This package contains a back ported version of the patch to resolve the 
issue.

Pat

On 10/29/2015 02:04 PM, Sean Murray wrote:
> Hi Pat
>
> The openafs mailling list says the openafs release fixing
> those CVE's is v 1.6.15.
> The packages listed in the errata state 1.6.14. SL6/7
>
> Do the SL packages not track the openafs release numbers ?
>
> Thanks
> Sean

-- 
Pat Riehecky
Scientific Linux developer

Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org