Format: 1.8 Date: Fri, 14 Aug 2015 07:26:18 -0400 Source: openssh Binary: openssh-client openssh-server openssh-sftp-server ssh ssh-krb5 ssh-askpass-gnome openssh-client-udeb openssh-server-udeb Architecture: armhf armhf_translations Version: 1:6.7p1-5ubuntu1.1 Distribution: vivid Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot ssh - secure shell client and server (metapackage) ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad ssh-krb5 - secure shell client and server (transitional package) Changes: openssh (1:6.7p1-5ubuntu1.1) vivid-security; urgency=medium . * SECURITY UPDATE: possible user impersonation via PAM support - debian/patches/pam-security-1.patch: don't resend username to PAM in monitor.c, monitor_wrap.c. - CVE number pending * SECURITY UPDATE: use-after-free in PAM support - debian/patches/pam-security-2.patch: fix use after free in monitor.c. - CVE number pending * SECURITY UPDATE: - debian/patches/CVE-2015-5600.patch: only query each keyboard-interactive device once per authentication request in auth2-chall.c. - CVE-2015-5600 Checksums-Sha1: 985f20ddcd084d9edcb100a44a64e667ecfd2b88 537042 openssh-client_6.7p1-5ubuntu1.1_armhf.deb 56e88c879708b81311d34be338565ebf485ef75b 326854 openssh-server_6.7p1-5ubuntu1.1_armhf.deb 9cd1fb9e12c2f72a0e78c5c76f5bbc907b99e0ad 33092 openssh-sftp-server_6.7p1-5ubuntu1.1_armhf.deb 4062bdc0105cd0f2d1e7e2fd3c26402867a77c73 14206 ssh-askpass-gnome_6.7p1-5ubuntu1.1_armhf.deb c699ffe9e9f931e9763b22562dbd32c15fd53fda 237558 openssh-client-udeb_6.7p1-5ubuntu1.1_armhf.udeb c527161d8c00698454d6f067eb700d791a0a3691 262562 openssh-server-udeb_6.7p1-5ubuntu1.1_armhf.udeb f4d5a798f05943cb95f0289747c61435504b2be7 1051086 openssh-client-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb ac675589ba913f58e2cf421bcec1290efdc1f2b0 566474 openssh-server-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 96181f7e360b5cce55f538cc5ee7e47b331bd67b 74784 openssh-sftp-server-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 88790218db21777c149205d957fa7fb07690ee12 13654 ssh-askpass-gnome-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 56e032a4e2c0fa0eece91fa8ac53d49e145e9725 481664 openssh-client-udeb-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 4c61a23b007403f8a9561dad2621c7b3108d2dd8 567216 openssh-server-udeb-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 26cfaa3a237d9f3b305b6d0e6896da26ee4bcbd9 8408 openssh_6.7p1-5ubuntu1.1_armhf_translations.tar.gz Checksums-Sha256: b4add6f2513c98778e4bf3013380ff75ea6e239c9ca07276612646190bb10bda 537042 openssh-client_6.7p1-5ubuntu1.1_armhf.deb 87803a85e7bfcc9f71ad9c01004ac730cb637f5f98c06fdaa58fbe40224c171c 326854 openssh-server_6.7p1-5ubuntu1.1_armhf.deb ec352d53257bfe92342a3eddb9fdafe78d282a9a2ab487b2bc468cc6a28cf16c 33092 openssh-sftp-server_6.7p1-5ubuntu1.1_armhf.deb 105c868f5afebff123fa13b67500ff2f393d68b22d8ebb24b8c96e064d946f05 14206 ssh-askpass-gnome_6.7p1-5ubuntu1.1_armhf.deb 6c534f026f11be9d52f515fd37fbff8f063ddd8be90286a9bfe176d1862994f9 237558 openssh-client-udeb_6.7p1-5ubuntu1.1_armhf.udeb e32b8dc4cb9813e4d5a2bc793d786c864cbfb8e201a5f615c71f4ab694db07ec 262562 openssh-server-udeb_6.7p1-5ubuntu1.1_armhf.udeb 1826af325d009ac7248bc006df43bc0f5ad6982ad6a5ebdc5dd86f8c10ee4c93 1051086 openssh-client-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb af0c55b05a8918c9704541d60cb0c194971fac8bcbbc91d384206ec11ae92967 566474 openssh-server-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 3dce01425f2ca09356bc35560e1b8f91288284e57aa9070447ddd096808ee287 74784 openssh-sftp-server-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb d030371a544b74a821be8fb71003c6919ce1c1276420442446c8c247945b9506 13654 ssh-askpass-gnome-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 6af3afa1123dbca2d718d29c2a3cc06deaae14338dce8dab5dee9985d3ac4ec3 481664 openssh-client-udeb-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 64e4ddf63ac4ffc123eabdb67ee1f9cf6a6ed9db3b9b58f4d2f154d682fcf98a 567216 openssh-server-udeb-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 5f6c626dfefef1dcb095c6f75196ab15355d3914e3847ba19e69f73c26d4ea31 8408 openssh_6.7p1-5ubuntu1.1_armhf_translations.tar.gz Files: 54220dab884d9245465e3f88eb154250 537042 net standard openssh-client_6.7p1-5ubuntu1.1_armhf.deb 9992a8dda4f5f4d08eac8117f155fda4 326854 net optional openssh-server_6.7p1-5ubuntu1.1_armhf.deb 1f33dde4bac00c3426305edfcc41e6f2 33092 net optional openssh-sftp-server_6.7p1-5ubuntu1.1_armhf.deb 3a5b2796bb63fcfc04245dcca3f60077 14206 gnome optional ssh-askpass-gnome_6.7p1-5ubuntu1.1_armhf.deb 58367ca30279f701b566e34839ba1efd 237558 debian-installer optional openssh-client-udeb_6.7p1-5ubuntu1.1_armhf.udeb 63af87efcfc497554f27f30ef38432a1 262562 debian-installer optional openssh-server-udeb_6.7p1-5ubuntu1.1_armhf.udeb 480c5e10684012012471d3687152331a 1051086 net extra openssh-client-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb fbea8e2ced3d07491d2d3f21ab9fd282 566474 net extra openssh-server-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb e0dd93e6cab9064bcd3be76479507354 74784 net extra openssh-sftp-server-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 5fc47a682f2ad0898eb9a5386e237e0f 13654 gnome extra ssh-askpass-gnome-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb f0761b07ec1f4ad1832897c64a9e669a 481664 debian-installer extra openssh-client-udeb-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb 84477806b494072a8267fa8367129714 567216 debian-installer extra openssh-server-udeb-dbgsym_6.7p1-5ubuntu1.1_armhf.ddeb d1be2d36d261d5d7ad023b4d04e67c2b 8408 raw-translations - openssh_6.7p1-5ubuntu1.1_armhf_translations.tar.gz Original-Maintainer: Debian OpenSSH Maintainers