- Kerberos Version 5, Release 1.3.4
+ Kerberos Version 5, Release 1.3.5
Release Notes
The MIT Kerberos Team
---------------------------------
The source distribution of Kerberos 5 comes in a gzipped tarfile,
-krb5-1.3.4.tar.gz. Instructions on how to extract the entire
+krb5-1.3.5.tar.gz. Instructions on how to extract the entire
distribution follow.
If you have the GNU tar program and gzip installed, you can simply do:
- gtar zxpf krb5-1.3.4.tar.gz
+ gtar zxpf krb5-1.3.5.tar.gz
If you don't have GNU tar, you will need to get the FSF gzip
distribution and use gzcat:
- gzcat krb5-1.3.4.tar.gz | tar xpf -
+ gzcat krb5-1.3.5.tar.gz | tar xpf -
-Both of these methods will extract the sources into krb5-1.3.4/src and
-the documentation into krb5-1.3.4/doc.
+Both of these methods will extract the sources into krb5-1.3.5/src and
+the documentation into krb5-1.3.5/doc.
Building and Installing Kerberos 5
----------------------------------
and logging in as "guest" with password "guest".
+Major changes in 1.3.5
+----------------------
+
+* [2682] Fix ftpd hang caused by empty PASS command.
+
+* [2686] Fix double-free errors. [MITKRB5-SA-2004-002]
+
+* [2687] Fix denial-of-service vulnerability in ASN.1
+ decoder. [MITKRB5-SA-2004-003]
+
+Minor changes in 1.3.5
+----------------------
+
+* [2016] Fix build problem in fake-addrinfo.h by including stdio.h so
+ that sprintf() gets prototyped where needed on some platforms.
+
+* [2353] Add missing prototype for gss_krb5int_unseal_token_v3().
+
+* [2607] Fix enctype filtering and some memory leaks in MSLSA ccache.
+
+* [2608] Remove incorrect localization in MSLSA ccache which was
+ resulting in crashes.
+
+* [2619] Update MSLSA ccache to support new LSA flag.
+
+* [2623] Update MSLSA ccache to reflect differences in registry layout
+ between Windows client and server OSes.
+
+* [2624] Do not ignore the cache when obtaining TGTs from the MSLSA if
+ the requested enctype is the NULL enctype.
+
+* [2626] Add Terminal Server compatibility for KfW.
+
+* [2627] Fix cc_mslsa thread safety.
+
+* [2634] Remove the caching of the ccache principal name from
+ krb5_context.
+
+* [2643] Fix another problem with krb4 ticket backdating.
+
+* [2675] Add new WiX-based MSI installer for KfW.
+
+* [2677] Add "-c ccache" option to kvno; use consistent memory
+ management to avoid crashes on Windows.
+
+* [2689] Misc MSLSA ccache fixes.
+
+* [2691] Improve documentation of ANSI C requirement.
+
Major changes in 1.3.4
----------------------