update: mit-krb5

[dongsupark]

Name: mit-krb5 CVEs: CVE-2024-26461, CVE-2024-26462, CVE-2024-37370, CVE-2024-37371

CVSSs: n/a, n/a, n/a, n/a Action Needed: update to 1.21.3

Summary:

• CVE-2024-26461: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
  • https://bugzilla.redhat.com/show_bug.cgi?id=2266740
• CVE-2024-26462: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
  • https://bugzilla.redhat.com/show_bug.cgi?id=2266742
• CVE-2024-37370: vulnerabilities in GSS message token handling
• CVE-2024-37371: vulnerabilities in GSS message token handling

refmap.gentoo: https://bugs.gentoo.org/934994

[sayanchowdhury]

Added CVE-2024-37370, CVE-2024-37371