-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Oct 2013 03:29:42 +0000 Source: dropbear Binary: dropbear Architecture: source amd64 Version: 2012.55-1.4 Distribution: unstable Urgency: high Maintainer: Gerrit Pape <pape@smarden.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: dropbear - lightweight SSH2 server and client Closes: 726019 726118 Changes: dropbear (2012.55-1.4) unstable; urgency=high . * Non-maintainer upload by the Security Team. * Fix cve-2013-4421: memory exhaustion issue (closes: #726019). * Fix timing delays that may reveal whether a user account is valid (closes: #726118). Checksums-Sha1: ecb1e37bb6b382be6f78cf4f7a48c6f3f2688059 2342 dropbear_2012.55-1.4.dsc 8082b2b7041913f32779260aefe7be665ea6b131 8468 dropbear_2012.55-1.4.diff.gz 850f42c88b6e6e46a69af03f38d46339c03823ef 141768 dropbear_2012.55-1.4_amd64.deb Checksums-Sha256: d0158ff63752b1de68413a8cfa59ab9b81db9f336f6e7d4be6c2f8f79ae9c730 2342 dropbear_2012.55-1.4.dsc 8e331db20f7faa91a245db4d6b7d7e7c1f6d57d2be873784399b455c8949bbfb 8468 dropbear_2012.55-1.4.diff.gz 2e1d1edeaaf30f2741a7c8c1ec8498e4dbd68fe400d206229a8422a0a730a8c8 141768 dropbear_2012.55-1.4_amd64.deb Files: 5c03fdc4faa9023f31cc8022371edbaf 2342 net optional dropbear_2012.55-1.4.dsc 819107e53b113fa0d032ae3f0c8c90eb 8468 net optional dropbear_2012.55-1.4.diff.gz 5676bf6aa6f58c399e88bcc915064f10 141768 net optional dropbear_2012.55-1.4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQQcBAEBCgAGBQJSXhHQAAoJELjWss0C1vRzedEf/2r2HkErckofLSeKWZzm5UZX pDBqXK/tHeG0l9oMB0rpNilhorZ7sHbaQPsbdlNHxJ9g//qJxBgpCtD6JyVfIsKZ R2fDDl8CBl8j2cD0f+T/ECIeSZB1dTeBM7dJ/ogC1hdiyx277gs61QEQ8iPwnDjE OV3Y6B16pGUrCRmIIlsqIMO2bLoXpodns4RpYYIqHv510PVWz6c8lh2uwhUZh9RR LdHXbJITElI/ZI1psTKVH8tsMpYX5KW0xjsH0roVoxpMVYrn+030ALKt26KikuwJ cUrWqcO8WF2uylBixpmunPnQtLLBX+o2VhQCiGX/bItM5Q+XIwnkOHsE+MpBYBNZ i7Cig4/93HfK61wQpzLRbdGqelo4TsnrpVr6PJVs3bJPPHLdL3VWgKygXZdeXSJs 0TU11/foTn8zBFJeN4s70HI1Tg+Fod6A1g9lD9Q6+mG7FgPLawH6jx35O+CobdYg WK97oLL7Z5TjF4JEwG2xGIvyQKsloKQuq1NlMVg5gJUjYbgVq5njDdV0fseFjgG0 IfYhpuMnq2N3JaLC2+k55qCzL4LnAiwfzAScc97ETKta+TGoBugsVHdPNV+UmM9I yAgpW8kHQf+8If+HQ4OhRUPbRkRGO955jQDLoReH4IHCx/qmM6FGT02+yGFEHqYd aGbnFNGr2pZWllDmd+ikq2wHns8JSsAQeYMYLvaQAd4ysqMJi9AK66biD/PHhyjt u2qtapgNlxcgIga+0soWZqa1qJxQwhwDrRC0kmBmz2A0aD0DTSSIxe8xL/HjUy1o b89n4f40gLgjXVgg+0opiGxVEUhLLBe9PrYlOXXDL5cXpwV0L7Go6LUofXxW9Cp0 OnlvWUHGpPDcyPlMb3Hn9mxoapDf/nJVkiWJxdsyLk+tp1ULqtYv59CWP+3gxzjy cAUcgIZsppWN+SdAsMFLTqMaco6VuIqPWnSiqqkxp2zNN35vvKtYyFxgNsOrcq2r Bn74Ud9MY/8bfb316BanX+BtN23BTpMAlVFX7bhdgW7mVgA8fViP1juFdV0G6xCN iiWzxPpLoMqUB59fzewC6m3+2xxljkTFcuuNylSEZIi3hfPSwVzRobjeWcb96hzd r7e+UXWydgH2H/q/FNi3n045pskW9XfsUk58pH2QsTrm0JVn+Y1EfKn1RFbk8Bb/ qw2RWKJlCPxtTANj924j2RPCwozsD3A5jTgtKS++FFNFdNPH8/qF+szm9AlrXsrf Vaf4wWrq/gJI+BSWd5Ti0Ln5+a4D9I/LJQwG411JaEuhLLt02R6ywLWdPkJ0rztm sHrp7K+uptDehxzbbLXFog+BPvGN3XmD+o+6CqYorHyEamb47u97krROwgq6e5M= =6uqk -----END PGP SIGNATURE-----