[28594] in Kerberos
krb5-1.6.3 is released
daemon@ATHENA.MIT.EDU (Tom Yu)
Mon Oct 22 20:20:21 2007
To: kerberos-announce@mit.edu
From: Tom Yu <tlyu@mit.edu>
Date: Mon, 22 Oct 2007 20:13:09 -0400
Message-ID: <ldvmyuad6y2.fsf@cathode-dark-space.mit.edu>
MIME-Version: 1.0
Reply-To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.6.3. Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.
RETRIEVING KERBEROS 5 RELEASE 1.6.3
===================================
You may retrieve the Kerberos 5 Release 1.6.3 source from the
following URL:
http://web.mit.edu/kerberos/dist/
The homepage for the krb5-1.6.3 release is:
http://web.mit.edu/kerberos/krb5-1.6/
Further information about Kerberos 5 may be found at the following
URL:
http://web.mit.edu/kerberos/
MAJOR CHANGES
=============
Major changes in 1.6.3 include:
* fix CVE-2007-3999, CVE-2007-4743 svc_auth_gss.c buffer overflow
* fix CVE-2007-4000 modify_policy vulnerability
The above are two kadmind vulnerabilities described in
MITKRB5-SA-2007-006. CVE-2007-3999 is actually a vulnerability in the
RPC library.
* Add PKINIT support
At this point, PKINIT support should be considered to be ALPHA
code. We would greatly appreciate testing and feedback of PKINIT
support.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (SunOS)
iQCVAwUBRx08mKbDgE/zdoE9AQJ8SAQApC2tOwb3UX1AXIHzCrURWltJispbT86C
a0WKlUZGmd3I+fgtRZ+eXpUjP4gOO+j+9baF3WccpHKUJUdUWCHhXSrRo3Mi797O
mNoyR40Z7dUC9vNUccLq99yxhyIaHIGO8CAI32xbTClGJj6d6A9BbllZK0EZb+Ld
3EUGQTGnzlc=
=0MGJ
-----END PGP SIGNATURE-----
_______________________________________________
kerberos-announce mailing list
kerberos-announce@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos-announce
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
