Patch for CVE-2007-5971, pulled from SVN per #415351. diff -up src/lib/gssapi/krb5/k5sealv3.c src/lib/gssapi/krb5/k5sealv3.c --- src/lib/gssapi/krb5/k5sealv3.c 2008-03-04 16:22:29.000000000 -0500 +++ src/lib/gssapi/krb5/k5sealv3.c 2008-03-04 16:22:22.000000000 -0500 @@ -248,7 +248,6 @@ gss_krb5int_make_seal_token_v3 (krb5_con plain.data = 0; if (err) { zap(outbuf,bufsize); - free(outbuf); goto error; } if (sum.length != ctx->cksum_size)