diff options
| author | Matt Johnston <matt@ucc.asn.au> | 2012-02-22 22:12:15 +0800 |
|---|---|---|
| committer | Matt Johnston <matt@ucc.asn.au> | 2012-02-22 22:12:15 +0800 |
| commit | 4dda424f74926476e250546919481f801978ccc9 (patch) | |
| tree | f7e71739e743835d68d46021d69744986122d1cb | |
| parent | f403c1f18befd451f86cca2c2cd734ff35422c63 (diff) | |
2012.55
| -rw-r--r-- | CHANGES | 17 | ||||
| -rw-r--r-- | debian/changelog | 6 | ||||
| -rw-r--r-- | sysoptions.h | 2 |
3 files changed, 24 insertions, 1 deletions
@@ -1,3 +1,20 @@ +2012.55 - Wednesday 22 February 2012 + +- Security: Fix use-after-free bug that could be triggered when multiple command sessions were + made when a command="" authorized_keys restriction was in effect. Possible arbitrary + code execution to an authenticated user, and probable bypass of the command="" restriction. + CVE-2012-0920. Thanks to Danny Fullerton of Mantor Organization for reporting the bug + +- Compile fix, only apply IPV6 socket options if they are available in headers + Thanks to Gustavo Zacarias for the patch + +- Clear key memory on exit + +- Fix minor memory leak in unusual PAM authentication configurations. + Thanks to Stathis Voukelatos + +- Other small code cleanups + 2011.54 - Tuesday 8 November 2011 - Building statically works again, broke in 0.53 and 0.53.1 diff --git a/debian/changelog b/debian/changelog index f415943..acd9ec4 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +dropbear (2012.55-0.1) unstable; urgency=low + + * New upstream release. + + -- Matt Johnston <matt@ucc.asn.au> Wed, 22 Feb 2012 22:54:00 +0800 + dropbear (2011.54-0.1) unstable; urgency=low * New upstream release. diff --git a/sysoptions.h b/sysoptions.h index 1b417e5..283229e 100644 --- a/sysoptions.h +++ b/sysoptions.h @@ -4,7 +4,7 @@ *******************************************************************/ #ifndef DROPBEAR_VERSION -#define DROPBEAR_VERSION "2011.54" +#define DROPBEAR_VERSION "2012.55" #endif #define LOCAL_IDENT "SSH-2.0-dropbear_" DROPBEAR_VERSION |