From 6a7c1f4e5dad9e748fde9cebfb054a3c8971c836 Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Mon, 6 Mar 2023 12:24:27 +0100
Subject: [PATCH] gssapi: Release output_token (GHSL-2023-037)

Thanks Phil Turnbull from GitHub

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Norbert Pocs <npocs@redhat.com>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---
 src/gssapi.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/gssapi.c b/src/gssapi.c
index ffa106ef..7a9217c5 100644
--- a/src/gssapi.c
+++ b/src/gssapi.c
@@ -900,6 +900,8 @@ SSH_PACKET_CALLBACK(ssh_packet_userauth_gssapi_response){
         ssh_packet_send(session);
         session->auth.state = SSH_AUTH_STATE_GSSAPI_TOKEN;
     }
+
+    gss_release_buffer(&min_stat, &output_token);
     return SSH_PACKET_USED;
 
 error: