Univention Corporate Server 3.2 erratum 302 (security)

Multiple vulnerabilities have been found in krb5:
* denial of service due to improper GSSAPI message validation (CVE-2014-4341)
* denial of service due to improper GSSAPI message validation (CVE-2014-4342)
* double-free in SPNEGO initiator during renegotiation (CVE-2014-4343)
* NULL dereference in SPNEGO acceptor (CVE-2014-4344)
* gss_process_context_token() incorrectly frees context (CVE-2014-5352)
Additionally the following issues not affecting UCS are fixed in the source:
* buffer overrun in kadmind with LDAP backend (CVE-2014-4345)
* kadmind doubly frees partial deserialization results (CVE-2014-9421)
* kadmind incorrectly validates server principal name (CVE-2014-9422)
* libgssrpc server applications leak uninitialized bytes (CVE-2014-9423)