Bug#803083: CVE-2015-2695 in libgssapi-krb5-2, SPNEGO context aliasing

[Salvatore Bonaccorso]

On Mon, 26 Oct 2015 14:26:44 -0400 (EDT) Benjamin Kaduk <ka...@mit.edu> wrote:
> Package: libgssapi-krb5-2
> Version: 1.8.3+dfsg-4squeeze7
> Tags: security fixed-upstream
> 
> A partially constructed GSS security context can access a pointer as the
> wrong type, generally causing a program crash.  Fixed upstream at
> https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d
> 
> -Ben
> 
>