File _patchinfo of Package patchinfo.17799

<patchinfo incident="17799">
  <issue tracker="cve" id="2022-42898"/>
  <issue tracker="cve" id="2021-3671"/>
  <issue tracker="cve" id="2022-3437"/>
  <issue tracker="cve" id="2022-41916"/>
  <issue tracker="cve" id="2021-44758"/>
  <issue tracker="cve" id="2019-14870"/>
  <issue tracker="cve" id="2022-44640"/>
  <packager>enzokiel</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for libheimdal</summary>
  <description>This update for libheimdal fixes the following issues:

Update to version 7.8.0

- CVE-2022-42898 PAC parse integer overflows
- CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour
- CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array
- CVE-2021-44758 A null pointer de-reference DoS in SPNEGO acceptors
- CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
- CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec
- CVE-2019-14870: Validate client attributes in protocol-transition
</description>
</patchinfo>