HDP 2.3 provides Knox 0.6.0 and the following Apache patches:
BUG FIXES
KNOX-476 implementation for X-Forwarded-* headers support and population
KNOX-546 Consuming intermediate response during Kerberos request dispatching
KNOX-550 reverting back to original hive Kerberos dispatch behavior
KNOX-559 renaming service definition files
IMPROVEMENTS