Ubuntu Security Notice 4314-1 - Russ Allbery discovered that pam-krb5 incorrectly handled some responses. An attacker could possibly use this issue to execute arbitrary code.
11bb013ff4f20aae6a8c81e51da0571ef1b7dd55f3e1c77085ed917a6ddd7f4b
Debian Linux Security Advisory 4648-1 - Russ Allbery discovered a buffer overflow in the PAM module for MIT Kerberos, which could result in denial of service or potentially the execution of arbitrary code.
c5eae23da915c5e658fb96e20fa877eb3a12e3585e54b30300f65c17b3b80b42