Cyber ·
Advisory USN-9068-1: permissive ACLs on the Debian-LAN Kerberos server
Security notice about overly permissive ACLs on the Debian-LAN Kerberos administration server, which could let an authenticated user change other people's credentials.
Advisory USN-9068-1 describes overly permissive ACLs on the Debian-LAN Kerberos administration server. According to the text, an authenticated user could possibly exploit the issue to change other users' credentials, leading to privilege escalation. The finding is credited to Wolfgang Schweer. The content was published in the Ubuntu Security feed on 12 November 2026.
The text is an automatic translation of the original notice, so check the official Ubuntu Security page to confirm terms, affected versions and fixes. The available material does not state which versions are affected or which fix was applied, and it gives no further technical details.
Relevance for Rota Nacional: this is an infrastructure security notice, not a platform feature. Rota does not patch third-party authentication servers. If you use AI to study this material, do not paste keys, passwords, Kerberos configuration files or credentials into the prompt. Rota's personal data detection covers CPF, CNPJ, e-mail, phone numbers and person names, not technical secrets, so do not assume that protection applies to credentials.