krb5-1.6.1 is released

[Tom Yu]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.6.1.  Please see below for a list of some major changes
included, or consult the README file in the source tree for a more
detailed list of significant changes.

RETRIEVING KERBEROS 5 RELEASE 1.6.1     
===================================

You may retrieve the Kerberos 5 Release 1.6.1 source from the
following URL:

        http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.6.1 release is:

        http://web.mit.edu/kerberos/krb5-1.6/

Further information about Kerberos 5 may be found at the following
URL:

        http://web.mit.edu/kerberos/

MAJOR CHANGES
=============

* Fix MITKRB5-SA-2007-001: telnetd allows login as arbitrary user
  [CVE-2007-0956, VU#220816]

* Fix MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
  [CVE-2007-0957, VU#704024]

* Fix MITKRB5-SA-2007-003: double-free in kadmind - the RPC library
  could perform a double-free due to a GSS-API library bug
  [CVE-2007-1216, VU#419344]

* fix crash creating db2 database in non-existent directory

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (SunOS)

iQCVAwUBRilX/abDgE/zdoE9AQKnlAQApp011mLdZDL4xxckyi3gDhFnb4Yjj0b8
xXowsizM7Qd3P0xih2orzl5efVBlmNLr//Ol977Xmpk0PXuEGv/XtPe7vy8+gNFk
LoVFTgGCBkwn4eHuLxZ3+j0ZtoS4ydKVESu/dv2s8sAUhl/vBptL7eLB5pXjEtPJ
MWPqZb1Pldc=
=OQEt
-----END PGP SIGNATURE-----

_______________________________________________
kerberos-announce mailing list
kerberos-announce at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos-announce