openssh 1:3.9p1-1ubuntu2.3 source package in Ubuntu
Changelog
openssh (1:3.9p1-1ubuntu2.3) hoary-security; urgency=low * SECURITY UPDATE: Remote DoS. * CVE-2006-4924: Fix a pre-authentication denial of service found by Tavis Ormandy, that would cause sshd(8) to spin until the login grace time expired. Upstream fixes: http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/deattack.c.diff?r1=1.29&r2=1.30&sortby=date&f=h http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/packet.c.diff?r1=1.143&r2=1.144&sortby=date&f=h http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/deattack.h.diff?r1=1.9&r2=1.10&sortby=date&f=h * Fix an unsafe signal hander reported by Mark Dowd. The signal handler was vulnerable to a race condition that could be exploited to perform a pre-authentication denial of service. [CVE-2006-5051] On portable OpenSSH, this vulnerability could theoretically lead to pre-authentication remote code execution if GSSAPI authentication is enabled, but the likelihood of successful exploitation appears remote. [CVE-2006-5052] * Above patches taken from Debian's 4.3p2-4 version, thanks to Colin Watson for backporting them from 4.4p1. -- Martin Pitt <email address hidden> Mon, 2 Oct 2006 10:17:53 +0000
Upload details
- Uploaded by:
- Martin Pitt
- Uploaded to:
- Hoary
- Original maintainer:
- Matthew Vernon
- Architectures:
- any
- Section:
- net
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openssh_3.9p1.orig.tar.gz | 813.3 KiB | c8f773655aec917601dc3fd5290a3c46193b36e927064541363c4ce65f14194b |
openssh_3.9p1-1ubuntu2.3.diff.gz | 139.9 KiB | f99730cd5a452b34f947a0e16c62e5eda17553ea8b6043da884c0180bcbe89ee |
openssh_3.9p1-1ubuntu2.3.dsc | 866 bytes | a667cf901238ed4da006515e1521bc91015f506435d1d5f1f00c1cb017f12d48 |
Binary packages built by this source
- openssh-client: No summary available for openssh-client in ubuntu hoary.
No description available for openssh-client in ubuntu hoary.
- openssh-client-udeb: No summary available for openssh-client-udeb in ubuntu hoary.
No description available for openssh-client-udeb in ubuntu hoary.
- openssh-server: No summary available for openssh-server in ubuntu hoary.
No description available for openssh-server in ubuntu hoary.
- openssh-server-udeb: No summary available for openssh-server-udeb in ubuntu hoary.
No description available for openssh-server-udeb in ubuntu hoary.
- ssh: No summary available for ssh in ubuntu hoary.
No description available for ssh in ubuntu hoary.
- ssh-askpass-gnome: No summary available for ssh-askpass-gnome in ubuntu hoary.
No description available for ssh-askpass-gnome in ubuntu hoary.