krb5-1.6.3 is released

[Tom Yu]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.6.3.  Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.

RETRIEVING KERBEROS 5 RELEASE 1.6.3
===================================

You may retrieve the Kerberos 5 Release 1.6.3 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.6.3 release is:

        http://web.mit.edu/kerberos/krb5-1.6/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

MAJOR CHANGES
=============

Major changes in 1.6.3 include:

    * fix CVE-2007-3999, CVE-2007-4743 svc_auth_gss.c buffer overflow
    * fix CVE-2007-4000 modify_policy vulnerability 

The above are two kadmind vulnerabilities described in
MITKRB5-SA-2007-006. CVE-2007-3999 is actually a vulnerability in the
RPC library.

    * Add PKINIT support 

At this point, PKINIT support should be considered to be ALPHA
code. We would greatly appreciate testing and feedback of PKINIT
support.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (SunOS)

iQCVAwUBRx08mKbDgE/zdoE9AQJ8SAQApC2tOwb3UX1AXIHzCrURWltJispbT86C
a0WKlUZGmd3I+fgtRZ+eXpUjP4gOO+j+9baF3WccpHKUJUdUWCHhXSrRo3Mi797O
mNoyR40Z7dUC9vNUccLq99yxhyIaHIGO8CAI32xbTClGJj6d6A9BbllZK0EZb+Ld
3EUGQTGnzlc=
=0MGJ
-----END PGP SIGNATURE-----