[27685] in Kerberos
krb5-1.5.3 is released
daemon@ATHENA.MIT.EDU (Tom Yu)
Thu Apr 19 19:13:10 2007
To: kerberos-announce@mit.edu
From: Tom Yu <tlyu@mit.edu>
Date: Thu, 19 Apr 2007 19:06:22 -0400
Message-ID: <ldv3b2wnevl.fsf@cathode-dark-space.mit.edu>
MIME-Version: 1.0
Reply-To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.5.3. This is primarily a security update release. Please
see below for a list of some major changes included, or consult the
README file in the source tree for a more detailed list of significant
changes.
RETRIEVING KERBEROS 5 RELEASE 1.5.3
===================================
You may retrieve the Kerberos 5 Release 1.5.3 source from the
following URL:
http://web.mit.edu/kerberos/dist/
The homepage for the krb5-1.5.3 release is:
http://web.mit.edu/kerberos/krb5-1.5/
Further information about Kerberos 5 may be found at the following
URL:
http://web.mit.edu/kerberos/
MAJOR CHANGES
=============
* Fix MITKRB5-SA-2007-001: telnetd allows login as arbitrary user
[CVE-2007-0956, VU#220816]
* Fix MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
[CVE-2007-0957, VU#704024]
* Fix MITKRB5-SA-2007-003: double-free in kadmind - the RPC library
could perform a double-free due to a GSS-API library bug
[CVE-2007-1216, VU#419344]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (SunOS)
iQCVAwUBRif19KbDgE/zdoE9AQKF2AQAvO8ruRbi3hzPrHJoqOoJ3q8UDQV8BADw
hJZr57fFSELmEhDldK6vW7NF/pvRRh/VOgysb+fMI5m/s6usmtCxRCWRDAuLatkY
bEC8B+W4eJqtaKRU2WmqjchJ/+/hIB0Kiok2axv+0wagrfAXfmGNvuvFyCyKcxKu
PBNXUGnmG94=
=QI9d
-----END PGP SIGNATURE-----
_______________________________________________
kerberos-announce mailing list
kerberos-announce@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos-announce
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
