reopen 702633 thanksThe changelog entry for krb5 1.10.1+dfsg-4+nmu1 mentions the CVE number 2013-1016; this vulnerability is actually cve-2012-1016 (note 2012 instead of 2013).
I don't see a debian-security-announce mail yet, so hopefully the typo will not be promulgated there.
-Ben Kaduk -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org