krb5-1.13.2-12.el7

Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of sending passwords over the network in unencrypted form.

Security issues fixed with this release:

CVE-2015-8629
The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in
MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does
not verify whether '\0' characters exist as expected, which allows
remote authenticated users to obtain sensitive information or cause a
denial of service (out-of-bounds read) via a crafted string.
CVE-2015-8630
The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal
functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos
5 (aka krb5) 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1
allow remote authenticated users to cause a denial of service (NULL
pointer dereference and daemon crash) by specifying KADM5_POLICY with
a NULL policy name.
CVE-2015-8631
Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in
MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow
remote authenticated users to cause a denial of service (memory
consumption) via a request specifying a NULL principal name.

Security Fix(es):