HDP 2.3 provides Knox 0.6.0 and the following Apache patches:
BUG FIXES
KNOX-476 implementation for X-Forwarded-* headers support and population
KNOX-546 Consuming intermediate response during kerberos request dispatching
KNOX-550 reverting back to original hive kerberos dispatch behavior
KNOX-559 renaming service definition files
IMPROVEMENTS