krb5-1.4.2-beta1 is available

Tom Yu tlyu at MIT.EDU
Mon Jul 25 19:25:14 EDT 2005


-----BEGIN PGP SIGNED MESSAGE-----

MIT krb5-1.4.2-beta1 is now available for download from

         http://web.mit.edu/kerberos/dist/

The main MIT Kerberos web page is

         http://web.mit.edu/kerberos/

Please send comments to the krbdev list.  We plan to make the final
release of krb5-1.4.2 within about two weeks.  The following is a
partial list of major changes.  For a more complete list of changes,
please consult the README file contained in the source distribution.

Major changes since 1.4.1:
- --------------------------

* Fix [MITKRB5-SA-2005-002] KDC double-free and heap overflow.  Thanks
  to Daniel Wachdorf for reporting these vulnerabilities.

* Fix [MITKRB5-SA-2005-003] krb5_recvauth() double-free.  Thanks to
  Magnus Hagander for reporting this vulnerability.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (SunOS)

iQCVAwUBQuV03abDgE/zdoE9AQFc8gQAkMAMxomQoacukAylWQgqoDZFIUKx1Uv1
g/misFcbnExXbsruoUCvNQNkJLO4GypKP1KaCzhgThClJuiw7aoJsf81h8WXxBOP
aH6uNUg7dW5+DyzEEXY78uM4oISgspIUQZOgeulZrZ4qWxxwgSF59DNtRiAWuGou
JTmv9opAhbc=
=4Suf
-----END PGP SIGNATURE-----


More information about the krbdev mailing list