Format: 1.7 Date: Wed, 09 Jan 2008 12:40:19 -0800 Source: openssh Binary: openssh-client openssh-client-udeb openssh-server openssh-server-udeb ssh ssh-askpass-gnome Architecture: amd64_translations amd64 hppa_translations hppa i386_translations i386 all ia64_translations ia64 powerpc_translations powerpc source sparc_translations sparc Version: 1:4.2p1-7ubuntu3.2 Distribution: dapper-security Urgency: low Maintainer: Matthew Vernon Changed-By: Kees Cook Description: openssh-client - Secure shell client, an rlogin/rsh/rcp replacement openssh-client-udeb - Secure shell client for the Debian installer (udeb) openssh-server - Secure shell server, an rshd replacement openssh-server-udeb - Secure shell server for the Debian installer (udeb) ssh-askpass-gnome - under X, asks user for a passphrase for ssh-add ssh - Secure shell client and server (transitional package) openssh-client-udeb - Secure shell client for the Debian installer openssh-server-udeb - Secure shell server for the Debian installer Changes: openssh (1:4.2p1-7ubuntu3.2) dapper-security; urgency=low . * SECURITY UPDATE: trusted cookie leak when untrusted cookie cannot be generated. * clientloop.c: Applied patch according to openssh upstream (LP: #162171), thanks to Stephan Hermann. * References: CVE-2007-4752 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444738 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/clientloop.c.diff?r1=1.180&r2=1.181 Files: 38ec7a171bb438304136c8a2a7bdcdc3 610818 net standard openssh-client_4.2p1-7ubuntu3.2_amd64.deb 94c50d4e1df16ab4c4f7004f9d881373 236216 net optional openssh-server_4.2p1-7ubuntu3.2_amd64.deb f93a0992414c66216c28da47f2e74e60 87020 gnome optional ssh-askpass-gnome_4.2p1-7ubuntu3.2_amd64.deb fa46d07fce9bbe752dcbdf59df0c9390 165868 debian-installer optional openssh-client-udeb_4.2p1-7ubuntu3.2_amd64.udeb 82b5a1cde86dc167a8edd40a047be063 182050 debian-installer optional openssh-server-udeb_4.2p1-7ubuntu3.2_amd64.udeb f45799b26869d161c45882dc96d34d2a 54759 raw-translations - openssh_4.2p1-7ubuntu3.2_amd64_translations.tar.gz 7789b680736e51ec7d7cad2537a3600d 625024 net standard openssh-client_4.2p1-7ubuntu3.2_hppa.deb d570dd2dac58f935225085c4e2b761ba 239808 net optional openssh-server_4.2p1-7ubuntu3.2_hppa.deb 2f986f9242e67515feeb7e4a7411038a 87366 gnome optional ssh-askpass-gnome_4.2p1-7ubuntu3.2_hppa.deb e4af4f93f73921099d50338d096ce0a9 179102 debian-installer optional openssh-client-udeb_4.2p1-7ubuntu3.2_hppa.udeb 590f3fe459814340ff3391978f102398 189344 debian-installer optional openssh-server-udeb_4.2p1-7ubuntu3.2_hppa.udeb d9b3921669089ce7c64bec7a9dd0df48 54762 raw-translations - openssh_4.2p1-7ubuntu3.2_hppa_translations.tar.gz 1ab5545e78502458610141793bb0b014 1052 net extra ssh_4.2p1-7ubuntu3.2_all.deb 94b5757b8c264c362ff3f8ad06b9a4f7 536982 net standard openssh-client_4.2p1-7ubuntu3.2_i386.deb c9bc37de1707f1ab7f68a501f273405b 205486 net optional openssh-server_4.2p1-7ubuntu3.2_i386.deb 1b64f659acc69b58925ccc8d9419db41 86652 gnome optional ssh-askpass-gnome_4.2p1-7ubuntu3.2_i386.deb cb302b24cdb4c44c78ec742c27daf727 140124 debian-installer optional openssh-client-udeb_4.2p1-7ubuntu3.2_i386.udeb 33dda25a3ab6e1d25d7df1aba0db3192 151552 debian-installer optional openssh-server-udeb_4.2p1-7ubuntu3.2_i386.udeb 292d1209a760a0dbf4f7882be7879c4a 54757 raw-translations - openssh_4.2p1-7ubuntu3.2_i386_translations.tar.gz cf1bd801205e5ab01d421b9597b29939 831452 net standard openssh-client_4.2p1-7ubuntu3.2_ia64.deb 862731fcc1848669f774d4b626e6fa8a 325792 net optional openssh-server_4.2p1-7ubuntu3.2_ia64.deb cc87b39912bb7a418924e4b99843c9da 88412 gnome optional ssh-askpass-gnome_4.2p1-7ubuntu3.2_ia64.deb c9bcdc60b07a0b1de9d0ca109c1d0c5e 242710 debian-installer optional openssh-client-udeb_4.2p1-7ubuntu3.2_ia64.udeb f2f95c2e538ab03b6aa5e35bf0cb5cd7 265204 debian-installer optional openssh-server-udeb_4.2p1-7ubuntu3.2_ia64.udeb 3dc3df8f791dfa27aa3ff5ea0de21c9b 54760 raw-translations - openssh_4.2p1-7ubuntu3.2_ia64_translations.tar.gz 50789b500b8d6c8c6cc32755ca7b50be 593834 net standard openssh-client_4.2p1-7ubuntu3.2_powerpc.deb 14f705f18879a098da14ab993e97e911 226280 net optional openssh-server_4.2p1-7ubuntu3.2_powerpc.deb 74be31b97ea0e3703bb4689595d5cedf 88306 gnome optional ssh-askpass-gnome_4.2p1-7ubuntu3.2_powerpc.deb af98ece9e645d5e3eb1526ba15f507a8 158556 debian-installer optional openssh-client-udeb_4.2p1-7ubuntu3.2_powerpc.udeb 9cbace722542d8830bd9eabd55996e5d 165946 debian-installer optional openssh-server-udeb_4.2p1-7ubuntu3.2_powerpc.udeb e7f3116f9587309b978a3ea30c56c4ec 54760 raw-translations - openssh_4.2p1-7ubuntu3.2_powerpc_translations.tar.gz bce70ff72d54dbd8f86b635c78d67478 1003 net standard openssh_4.2p1-7ubuntu3.2.dsc 14f6b5da9f73a4e256fcd316994057d0 171681 net standard openssh_4.2p1-7ubuntu3.2.diff.gz 519d42bef1f63ab34e6a32a8cf24e6df 543752 net standard openssh-client_4.2p1-7ubuntu3.2_sparc.deb cd2f9975a3b5721a8c97dd9b05a7c8a3 208862 net optional openssh-server_4.2p1-7ubuntu3.2_sparc.deb eb785485fa84d7c03187c1d46b6e9424 86670 gnome optional ssh-askpass-gnome_4.2p1-7ubuntu3.2_sparc.deb 6085939fb512a09e7bb3b7a40da00521 149250 debian-installer optional openssh-client-udeb_4.2p1-7ubuntu3.2_sparc.udeb 537808f3e9019adeb740e0ef57ce98e7 160666 debian-installer optional openssh-server-udeb_4.2p1-7ubuntu3.2_sparc.udeb 4e4239e0c1638c50adc887085987be10 54766 raw-translations - openssh_4.2p1-7ubuntu3.2_sparc_translations.tar.gz