-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 29 Sep 2015 14:59:08 +0200 Source: openssh Binary: openssh-client openssh-server ssh ssh-krb5 ssh-askpass-gnome openssh-client-udeb openssh-server-udeb Architecture: source amd64 all Version: 1:5.5p1-6+squeeze7 Distribution: squeeze-lts Urgency: medium Maintainer: Debian OpenSSH Maintainers <debian-ssh@lists.debian.org> Changed-By: Mike Gabriel <sunweaver@debian.org> Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) ssh - secure shell client and server (metapackage) ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad ssh-krb5 - secure shell client and server (transitional package) Changes: openssh (1:5.5p1-6+squeeze7) squeeze-lts; urgency=medium . * Non-maintainer upload by the Debain LTS Team: SECURITY REGRESSION, random keyboard-interactive auth failures because of uninitialized struct field. * debian/patches: + Add CVE-2015-5600-2.patch. Properly initialize field in auth2-chall.c. Checksums-Sha1: a4c95e73a7201db07e3f2a2a3eb72596b27ec8b3 2484 openssh_5.5p1-6+squeeze7.dsc aaa6042b72df5458c28134cdec859689add9462c 241475 openssh_5.5p1-6+squeeze7.debian.tar.gz cee321ba3ce3a18c0841c68cd3a066e95042a3af 937490 openssh-client_5.5p1-6+squeeze7_amd64.deb 45bd7215bc23b3979a3619ee8df1caa6c4badbbc 318982 openssh-server_5.5p1-6+squeeze7_amd64.deb ce3d608a742951a2340d38b4428ba177f38886ea 1242 ssh_5.5p1-6+squeeze7_all.deb e16b703ef356d03ee8d314c85f5706e37113e85d 96240 ssh-krb5_5.5p1-6+squeeze7_all.deb d1d7e3fe965938ef6ac8d22906a9801b6768dfc9 104488 ssh-askpass-gnome_5.5p1-6+squeeze7_amd64.deb fe92d53cae2e27b93e318bf34480bcd8a9f22af0 216162 openssh-client-udeb_5.5p1-6+squeeze7_amd64.udeb 95b995beb4169baf2124579aad91eb8004f50d4e 244366 openssh-server-udeb_5.5p1-6+squeeze7_amd64.udeb Checksums-Sha256: 0c4d9d3ad0d8733fd797c31786f7878ea8ab005c4b2448039d516b8743cd6950 2484 openssh_5.5p1-6+squeeze7.dsc 47a5c5b37c0910a57afb64959f976d823a0e4bedd98999fa008e78b451bc3bd1 241475 openssh_5.5p1-6+squeeze7.debian.tar.gz 54b32f3ec3b9050385236b2621657ad93b3cc70da71d7b40cc72f2b28bf8fc87 937490 openssh-client_5.5p1-6+squeeze7_amd64.deb e49f779e51f2528cf76c676156bfacec11759fd6671329f8bcc1944caa93dd29 318982 openssh-server_5.5p1-6+squeeze7_amd64.deb ed85f2836cdeb5e6a78fe4ed261c84eada80f5e632351d90b6b01ee6bcee43c1 1242 ssh_5.5p1-6+squeeze7_all.deb ee370d01543a1b4ea0840cb14e54943c81f47cda754c3343fcb5a044da2d453d 96240 ssh-krb5_5.5p1-6+squeeze7_all.deb 508eb211613247ef917de5f31c0eaca82479cf655dbd74b91f7b46a53a110163 104488 ssh-askpass-gnome_5.5p1-6+squeeze7_amd64.deb ab4ecd5c606b1081ff7e5404bc61b2dd41b7ede4482945f303036c6c214d4aeb 216162 openssh-client-udeb_5.5p1-6+squeeze7_amd64.udeb a1e929da4aed347efa13d0258ec2f137bd9b2e191bb95bc199e12cba7495a69e 244366 openssh-server-udeb_5.5p1-6+squeeze7_amd64.udeb Files: d2e9adbea4e94ed7e9290789df467741 2484 net standard openssh_5.5p1-6+squeeze7.dsc 7a208d79819253ec8685c32429760845 241475 net standard openssh_5.5p1-6+squeeze7.debian.tar.gz 1c4dbe341bf9b7b8b904e126ecd3ea2c 937490 net standard openssh-client_5.5p1-6+squeeze7_amd64.deb 34678e78e4d9d7f3592e75ab89879cd2 318982 net optional openssh-server_5.5p1-6+squeeze7_amd64.deb 8092a2a722a3424afa09845c24e7fbd0 1242 net extra ssh_5.5p1-6+squeeze7_all.deb 57554a316bc489d0a3d4ade9ab32d9c4 96240 net extra ssh-krb5_5.5p1-6+squeeze7_all.deb 335ce78ac24cc05eb6371a7e17e276a1 104488 gnome optional ssh-askpass-gnome_5.5p1-6+squeeze7_amd64.deb 40661787d4194b7d08c90757813a4837 216162 debian-installer optional openssh-client-udeb_5.5p1-6+squeeze7_amd64.udeb c19aa169ef6d2954d7b3025e36ed9e46 244366 debian-installer optional openssh-server-udeb_5.5p1-6+squeeze7_amd64.udeb Package-Type: udeb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWCpiSAAoJEJr0azAldxsxdCMP/1S6HRGsw5KTNek1oMQ7XBeo Kdv5hv3bcrZxzyPXMP9vy7P1hRPieOlA6cORITd8+U6QeiTFzihnHh77iolHRNKg K2L59iU2rNT1sMLUMHHda+ZWh9K605lmIZQDqSTGFEk7JCry9Pq2BfobNXBI8ZM+ Dkaf9/pxCz/uRvWlsbcQ7fZZnCqyOGpm4/EaPsH6lF/VuW6x6p+seEwfbM81w7J0 PDEyv37CK7Oq3otURXWG/TJLvieTQhz/roSwDepqT6iPwHagSLhnkCcdABMksFso V+kt8GfhVmZSLIwW/eDztgoBTMc2wylXD7zAvM/raxGuS4TmurqodWYTagtLhxMA ujJyZggBOOnPbOz2+KkzRuYa/jhRPk2anJnXTMDmbwJVDaMMmoweKswbwneA7Qjo OW5lIwK7FElEmHflsJ59NFvQD5uLfHYKLGteZyCM2nvf+GjzV/rBRe1Y0+r8Km+p cRrmYDxznzdlLE/HPvvb4HSQGP4EdgGRibbrk95oxI5g80xilaQ/TRXKe4cr49tV sFdgbEFquBUjdgm30PGuZ19j0UTJM3OGpRprG43jXa17WcBN2gmCwjzZfyqKj8zZ t2CvGH7oxa2VN704CYR7Nxxw5/Ei0U7Ts3ZUWo+NL9ZeRsw+cyKFCJJpRrff/fuT 5u8YCvjlA7Ovz9KVT+7O =sjRU -----END PGP SIGNATURE-----