krb5 was updated to fix three security issues. Remote authenticated users could cause denial of service. These security issues were fixed: - CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name . - CVE-2014-5354: NULL pointer dereference when using keyless entries . - CVE-2014-5355: Denial of service in krb5_read_message .