Gentoo Security Advisory GLSA 200404-09 (heimdal)

Summary
The remote host is missing updates announced in advisory GLSA 200404-09.
Solution
Heimdal users should upgrade to version 0.6.1 or later: # emerge sync # emerge -pv '>=app-crypt/heimdal-0.6.1' # emerge '>=app-crypt/heimdal-0.6.1' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200404-09 http://bugs.gentoo.org/show_bug.cgi?id=46590
Insight
Heimdal contains cross-realm vulnerability allowing someone with control over a realm to impersonate anyone in the cross-realm trust path.