Heimdal 0.6.1 + 0.5.3

--=-=-=
Content-Transfer-Encoding: quoted-printable


This double release of Heimdal 0.6.1 and 0.5.3 can now be found at the
usual place:
  ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.6.1.tar.gz
and
  ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.5.3.tar.gz
respectively.

The main reason for this release is a vulnerability in the cross-realm
trust handling in the KDC. This allows an administrator of a realm you
share keys with to impersonate anyone in your realm. If you are
sharing keys with anyone, we strongly advise you to upgrade as soon as
possible. Heimdal 0.6.1 also includes a bunch of other changes, while
0.5.3 only includes security fixes.

See also http://www.pdc.kth.se/heimdal/advisory/2004-04-01/

Changes in release 0.6.1

 * Fixed ARCFOUR suppport

 * Fixed cross realm vulnerability

 * kdc: fix denial of service attack

 * kdc: stop clients from renewing tickets into the future

 * bug fixes
=09
Drive carefully.

Assar, Jacques, Johan, and Love

--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (NetBSD)

iQCVAwUAQGxIq98behCPDmhFAQHlwgP/UADh9NlpPro3uI02Ppr1Q+7yQA25+2Yt
ep+viEqi+72vS9fN6nC/e5wLAT7IuiQApEZiUt8gxELOyG44SfGmEMZaq+9kYkhx
adEEkpwkG/kkpz7xpw0R2OZOZkm9JLtWOyhGYI3Fdd0vFotopkP3V+jzdQXNZd6q
PEbQaAqVd8k=
=uMqa
-----END PGP SIGNATURE-----
--=-=-=--