c74e97f * Wed Feb 4 2015 Roland Mainz <rmainz@redhat.com> - 1.13-8

Authored and Committed by Roland Mainz 9 years ago
    * Wed Feb 4 2015 Roland Mainz <rmainz@redhat.com> - 1.13-8
    - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
      incorrectly frees context (MITKRB5-SA-2015-001)"
    - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
      deserialization results (MITKRB5-SA-2015-001)"
    - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
      validates server principal name (MITKRB5-SA-2015-001)"
    - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
      leak uninitialized bytes (MITKRB5-SA-2015-001)"
    
        
file modified
+13 -1