CVS-changelog-for-Kerberos-V5
[31584] ghudson@mit.edu krb5 commit [krb5-1.22]: Free small client memory leak on OTP failure
[31585] ghudson@mit.edu krb5 commit: Avoid prep_questions calls after preauth failures
[31586] ghudson@mit.edu krb5 commit: Fix krb5_get_init_creds_password() doc typo
[31587] ghudson@mit.edu krb5 commit: Validate lengths when deserializing profiles
[31588] ghudson@mit.edu krb5 commit: Fix two KDB data validation issues
[31589] ghudson@mit.edu krb5 commit: Improve libdb2 data validation
[31590] ghudson@mit.edu krb5 commit: Skip expired keys when iterating a KEYRING ccache
[31591] ghudson@mit.edu krb5 commit: Pass through null deleg_cred from SPNEGO to mech
[31592] ghudson@mit.edu krb5 commit: Fix leaks on error in PKINIT signed-data creation
[31593] ghudson@mit.edu krb5 commit: Correctly abort parse on invalid JSON array
[31594] ghudson@mit.edu krb5 commit: Fix memory leak in mpool_get() error paths
[31595] ghudson@mit.edu krb5 commit: Check reply length before V4 reply check
[31596] ghudson@mit.edu krb5 commit: Fix hex key input handling in ktutil addent
[31597] ghudson@mit.edu krb5 commit: Fix minor ksu memory leak
[31598] ghudson@mit.edu krb5 commit: Prevent unsigned integer overflow in IAKERB
[31599] ghudson@mit.edu krb5 commit: Terminate HTTPS read buffer when allocating it
[31600] ghudson@mit.edu krb5 commit: Fix use-after-free of LDAP handle after rebind
[31601] ghudson@mit.edu krb5 commit: Avoid the macOS API ccache in forked children
[31602] ghudson@mit.edu krb5 commit: Change abort to error when encoding DB2 entry
[31603] ghudson@mit.edu krb5 commit: Shut down kpropd gracefully when in iprop mode
[31604] ghudson@mit.edu krb5 commit: Detect iprop update of nonexistent principal