Accepted: openssh, openssh, openssh, openssh, openssh, openssh, openssh_4.3p2-8ubuntu1.3_amd64_translations.tar.gz, openssh_4.3p2-8ubuntu1.3_i386_translations.tar.gz, openssh_4.3p2-8ubuntu1.3_ia64_translations.tar.gz, openssh_4.3p2-8ubuntu1.3_powerpc_translations.tar.gz, openssh_4.3p2-8ubuntu1.3_sparc_translations.tar.gz 1:4.3p2-8ubuntu1.3 (source, amd64, i386, ia64, powerpc, sparc, raw-translations, raw-translations, raw-translations, raw-translations, raw-translations)

Ubuntu Installer archive at ubuntu.com
Tue May 13 14:55:18 BST 2008


Accepted:
 OK: openssh_4.3p2.orig.tar.gz
 OK: openssh_4.3p2-8ubuntu1.3.diff.gz
 OK: openssh_4.3p2-8ubuntu1.3.dsc
     -> Component: main Section: net
 OK: openssh-client_4.3p2-8ubuntu1.3_amd64.deb
 OK: openssh-client-udeb_4.3p2-8ubuntu1.3_amd64.udeb
 OK: openssh-server_4.3p2-8ubuntu1.3_amd64.deb
 OK: openssh-server-udeb_4.3p2-8ubuntu1.3_amd64.udeb
 OK: ssh-askpass-gnome_4.3p2-8ubuntu1.3_amd64.deb
 OK: openssh-client_4.3p2-8ubuntu1.3_i386.deb
 OK: openssh-client-udeb_4.3p2-8ubuntu1.3_i386.udeb
 OK: openssh-server_4.3p2-8ubuntu1.3_i386.deb
 OK: openssh-server-udeb_4.3p2-8ubuntu1.3_i386.udeb
 OK: ssh_4.3p2-8ubuntu1.3_all.deb
 OK: ssh-askpass-gnome_4.3p2-8ubuntu1.3_i386.deb
 OK: ssh-krb5_4.3p2-8ubuntu1.3_all.deb
 OK: openssh-client_4.3p2-8ubuntu1.3_ia64.deb
 OK: openssh-client-udeb_4.3p2-8ubuntu1.3_ia64.udeb
 OK: openssh-server_4.3p2-8ubuntu1.3_ia64.deb
 OK: openssh-server-udeb_4.3p2-8ubuntu1.3_ia64.udeb
 OK: ssh-askpass-gnome_4.3p2-8ubuntu1.3_ia64.deb
 OK: openssh-client_4.3p2-8ubuntu1.3_powerpc.deb
 OK: openssh-client-udeb_4.3p2-8ubuntu1.3_powerpc.udeb
 OK: openssh-server_4.3p2-8ubuntu1.3_powerpc.deb
 OK: openssh-server-udeb_4.3p2-8ubuntu1.3_powerpc.udeb
 OK: ssh-askpass-gnome_4.3p2-8ubuntu1.3_powerpc.deb
 OK: openssh-client_4.3p2-8ubuntu1.3_sparc.deb
 OK: openssh-client-udeb_4.3p2-8ubuntu1.3_sparc.udeb
 OK: openssh-server_4.3p2-8ubuntu1.3_sparc.deb
 OK: openssh-server-udeb_4.3p2-8ubuntu1.3_sparc.udeb
 OK: ssh-askpass-gnome_4.3p2-8ubuntu1.3_sparc.deb
 OK: openssh_4.3p2-8ubuntu1.3_amd64_translations.tar.gz
 OK: openssh_4.3p2-8ubuntu1.3_i386_translations.tar.gz
 OK: openssh_4.3p2-8ubuntu1.3_ia64_translations.tar.gz
 OK: openssh_4.3p2-8ubuntu1.3_powerpc_translations.tar.gz
 OK: openssh_4.3p2-8ubuntu1.3_sparc_translations.tar.gz

Upload Warnings:
No copyright file found.

Format: 1.7
Date: Tue, 13 May 2008 00:16:35 -0400
Source: openssh
Binary: openssh-client openssh-client-udeb openssh-server openssh-server-udeb ssh ssh-askpass-gnome ssh-krb5
Architecture: amd64_translations amd64 i386_translations i386 all ia64_translations ia64 powerpc_translations powerpc source sparc_translations sparc
Version: 1:4.3p2-8ubuntu1.3
Distribution: feisty-security
Urgency: low
Maintainer: Colin Watson <cjwatson at ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
 openssh-client - Secure shell client, an rlogin/rsh/rcp replacement
 openssh-client-udeb - Secure shell client for the Debian installer (udeb)
 openssh-server - Secure shell server, an rshd replacement
 openssh-server-udeb - Secure shell server for the Debian installer (udeb)
 ssh-askpass-gnome - under X, asks user for a passphrase for ssh-add
 ssh        - Secure shell client and server (transitional package)
 ssh-krb5   - Secure shell client and server (transitional package)
 openssh-client-udeb - Secure shell client for the Debian installer
 openssh-server-udeb - Secure shell server for the Debian installer
Changes:
 openssh (1:4.3p2-8ubuntu1.3) feisty-security; urgency=low
 .
   * Mitigate OpenSSL security vulnerability thank to Colin Watson:
     - Add key blacklisting support. Keys listed in
       /etc/ssh/blacklist.TYPE-LENGTH will be rejected for authentication by
       sshd, unless "PermitBlacklistedKeys yes" is set in
       /etc/ssh/sshd_config.
     - Add a new program, ssh-vulnkey, which can be used to check keys
       against these blacklists.
     - Depend on openssh-blacklist.
     - Force dependencies on libssl0.9.8 / libcrypto0.9.8-udeb to at least
       0.9.8c-4ubuntu0.3.
     - Automatically regenerate known-compromised host keys, with a
       critical-priority debconf note. (I regret that there was no time to
       gather translations.)
   * added README.compromised-keys thanks to Colin Watson
   * References
     CVE-2008-0166
     http://www.ubuntu.com/usn/usn-612-1
Files:
 0058cb2b659bf7b7d428690ba8e89c83 56106 raw-translations - openssh_4.3p2-8ubuntu1.3_amd64_translations.tar.gz
 6ebf534da00e63d36ff8d25d133c5f87 739306 net standard openssh-client_4.3p2-8ubuntu1.3_amd64.deb
 5f273f1e6da9f6f572da970e7ba1680a 255690 net optional openssh-server_4.3p2-8ubuntu1.3_amd64.deb
 18268a8507e35a673ba0b88d7c8f905b 101788 gnome optional ssh-askpass-gnome_4.3p2-8ubuntu1.3_amd64.deb
 a63a1aad1a6d703701353b1a2f3aa3f1 173116 debian-installer optional openssh-client-udeb_4.3p2-8ubuntu1.3_amd64.udeb
 165979d39473eed093bd332294611892 185954 debian-installer optional openssh-server-udeb_4.3p2-8ubuntu1.3_amd64.udeb
 ec4e33a5b72165a213aba1dc5c6e1e48 1086 net extra ssh_4.3p2-8ubuntu1.3_all.deb
 4f9d36507f18eb19d4a608747cb327ca 56098 raw-translations - openssh_4.3p2-8ubuntu1.3_i386_translations.tar.gz
 1273931c48c521f82a32c83d3c2c7f30 93414 net extra ssh-krb5_4.3p2-8ubuntu1.3_all.deb
 47f4f9e32772a27f390b7bf598ca692c 701434 net standard openssh-client_4.3p2-8ubuntu1.3_i386.deb
 cc0df0b6336c02dda018dd381e096150 238154 net optional openssh-server_4.3p2-8ubuntu1.3_i386.deb
 d84b4274b86d65878b41e33db957cbec 101494 gnome optional ssh-askpass-gnome_4.3p2-8ubuntu1.3_i386.deb
 338d87e0ed113fabb31bf8985c41044d 156814 debian-installer optional openssh-client-udeb_4.3p2-8ubuntu1.3_i386.udeb
 bb943025f0bfb39c0f080aa0c6a90507 165480 debian-installer optional openssh-server-udeb_4.3p2-8ubuntu1.3_i386.udeb
 52f57d7e90ed42637b7d854cbb743e66 56103 raw-translations - openssh_4.3p2-8ubuntu1.3_ia64_translations.tar.gz
 584bb5d1b728200fe6ebb1d64bf50e2f 961462 net standard openssh-client_4.3p2-8ubuntu1.3_ia64.deb
 639b9ed17f0461ac71712015ecbb5484 335848 net optional openssh-server_4.3p2-8ubuntu1.3_ia64.deb
 a311a28d8037472503cba6552ab596d2 103078 gnome optional ssh-askpass-gnome_4.3p2-8ubuntu1.3_ia64.deb
 fecbd1a2c9995c8c6d5ad3b0e1166532 251998 debian-installer optional openssh-client-udeb_4.3p2-8ubuntu1.3_ia64.udeb
 813d3fca9d53f4f093d4e136e15e9c0a 270030 debian-installer optional openssh-server-udeb_4.3p2-8ubuntu1.3_ia64.udeb
 45381fd8f094ccf61f8405a6e8de0b54 56104 raw-translations - openssh_4.3p2-8ubuntu1.3_powerpc_translations.tar.gz
 cbe597ba0193d39d115a432404471939 767364 net standard openssh-client_4.3p2-8ubuntu1.3_powerpc.deb
 1feeb20163fb303b41a85bbd9775abe5 259734 net optional openssh-server_4.3p2-8ubuntu1.3_powerpc.deb
 f781bfd69b35508129c0ce71eb0cf395 104262 gnome optional ssh-askpass-gnome_4.3p2-8ubuntu1.3_powerpc.deb
 fb39252bf076dca363b34058f6c6280a 178908 debian-installer optional openssh-client-udeb_4.3p2-8ubuntu1.3_powerpc.udeb
 ebc03fba90aa40ba7e86c2bd90b4b43b 184132 debian-installer optional openssh-server-udeb_4.3p2-8ubuntu1.3_powerpc.udeb
 2ba8f9d6823e429a87a16d1069b8bcb0 1074 net standard openssh_4.3p2-8ubuntu1.3.dsc
 a8b32463625d995f31710932955f155e 275518 net standard openssh_4.3p2-8ubuntu1.3.diff.gz
 031dec92f815fed777fe4b3f4a47026f 56117 raw-translations - openssh_4.3p2-8ubuntu1.3_sparc_translations.tar.gz
 43659331cc6f294e7657d96311db221a 751366 net standard openssh-client_4.3p2-8ubuntu1.3_sparc.deb
 913bae4437faf91b7c4b95257ca9fe46 263460 net optional openssh-server_4.3p2-8ubuntu1.3_sparc.deb
 cf3e2aa66bfe30c2981a28063d7fa639 101742 gnome optional ssh-askpass-gnome_4.3p2-8ubuntu1.3_sparc.deb
 2796884a4e9c6a0c4d228e3a2d829df4 164240 debian-installer optional openssh-client-udeb_4.3p2-8ubuntu1.3_sparc.udeb
 f3bebc7681083a2a7dd4a91fd1ee5237 172576 debian-installer optional openssh-server-udeb_4.3p2-8ubuntu1.3_sparc.udeb
Package-Type: udeb
Original-Maintainer: Matthew Vernon <matthew at debian.org>





More information about the feisty-changes mailing list