title: Red Hat Security Advisory: krb5 security update
description: krb5: gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001) krb5: NULL pointer dereference when using a ticket policy name as a password policy name krb5: unauthenticated denial of service in recvauth_common() and others krb5: kadmind doubly frees partial deserialization results (MITKRB5-SA-2015-001) krb5: kadmind incorrectly validates server principal name (MITKRB5-SA-2015-001)
cpes: cpe:/o:redhat:enterprise_linux:6::client cpe:/o:redhat:enterprise_linux:6::computenode cpe:/o:redhat:enterprise_linux:6::server cpe:/o:redhat:enterprise_linux:6::workstation