Patch for CVE-2007-5901, pulled from SVN per #415321. diff -up src/lib/gssapi/mechglue/g_initialize.c src/lib/gssapi/mechglue/g_initialize.c --- src/lib/gssapi/mechglue/g_initialize.c 2008-03-04 16:29:13.000000000 -0500 +++ src/lib/gssapi/mechglue/g_initialize.c 2008-03-04 16:29:16.000000000 -0500 @@ -210,7 +210,7 @@ gss_OID_set *mechSet; free((*mechSet)->elements[j].elements); } free((*mechSet)->elements); - free(mechSet); + free(*mechSet); *mechSet = NULL; return (GSS_S_FAILURE); }