Accepted dropbear 2022.83-1+deb12u1~bpo11+1 (source) into bullseye-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 02 Feb 2024 23:49:12 +0100
Source: dropbear
Architecture: source
Version: 2022.83-1+deb12u1~bpo11+1
Distribution: bullseye-backports
Urgency: medium
Maintainer: Guilhem Moulin <guilhem@debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 1059001
Changes:
dropbear (2022.83-1+deb12u1~bpo11+1) bullseye-backports; urgency=medium
.
* Rebuild for bullseye-backports.
* Add d/salsa-ci.yml for Salsa CI.
.
dropbear (2022.83-1+deb12u1) bookworm; urgency=medium
.
* Fix CVE-2023-48795: (terrapin attack): The SSH transport protocol with
certain OpenSSH extensions allows remote attackers to bypass integrity
checks such that some packets are omitted (from the extension negotiation
message), and a client and server may consequently end up with a
connection for which some security features have been downgraded or
disabled, aka a Terrapin attack. (Closes: #1059001)
Checksums-Sha1:
6166a9e47d1f950fdc5db381a15f58dbb2452967 2646 dropbear_2022.83-1+deb12u1~bpo11+1.dsc
57b15a9a6f2865391f3bc3f333b65c701cdaf73f 37064 dropbear_2022.83-1+deb12u1~bpo11+1.debian.tar.xz
da4b03cc26c54535baa9704ba119cb99a26e407b 7600 dropbear_2022.83-1+deb12u1~bpo11+1_amd64.buildinfo
Checksums-Sha256:
fa8d385cf531b8e496883fea82270cdc34b3bdfedf3729f11b66008d2938b783 2646 dropbear_2022.83-1+deb12u1~bpo11+1.dsc
7ef618fb8d821bc2642294a236d4ec46c6530a2683978c03f7e46984e485ffbe 37064 dropbear_2022.83-1+deb12u1~bpo11+1.debian.tar.xz
4bf23ff2c1dbf09b5a898acb0d242049b4bc2dbc783d999c59d9476d6e2bd256 7600 dropbear_2022.83-1+deb12u1~bpo11+1_amd64.buildinfo
Files:
1800b6bf1dac8ec447b7cac51c7b25b9 2646 net optional dropbear_2022.83-1+deb12u1~bpo11+1.dsc
3888a010aec12a31a35773fef3ec38d7 37064 net optional dropbear_2022.83-1+deb12u1~bpo11+1.debian.tar.xz
8353c5171e71613f21869f711475f6d6 7600 net optional dropbear_2022.83-1+deb12u1~bpo11+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmW9crIACgkQ05pJnDwh
pVLSHw//YCcCadh5FlXt8vWLd2v/8YQhZqTmmPi8+jk11qY2M/uEuV3gTdt8zxcT
Fu705zlOTETK8k84O63CdG5782sHHY/dWYlPZEQ2/lM5hVdSaZWeBFfWexdUj6Pl
R7lLe19sTQ14vgYU4Lpr0JfCn5thuk0sxX5SNtwoCtNEsQ9goFvRFV7GBekyqikc
gYWMF7QV9r9naKi5tXtTtg3ZpotOkl63xN6S1wLt0mHmDJGIfApEHGUoPKpwgUMP
kE+bG6/t9xtLCpw7LEqSiiCz4zqzX44elVe5ScblBgzDVKpHwKgrgOW/RJSzf5CW
8WbRasdcuwf29epBUP+OoukCiFsGPMXK+1w+ZEdrwaTI+I+dVPOmktaKUohXFgbX
pMyStVST2G4bUTG9cvfDXS8XgbYkl+uFF9a6IcVVEQoQM3+1bKGayMmoNBAJvr5P
Qdf7B1stbASW6Z4SoAZ6Z8A6nWI84w3jrL+5aiMpR7l+v5rgyFxsNaD5PHCRgpcz
TGck8G6UReduKO6OU6GVrO63Zm8zDVx2ey18HLJ1dncw7+RykPsfQL+mJVkALUq9
tOVidrGPMVCv5zNKufIHKBENgUgPXGgukLTgN/NeAARu9X6ucZyIBIcyLmluNlHk
IQU3pwIYXlujTmN2jM4qIZGFl+8HBLqo/loTLk1Q9ufEv8PUph0=
=gQ2k
-----END PGP SIGNATURE-----
Reply to: