lp:ubuntu/warty-security/dropbear

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

3. By Daniel T Chen on 2005-12-21

* SECURITY:
  - chansession.c:addchildpid(): Fix incorrect expression evaluation
    order that results in a buffer overflow, leading to arbitrary
    code execution. Patch adapted from:
    http://security.debian.org/pool/updates/main/d/dropbear/dropbear_0.45-2sarge0.diff.gz
    + Reference: CVE-2005-4178
  - dss.c:buf_dss_verify(), rsa.c:buf_rsa_verify(): Don't attempt to
    free uninitialised buffers. Patch adapted from diff between
    upstream versions 0.42 and 0.43.
    + Reference:
      http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2004q3/000065.html

2. By Matt Johnston on 2004-06-16

* New upstream release 0.42.
* debian/diff/cvs-20040520.diff: remove; obsolete.
* debian/rules: disable target patch.

1. By Matt Johnston on 2004-06-16

Import upstream version 0.42