Everhart,Glenn From: Tom Yu [tlyu@MIT.EDU] Sent: Tuesday, February 17, 1998 10:51 PM To: kerberos-announce@MIT.EDU; kerberos@MIT.EDU Subject: MIT Kerberos V5 R1.0.5 is released The MIT Kerberos Team is proud to announce the availability of MIT Kerberos V5 Release 1.0.5. This release is a bug-fix release only; there are no feature enhancements over the 1.0.4 release. The following bugs were fixed: * A buffer size problem in klogind that was causing some redisplay problems under Irix has been fixed. [krb5-appl/527] * v4rcp no longer explicitly refers to sys_errlist. * Buffer overruns have been repaired in ftpd. * ftpd now no longer has a name collision with the native log_wtmp() function on some platforms. * A buffer overrun in telnetd has been fixed. * ksu no longer allows the use of an expired cached ticket. [krb5-clients/545] * The KDC now checks the length of incoming krb4 packets to avoid overruns. * The KDC actually returns a valid error packet in cases where it had failed to in the past, which could cause coredumps. * A logic bug in the gssapi library that caused krb5_gss_wrap_size_limit() to return an incorrect size has been fixed. * The gssapi library now caches its rcache, preventing a file descriptor leak. [krb5-libs/370] * Memory leaks, freeing of freed memory, and failure to check the return values of memory-allocating functions have been repaired in the library. [krb5-libs/518] * The "errno" member a db internal structure has been renamed to avoid conflicting with a macro definition of "errno" in glibc. * The profile parser has been vastly improved to strip trailing whitespace and provide a real quoting mechanism. * A goof in the previous fencepost error fix to the pty library has been fixed. Getting Kerberos V5 1.0.5 ========================= The simplest way to get the new 1.0.5 release is via the Web. Use the following URL: http://web.mit.edu/network/kerberos-form.html Alternatively, you may retrieve the release using FTP: FTP to athena-dist.mit.edu, in /pub/kerberos. Get the file README.KRB5-1.0.5. It will contain instructions on how to obtain the 1.0.5 release. ---------- Tom Yu MIT Information Systems/Kerberos Development Team