[Deepin Integration]~[v25-Release] fix(python-kdcproxy): CVE-2025-59088, CVE-2025-59089 by deepin-ci-robot@deepin-community/python-kdcproxy by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
python-kdcproxy	1.0.0-1deepin2

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-3945/testing/ ./

Changelog | 更新信息

python-kdcproxy (1.0.0-1deepin2) unstable; urgency=medium

• Fix CVE-2025-59088: Unauthenticated SSRF via Realm-Controlled DNS.
  Allowing DNS discovery for any requested realm created a SSRF
  vulnerability. This update: - Makes use_dns apply only to realms
  declared in configuration - Adds wildcard support for realm
  section names - Adds dns_realm_discovery parameter for unsafe
  behavior . Upstream:
  latchset/kdcproxy@1773f28eeea72ec6efcd433d
  3b66595c44d1253f

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#3945