Accepted dropbear 2012.55-1.4 (source amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 16 Oct 2013 03:29:42 +0000
Source: dropbear
Binary: dropbear
Architecture: source amd64
Version: 2012.55-1.4
Distribution: unstable
Urgency: high
Maintainer: Gerrit Pape <pape@smarden.org>
Changed-By: Michael Gilbert <mgilbert@debian.org>
Description:
dropbear - lightweight SSH2 server and client
Closes: 726019 726118
Changes:
dropbear (2012.55-1.4) unstable; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix cve-2013-4421: memory exhaustion issue (closes: #726019).
* Fix timing delays that may reveal whether a user account is valid
(closes: #726118).
Checksums-Sha1:
ecb1e37bb6b382be6f78cf4f7a48c6f3f2688059 2342 dropbear_2012.55-1.4.dsc
8082b2b7041913f32779260aefe7be665ea6b131 8468 dropbear_2012.55-1.4.diff.gz
850f42c88b6e6e46a69af03f38d46339c03823ef 141768 dropbear_2012.55-1.4_amd64.deb
Checksums-Sha256:
d0158ff63752b1de68413a8cfa59ab9b81db9f336f6e7d4be6c2f8f79ae9c730 2342 dropbear_2012.55-1.4.dsc
8e331db20f7faa91a245db4d6b7d7e7c1f6d57d2be873784399b455c8949bbfb 8468 dropbear_2012.55-1.4.diff.gz
2e1d1edeaaf30f2741a7c8c1ec8498e4dbd68fe400d206229a8422a0a730a8c8 141768 dropbear_2012.55-1.4_amd64.deb
Files:
5c03fdc4faa9023f31cc8022371edbaf 2342 net optional dropbear_2012.55-1.4.dsc
819107e53b113fa0d032ae3f0c8c90eb 8468 net optional dropbear_2012.55-1.4.diff.gz
5676bf6aa6f58c399e88bcc915064f10 141768 net optional dropbear_2012.55-1.4_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)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=
=6uqk
-----END PGP SIGNATURE-----
Reply to: