space and other configs for the Debian-LAN system

Details:

Wolfgang Schweer discovered that Debian-LAN configured overly permissive
ACLs for the Kerberos admin server. An authenticated user could possibly
use this issue to change the credentials of other users, leading to
privilege escalation.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
debian-lan-config 0.21ubuntu0.16.04.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-9068-1
CVE-2019-3467

--===============5156960904349945186==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP