-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The MIT Kerberos Team announces the availability of MIT Kerberos 5
Release 1.5.3. This is primarily a security update release. Please
see below for a list of some major changes included, or consult the
README file in the source tree for a more detailed list of significant
changes.

RETRIEVING KERBEROS 5 RELEASE 1.5.3
===================================

You may retrieve the Kerberos 5 Release 1.5.3 source from the
following URL:

http://web.mit.edu/kerberos/dist/

The homepage for the krb5-1.5.3 release is:

http://web.mit.edu/kerberos/krb5-1.5/

Further information about Kerberos 5 may be found at the following
URL:

http://web.mit.edu/kerberos/

MAJOR CHANGES
=============

* Fix MITKRB5-SA-2007-001: telnetd allows login as arbitrary user
[CVE-2007-0956, VU#220816]

* Fix MITKRB5-SA-2007-002: buffer overflow in krb5_klog_syslog
[CVE-2007-0957, VU#704024]

* Fix MITKRB5-SA-2007-003: double-free in kadmind - the RPC library
could perform a double-free due to a GSS-API library bug
[CVE-2007-1216, VU#419344]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (SunOS)

iQCVAwUBRif19KbDgE/zdoE9AQKF2AQAvO8ruRbi3hzPrHJoqOoJ3q8UDQV8BADw
hJZr57fFSELmEhDldK6vW7NF/pvRRh/VOgysb+fMI5m/s6usmtCxRCWRDAuLatkY
bEC8B+W4eJqtaKRU2WmqjchJ/+/hIB0Kiok2axv+0wagrfAXfmGNvuvFyCyKcxKu
PBNXUGnmG94=
=QI9d
-----END PGP SIGNATURE-----
_______________________________________________
kerberos-announce mailing list
kerberos-announce@mit.edu
https://mailman.mit.edu/mailman/list...beros-announce
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos