OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer.Referenceshttps://openafs.org/pages/security/OPENAFS-SA-2019-002.txthttps://lists.debian.org/debian-lts-announce/2019/11/msg00002.html