Red Hat Security Advisory: krb5 security, bug fix and enhancement update

CVE-2014-4341 — krb5: denial of service flaws when handling padding length longer than the plaintext CVE-2014-4342 — krb5: denial of service flaws when handling RFC 1964 tokens CVE-2014-4343 — krb5: double-free flaw in SPNEGO initiators CVE-2014-4344 — krb5: NULL pointer dereference flaw in SPNEGO acceptor for continuation tokens CVE-2014-4345 — krb5: buffer overrun in kadmind with LDAP backend (MITKRB5-SA-2014-001) CVE-2014-5352 — krb5: gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001) CVE-2014-5353 — krb5: NULL pointer dereference when using a ticket policy name as a password policy name CVE-2014-9421 — krb5: kadmind doubly frees partial deserialization results (MITKRB5-SA-2015-001) CVE-2014-9422 — krb5: kadmind incorrectly validates server principal name (MITKRB5-SA-2015-001) CVE-2014-9423 — krb5: libgssrpc server applications leak uninitialized bytes (MITKRB5-SA-2015-001)