--- dropbear-0.49.orig/debian/changelog +++ dropbear-0.49/debian/changelog @@ -1,8 +1,18 @@ -dropbear (0.49-0.1) unstable; urgency=low +dropbear (0.49-1) unstable; urgency=high - * New upstream release. + * new upstream release, fixes + * CVE-2007-1099: dropbear dbclient insufficient warning on hostkey + mismatch (closes: #412899). + * dbclient uses static "Password:" prompt instead of using the server's + prompt (closes: #394996). + * debian/control: Suggests: openssh-client, not ssh (closes: #405686); + Standards-Version: 3.7.2.2. + * debian/README.Debian: ssh -> openssh-server, openssh-client; remove + 'Replacing OpenSSH "sshd" with Dropbear' part, this is simply done by not + installing the openssh-server package. + * debian/README.runit: runsvstat -> sv status. - -- Matt Johnston Fri, 23 Feb 2007 00:44:00 +0900 + -- Gerrit Pape Fri, 2 Mar 2007 20:48:18 +0000 dropbear (0.48.1-1) unstable; urgency=medium --- dropbear-0.49.orig/debian/control +++ dropbear-0.49/debian/control @@ -3,12 +3,12 @@ Priority: optional Maintainer: Gerrit Pape Build-Depends: libz-dev -Standards-Version: 3.6.2.1 +Standards-Version: 3.7.2.2 Package: dropbear Architecture: any Depends: ${shlibs:Depends} -Suggests: ssh, runit +Suggests: openssh-client, runit Description: lightweight SSH2 server and client dropbear is a SSH 2 server and client designed to be small enough to be used in small memory environments, while still being functional and --- dropbear-0.49.orig/debian/dropbear.README.Debian +++ dropbear-0.49/debian/dropbear.README.Debian @@ -1,52 +1,29 @@ Dropbear for Debian ------------------- -This package will attempt to listen on port 22. If the OpenSSH -package ("ssh") is installed, the file /etc/default/dropbear -will be set up so that the server does not start by default. - -You can run Dropbear concurrently with OpenSSH 'sshd' by -modifying /etc/default/dropbear so that "NO_START" is set to -"0" and changing the port number that Dropbear runs on. Follow -the instructions in the file. - -This package suggests you install the "ssh" package. This package -provides the "ssh" client program, as well as the "/usr/bin/scp" -binary you will need to be able to retrieve files from a server -running Dropbear via SCP. - -Replacing OpenSSH "sshd" with Dropbear --------------------------------------- - -You will still want to have the "ssh" package installed, as it -provides the "ssh" and "scp" binaries. When you install this -package, it checks for existing OpenSSH host keys and if found, -converts them to the Dropbear format. - -If this appears to have worked, you should be able to change over -by following these steps: - -1. Stop the OpenSSH server - % /etc/init.d/ssh stop -2. Prevent the OpenSSH server from starting in the future - % touch /etc/ssh/sshd_not_to_be_run -3. Modify the Dropbear defaults file, set NO_START to 0 and - ensure DROPBEAR_PORT is set to 22. - % editor /etc/default/dropbear -4. Restart the Dropbear server. - % /etc/init.d/dropbear restart - -See the Dropbear homepage for more information: - http://matt.ucc.asn.au/dropbear/dropbear.html - +This package will attempt to setup the Dropbear ssh server to listen on +port 22. If the OpenSSH server package ("openssh-server") is installed, +the file /etc/default/dropbear will be set up so that the server does not +start by default. + +You can run Dropbear concurrently with OpenSSH 'sshd' by modifying +/etc/default/dropbear so that "NO_START" is set to "0", and changing the +port number that Dropbear runs on. Follow the instructions in the file. + +This package suggests you install the "openssh-client" package, which +provides the "ssh" client program, as well as the "/usr/bin/scp" binary +you will need to be able to retrieve files via SCP from a server running +Dropbear. Entropy from /dev/random ------------------------ -The dropbear binary package is configured at compile time to read -entropy from /dev/random. If /dev/random on a system blocks when -reading data from it, client logins may be delayed until the client -times out. The dropbear server writes a notice to the logs when it -sees /dev/random blocking. A workaround for such systems is to -re-compile the package with DROPBEAR_RANDOM_DEV set to /dev/urandom -in options.h. +The dropbear binary package is configured at compile time to read entropy +from /dev/random. If /dev/random on a system blocks when reading data from +it, client logins may be delayed until the client times out. The dropbear +server writes a notice to the logs when it sees /dev/random blocking. A +workaround for such systems is to re-compile the package with +DROPBEAR_RANDOM_DEV set to /dev/urandom in options.h. + +See the Dropbear homepage for more information: + http://matt.ucc.asn.au/dropbear/dropbear.html --- dropbear-0.49.orig/debian/README.runit +++ dropbear-0.49/debian/README.runit @@ -41,6 +41,6 @@ Optionally check the status of the service a few seconds later - # runsvstat -l /var/service/dropbear + # sv status /var/service/dropbear - -- Gerrit Pape , Sun, 16 May 2004 15:52:34 +0000 + -- Gerrit Pape , Fri, 02 Mar 2007 20:41:08 +0000