Change MASTER_SITES.
NB: This versioning is bogus. Unfortunately, there is no official
release of pam_krb5 yet, but it has substantially changed. I made
this release based on what is in CVS.
compat_heimdal.c:
= Stop shooting at feet when freeing a particular chunk of memory.
Found by complaints from free(), and pinpointed with MALLOC_OPTIONS=A.
pam_krb5_auth.c:
= In addition to dropping and restoring uid when delving in /tmp,
drop and restore gid.
= Explicitly set permissions on the credentials cache for good measure.
The following was
Obtained from: Sam Hartman <hartmans@mit.edu> via bugs.debian.org
support.c:
= verify_krb_v5_tgt: Do a little more to prevent KDC spoofing.
Allow for a key separate from the host key to use only for PAM.
= Be very specific about where we think the libraries are, to avoid
getting the old crusty Heimdal from the base system.
= Minimize the undefined symbols in pam_krb5.so
