- remove obsolete patch for CVE-2009-0845
    - add patches for read overflow and null pointer dereference in the
        implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
    - add patch for attempt to free uninitialized pointer in libkrb5
        (CVE-2009-0846)
    - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)