krb5-1.5.3 is released

[Tom Yu]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.5.3.  This is primarily a security update release.  Please
see below for a list of some major changes included, or consult the
README file in the source tree for a more detailed list of significant
changes.

RETRIEVING KERBEROS 5 RELEASE 1.5.3
===================================

You may retrieve the Kerberos 5 Release 1.5.3 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.5.3 release is:

        http://web.mit.edu/kerberos/krb5-1.5/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

MAJOR CHANGES
=============

* Fix MITKRB5-SA-2007-001: telnetd allows login as arbitrary user
  [CVE-2007-0956, VU#220816]

* Fix MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
  [CVE-2007-0957, VU#704024]

* Fix MITKRB5-SA-2007-003: double-free in kadmind - the RPC library
  could perform a double-free due to a GSS-API library bug
  [CVE-2007-1216, VU#419344]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (SunOS)

iQCVAwUBRif19KbDgE/zdoE9AQKF2AQAvO8ruRbi3hzPrHJoqOoJ3q8UDQV8BADw
hJZr57fFSELmEhDldK6vW7NF/pvRRh/VOgysb+fMI5m/s6usmtCxRCWRDAuLatkY
bEC8B+W4eJqtaKRU2WmqjchJ/+/hIB0Kiok2axv+0wagrfAXfmGNvuvFyCyKcxKu
PBNXUGnmG94=
=QI9d
-----END PGP SIGNATURE-----
_______________________________________________
kerberos-announce mailing list
kerberos-announce at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos-announce