- add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
        when v4 compatibility is enabled on the KDC (CVE-2008-0062,
        CVE-2008-0063, #432620, #432621)
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
        high-numbered descriptors are used (CVE-2008-0947, #433596)
    - add backport bug fix for an attempt to free non-heap memory in
        libgssapi_krb5 (CVE-2007-5901, #415321)
    - add backport bug fix for a double-free in out-of-memory situations in
        libgssapi_krb5 (CVE-2007-5971, #415351)