pam_krb5 bug fix update

An updated pam_krb5 package is now available.

The pam_krb5 package contains a pluggable authentication module which
allows PAM-aware applications to use Kerberos 5 to verify a user's password
and to obtain and manage Kerberos credentials associated with a user
session.

This update applies the following fixes:

* When changing a user's password, the module did not inform the user if
the password server signaled that an error had occurred (in most cases,
that it denied the request). This issue is addressed by this update.

* A number of memory leaks in the pam_krb5 module have been fixed.

Users are advised to upgrade to this updated package, which applies these
fixes.

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

191231 - pam_krb5 does not report KDC password rejection

account, memory, password, preauth