Hello community, here is the log from the commit of package dropbear.2113 for openSUSE:12.3:Update checked in at 2013-10-31 15:52:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.3:Update/dropbear.2113 (Old) and /work/SRC/openSUSE:12.3:Update/.dropbear.2113.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "dropbear.2113" Changes: -------- New Changes file: --- /dev/null 2013-10-11 12:16:15.204037506 +0200 +++ /work/SRC/openSUSE:12.3:Update/.dropbear.2113.new/dropbear.changes 2013-10-31 15:52:34.000000000 +0100 @@ -0,0 +1,108 @@ +------------------------------------------------------------------- +Thu Oct 17 08:35:01 UTC 2013 - thardeck@suse.com + +- imported upstream version 2013.60 + * Fix "make install" so that it doesn't always install to /bin and /sbin + * Fix "make install MULTI=1", installing manpages failed + * Fix "make install" when scp is included since it has no manpage + * Make --disable-bundled-libtom work +- used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421 + +------------------------------------------------------------------- +Thu Oct 10 07:29:00 UTC 2013 - thardeck@suse.com + +- provided links for download sources +- employed gpg-offline - verify sources + +------------------------------------------------------------------- +Mon Oct 7 08:10:32 UTC 2013 - thardeck@suse.com + +- imported upstream version 2013.59 + * Fix crash from -J command + Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches + * Avoid reading too much from /proc/net/rt_cache since that causes + system slowness. + * Improve EOF handling for half-closed connections + Thanks to Catalin Patulea + * Send a banner message to report PAM error messages intended for the user + Patch from Martin Donnelly + * Limit the size of decompressed payloads, avoids memory exhaustion denial + of service + Thanks to Logan Lamb for reporting and investigating it + * Avoid disclosing existence of valid users through inconsistent delays + Thanks to Logan Lamb for reporting + * Update config.guess and config.sub for newer architectures + * Avoid segfault in server for locked accounts + * "make install" now installs manpages + dropbearkey.8 has been renamed to dropbearkey.1 + manpage added for dropbearconvert + * Get rid of one second delay when running non-interactive commands + +------------------------------------------------------------------- +Sat Apr 20 18:49:38 UTC 2013 - thardeck@suse.com + +- reverted init file installation on 12.3 + +------------------------------------------------------------------- +Fri Apr 19 08:26:17 UTC 2013 - thardeck@suse.com + +- imported upstream version 2013.58 + * Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz + * Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder + * Reject logins for other users when running as non-root, from Hans Harder + * Disable client immediate authentication request by default, it prevents passwordless logins from working + +------------------------------------------------------------------- +Fri Mar 22 08:48:43 UTC 2013 - thardeck@suse.com + +- imported upstream version 2013.56 + * Allow specifying cipher (-c) and MAC (-m) lists for dbclient + * Allow using 'none' cipher or MAC (off by default, use options.h). Encryption + is used during authentication then disabled, similar to OpenSSH HPN mode + * Allow a user in immediately if the account has a blank password and blank + passwords are enabled + * Include a few extra sources of entropy from /proc on Linux, hash private keys + as well. Dropbear will also write gathered entropy back into /dev/urandom + * Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h) + * Don't sent bad address "localhost" for -R forward connections, + reported by Denis Bider + * Add "-B" runtime option to allow blank passwords + * Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks + * A few improvements for Android from Reimar Döffinger + * Fix memory leak for TCP forwarded connections to hosts that timed out, + reported by Norbert Benczúr. Appears to be a very long-standing bug. + * Fix "make clean" for out of tree builds + * Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset + +------------------------------------------------------------------- +Thu Aug 2 11:13:49 UTC 2012 - thardeck@suse.com + +- removed PAM dependency since Dropbear should be usable in initrd and PAM wasn't used without an additional patch anyway https://wiki.yoctoproject.org/wiki/PAM_Integration#dropbear + +------------------------------------------------------------------- +Mon Jul 9 20:11:26 UTC 2012 - thardeck@suse.com + +- fixed typo in service file + +------------------------------------------------------------------- +Sat Jun 30 11:49:10 UTC 2012 - thardeck@suse.com + +- added systemd service files for 12.1 and later +- cleaned up sysconfig and rcdropbear files + +------------------------------------------------------------------- +Tue Jun 19 12:42:00 UTC 2012 - thardeck@suse.com + +- added init daemon with key generation option +- added sysconfig file with default configuration + +------------------------------------------------------------------- +Fri Jun 15 09:45:36 UTC 2012 - thardeck@suse.com + +- updated spec file - changed the group + +------------------------------------------------------------------- +Wed Jun 13 11:50:22 UTC 2012 - thardeck@suse.com + +- initial version 2012.55 + New: ---- SHA1SUM.asc dropbear-2013.60.tar.bz2 dropbear-keygen.service dropbear.changes dropbear.keyring dropbear.service dropbear.spec dropbear.sysconfig rcdropbear ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dropbear.spec ++++++ # # spec file for package dropbear # # Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: dropbear Version: 2013.60 Release: 0 Summary: A relatively small SSH 2 server and client License: MIT Group: Productivity/Networking/SSH Url: http://matt.ucc.asn.au/dropbear/dropbear.html Source0: http://matt.ucc.asn.au/dropbear/releases/%{name}-%{version}.tar.bz2 Source1: https://matt.ucc.asn.au/dropbear/SHA1SUM.asc Source2: dropbear.keyring Source3: dropbear.service Source4: dropbear-keygen.service Source5: dropbear.sysconfig Source6: rcdropbear BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: zlib-devel %if 0%{?suse_version} >= 1230 BuildRequires: gpg-offline %endif Requires(post): %fillup_prereq %insserv_prereq %if 0%{?suse_version} >= 1210 Requires(post): systemd Requires(preun): systemd Requires(postun): systemd %endif %description Dropbear is a SSH 2 server and client designed to be small enough to be used in small memory environments, while still being functional and secure enough for general use. It implements most required features of the SSH 2 protocol, and other features such as X11 and authentication agent forwarding. %prep %{?gpg_verify: %gpg_verify %{SOURCE1}} %setup -q %build %configure make %{?_smp_mflags} %install make install DESTDIR=%{buildroot} install -d %{buildroot}%{_sysconfdir}/%{name} install -D -m 0644 %{SOURCE5} "%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}" #no init service needed anymore for 12.3+ install -D -m0755 %{SOURCE6} "%{buildroot}%{_initrddir}/%{name}" ln -sf ../../%{_initrddir}/%{name} "%{buildroot}%{_sbindir}/rc%{name}" %if 0%{?suse_version} >= 1210 # systemd unit files install -d %{buildroot}%{_unitdir} install -m 0644 %{SOURCE3} %{buildroot}%{_unitdir}/%{name}.service install -m 0644 %{SOURCE4} %{buildroot}%{_unitdir}/dropbear-keygen.service %endif %post %if 0%{?suse_version} >= 1210 if [ $1 -eq 1 ] ; then # Initial installation /bin/systemctl daemon-reload >/dev/null 2>&1 || : fi %endif %{fillup_and_insserv %{name}} %preun %if 0%{?suse_version} >= 1210 if [ $1 -eq 0 ] ; then # Package removal, not upgrade /bin/systemctl --no-reload disable %{name}.service > /dev/null 2>&1 || : /bin/systemctl stop %{name}.service > /dev/null 2>&1 || : fi %endif %stop_on_removal %{name} %postun %if 0%{?suse_version} >= 1210 /bin/systemctl daemon-reload >/dev/null 2>&1 || : if [ $1 -ge 1 ] ; then # Package upgrade, not uninstall /bin/systemctl try-restart %{name}.service >/dev/null 2>&1 || : fi %endif %restart_on_update %{name} %insserv_cleanup %files %defattr(-,root,root) %{_bindir}/dbclient %{_bindir}/dropbearconvert %{_bindir}/dropbearkey %{_sbindir}/dropbear %{_sbindir}/rcdropbear %{_initrddir}/%{name} %if 0%{?suse_version} >= 1210 %{_unitdir}/%{name}.service %{_unitdir}/dropbear-keygen.service %endif %dir %{_sysconfdir}/%{name} %{_localstatedir}/adm/fillup-templates/sysconfig.%{name} %{_mandir}/man8/dropbear.8.gz %{_mandir}/man1/dbclient.1.gz %{_mandir}/man1/dropbearkey.1.gz %{_mandir}/man1/dropbearconvert.1.gz %changelog ++++++ SHA1SUM.asc ++++++ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 87a1b2d302553eb8b5fb320e1cd3aeba38d56dd2 dropbear-0.23.tar.bz2 6d4db1612de20d094518bf4a7f90f4ccc501c307 dropbear-0.23.tar.gz 8cc247c584e3836c18a3fe1852ace16deef12cd6 dropbear-0.255.tar.bz2 ce81bb82649af9a8ae6edb401e36f7363fcc4d70 dropbear-0.255.tar.gz 03b4f4d71c02c03f9cf200fdcfa717f7fb4691bb dropbear-0.28.tar.bz2 52b8c595c2a5a885292fbc425b20473dc233e06c dropbear-0.28.tar.gz c57cb938e76bcf6378fb8659c8f3170d18b71965 dropbear-0.29.tar.bz2 381704f5999d0dfb73449eed16fc119d34035928 dropbear-0.29.tar.gz e079dc07e1e94984ae97f8ea8261447a9d9dfd5b dropbear-0.30.tar.bz2 d8a47b803e436409c5d79e52bfbc8a8bd04526ec dropbear-0.30.tar.gz 5ae0c9a1d8d2e7518a0b6f5fc6ec01a41f03b612 dropbear-0.31.tar.bz2 ee5364af5d08f012169c79f31dd825bdab08b53c dropbear-0.31.tar.gz 6ea4274b6a4c6574e43775333a4588ee9233038e dropbear-0.32.tar.bz2 5d33fe20b96f5e23a5a9573f9cfb88e00bb42c64 dropbear-0.32.tar.gz 40807147292d0ccce9b4f24848561284885dda5a dropbear_0.33-1_i386.deb 47f7484099aaa24503c61e1f2e88a185d1d8d559 dropbear-0.33.tar.bz2 477ee40474220be2b7d80ddc11800dc56d567f9d dropbear-0.33.tar.gz 4c7bbe194e1a560491e1b9252f9a0b9a7187bbea dropbear_0.34-1_i386.deb 466c99d8f07a69b1cf7ce245f2ec1cdcc47cc37c dropbear-0.34.tar.bz2 9b57c595e7c4556921cb3bfb3272109367261c16 dropbear-0.34.tar.gz 71054c81fc5e2001f17ddbb3ca34f34cf19193b4 dropbear_0.35-1_i386.deb 1797732bfe1e07118fcd07743ce57acb1e4ef6e4 dropbear-0.35.tar.bz2 3017164c713f66e1659883c8c341ad5085e93343 dropbear-0.35.tar.gz 1ead82c2ceb9e2eb8d2cd255923d957f04ef4159 dropbear_0.36-1_i386.deb 89977e99411c5bc67c2de006665afde7bfc3dff2 dropbear-0.36.tar.bz2 a1d685e36cb2e406101a7d149a8f9e9cd305dc0e dropbear-0.36.tar.gz d136debba86f405c77374f1eaf726101497a903d dropbear_0.37-1_i386.deb 41c03ff61b46dae591f060f4ca721deba65735fc dropbear-0.37.tar.bz2 777d2ec4c001284f32887a9872fcfd0cc3e12615 dropbear-0.37.tar.gz e60cc690b512a7a13133da117375ac886b91eb0b dropbear_0.38-1_i386.deb e6afb8861155fd26903e6207850baec6f3ad04de dropbear-0.38.tar.bz2 b3fc115cc35e2916e97d97eff026817886741e03 dropbear-0.38.tar.gz fbbfa9463efe0014b035ac6f44624d631333b680 dropbear_0.39-1_i386.deb 856490f5c27ed084a42935fd1c97077c5cae1278 dropbear-0.39.tar.bz2 26241668ad2a8a1b3c86ac879ad7d6f425b7c24d dropbear-0.39.tar.gz 4b0dcc34775ec25b0c5168c2fee6d64cd332bd63 dropbear_0.40-1_i386.deb 368477a822e665fee5fcde010c0ef65c95f91bfb dropbear-0.40pre1.tar.gz 566f1224943a6874949a6d4757921b94e33af4ef dropbear-0.40.tar.bz2 29865d22cbf876565a18bf3ba8f9ed7e8b23667f dropbear-0.40.tar.gz c98b9532788bb24f687132d04f23a1a04e61d58c dropbear_0.41-1_i386.deb d1e15a53439a0bc7ae5955fd2afc9139dbb54c0c dropbear-0.41.tar.bz2 87e75c5c1ce3cffe5385a3faf18bb90a06a8f450 dropbear-0.41.tar.gz 886c96bb9a8206c353a707ac79867730e29e2dac dropbear_0.42-1_i386.deb 2b4f1e22af1dfaffdfe7fbcf75cb6b79b322efc3 dropbear-0.42.tar.bz2 af7635283b3c71074214453e4116bc7b0b165fe3 dropbear-0.42.tar.gz e3bfba27deb12a8dc123d1887b6513ec51359b3c dropbear_0.43-1_i386.deb 0bce83ad1a90b9b91e34d0c777f0d914516fd99d dropbear-0.43.tar.bz2 87341f88700796d84c7bff96d0d4c8d492c3f20a dropbear-0.43.tar.gz 648d1f91cf4c00821f79fd3465d46c03031323e3 dropbear_0.44+final-1_i386.deb a95bde40bce8d7809097a1cda87ef139e97649ce dropbear-0.44.tar.bz2 5e95daae88e92603d44ef9a4d18d8af6df77240e dropbear-0.44.tar.gz 99fdde0a181fd8ebf7efa0b1326c37ed523084e2 dropbear-0.44test1.tar.bz2 5450c3be308d8f4867e3bf7106ff2fd4dfc43fb4 dropbear-0.44test1.tar.gz 742eb619cfdc595db6c413eeba3626254756f104 dropbear-0.44test2.tar.bz2 081047ab91283465ebc62d8dcd697ac216a2bfc3 dropbear-0.44test2.tar.gz b9fd5fdc914bcac68a43d09bd91a481366da72c8 dropbear-0.44test3.tar.bz2 4b9efae7d7fad10197ba6afae99ffffb3e282371 dropbear-0.44test3.tar.gz c33f325afaf28b670acc8e4ae9f5ce47ca9977ea dropbear-0.44test4.tar.bz2 186a3cde36b31c1063c939c8336848bea563950e dropbear-0.44test4.tar.gz 3639b2748243476f742422121e59ab9095dcd8d4 dropbear_0.45-1_i386.deb 6368d839888750726391394177f89f5709d6d816 dropbear-0.45.tar.bz2 d8b3e829b68233b8fe8fe1cbfb1b14e62f205baf dropbear-0.45.tar.gz 91cf387f1c268962ea75d364d496bed2815f1dc7 dropbear_0.46-0.1_i386.deb 2b6d2083ec0294fde55c75e4080c06637cbcf833 dropbear-0.46.tar.bz2 14e70182dd6b6f3d1491bd29e2864c2b826b1254 dropbear-0.46.tar.gz f8a0fa6c19eb4d9ccbdaff9dd9e84b91e05d22fd dropbear_0.47-0.1_i386.deb 7a46a02f489b66cbf4c6383328ba22527a9d3109 dropbear-0.47.tar.bz2 47f92c7bf5a42bd5ed62c953c3f5062d09efec7f dropbear-0.47.tar.gz e45c2abc460d8a3d5c62cc904f29cb9c6964d0fc dropbear_0.48-0.1_i386.deb 4dd349b5e3c1aa1b627c52a27f17f5eb7e85c146 dropbear-0.48.1.tar.gz 6b9c3a68a924aaf606d9ef1d8cf7c38eeec249c8 dropbear-0.48.tar.gz a459073a993770781aa2a15aa944ef6a603193ca dropbear_0.49-0.1_i386.deb 32524c2ba672b95de5adf66d18616bd90842e56e dropbear-0.49.tar.bz2 97ac3d863ffca386aa25b6f60c71ab086aaef591 dropbear-0.49.tar.gz 7ba7b339af41d5ed74911e857ae13c31cd87ed7f dropbear_0.50-0.1_i386.deb 97f31bbe1d36f156ec895de97ecc1d400da5f0e5 dropbear-0.50.tar.bz2 6f56bc88bc29a99c58fe85c98a60249b9782ef36 dropbear-0.50.tar.gz 42cf780b8fbf1b252feb2107dda6a1ad6e55f0a7 dropbear_0.51-0.1_i386.deb cb942783efa6e16b61a3f48da43ed7fb2597014d dropbear-0.51.tar.bz2 78c07d63d74e7f4fb09283ed9fab4defe9e3c35c dropbear-0.51.tar.gz fa902daa0ec40e9c4825b0746d426bd3ab410899 dropbear_0.52-0.1_i386.deb 8c1745a9b64ffae79f28e25c6fe9a8b96cac86d8 dropbear-0.52.tar.bz2 ae927e8b90059a7ba2b2b514d9824c12885b1949 dropbear-0.52.tar.gz 01d9c6673b2b20659b8557cfe6de8386a94f4801 dropbear-0.53.1.tar.bz2 2faf6ca592b70783029c0ec4d4fc9a390fb12e19 dropbear-0.53.1.tar.gz ae151667ee81d1ccc6ad2c14f4d00a0ad1500c66 dropbear-0.53.tar.bz2 e17b611d71d407a8e584aab584322c903ffe2847 dropbear-0.53.tar.gz ebae34ae1f64324cae83f3440b3b05a93835d5fb dropbear-2011.54.tar.bz2 09a4d8e4132565f5abf4b1a16efe786af1ad8a63 dropbear-2011.54.tar.gz 261d033c28031faa34b92390ad5278feb20c6efc dropbear-2012.55.tar.bz2 2c65dd1f423884a38079f5e4386c698015222279 dropbear-2012.55.tar.gz 92a56c17a14f5b41d62605f5225b80bc893162a3 dropbear-2013.56.tar.bz2 643ccee86007917c9be0a2e00bb40de2aba7c239 dropbear-2013.57.tar.bz2 fdbc0ed332b17fc7579dbce6d95d585cf5d653d7 dropbear-2013.58.tar.bz2 86849db6a4cf9dd99c97329ca6446d91f2143f75 dropbear-2013.59.tar.bz2 5a322945e97d7433cfd829e3a089f2b6c43cbb80 dropbear-2013.60.tar.bz2 ca75e08ded7744115c5471df246a3d42431a016e mssh0.1-test1.tar.gz 595c595b961b6867cce7887cc467da3df8049eed oldpage.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (Darwin) iEYEARECAAYFAlJepbsACgkQjPn4sExkf7y6kQCcDdaO3vU/mQVuFhmekM1YvQIx MF0AnjA7HUs4+zCmLfwrmDhpbr4QBQAA =kKWg -----END PGP SIGNATURE----- ++++++ dropbear-keygen.service ++++++ [Unit] Description=Dropbear SSH Key Generator Before=dropbear.service ConditionPathExists=!/etc/dropbear/dropbear_rsa_host_key ConditionPathExists=!/etc/dropbear/dropbear_dss_host_key [Service] Type=oneshot ExecStart=/usr/bin/dropbearkey -t rsa -f /etc/dropbear/dropbear_rsa_host_key ExecStart=/usr/bin/dropbearkey -t dss -f /etc/dropbear/dropbear_dss_host_key RemainAfterExit=no ++++++ dropbear.service ++++++ [Unit] Description=Dropbear SSH Server Daemon Wants=dropbear-keygen.service After=network.target [Service] Type=forking PIDFile=/run/dropbear.pid EnvironmentFile=-/etc/sysconfig/dropbear ExecStart=/usr/sbin/dropbear $OPTIONS [Install] WantedBy=multi-user.target ++++++ dropbear.sysconfig ++++++ ## Path: Network/Remote access/Dropbear SSH ## Description: Dropbear startup parameters ## Type: string ## Default: "" # # Specifies Dropbear startup parameters # For example '-p <port>' changes the TCP port that Dropbear listens on # Check the dropbear manpage for additional options # OPTIONS="" ++++++ rcdropbear ++++++ #!/bin/sh # Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # Startup script for Dropbear # # /etc/init.d/dropbear # # and its symbolic link # /usr/sbin/rcdropbear # ### BEGIN INIT INFO # Provides: dropbear # Required-Start: $network $remote_fs # Required-Stop: $network $remote_fs # Default-Start: 3 5 # Default-Stop: 0 1 2 6 # Short-Description: Dropbear # Description: Dropbear is a relatively small SSH 2 server. ### END INIT INFO # Note on runlevels: # 0 - halt/poweroff 6 - reboot # 1 - single user 2 - multiuser without network exported # 3 - multiuser w/ network (text mode) 5 - multiuser w/ network and X11 (xdm) . /etc/rc.status DROPBEAR_BIN="/usr/sbin/dropbear" DROPBEAR_LOCKFILE="/var/run/dropbear.pid" DROPBEAR_SYSCONFIG="/etc/sysconfig/dropbear" DROPBEAR_DSSKEY="/etc/dropbear/dropbear_dss_host_key" DROPBEAR_RSAKEY="/etc/dropbear/dropbear_rsa_host_key" test -x $DROPBEAR_BIN || { echo "$DROPBEAR_BIN not installed"; if [ "$1" = "stop" ]; then exit 0; else exit 5; fi; } # Check for existence of sysconfig file and read it if [ -r "$DROPBEAR_SYSCONFIG" ]; then . "$DROPBEAR_SYSCONFIG" fi # Reset status of this service rc_reset case "$1" in start) echo -n "Starting Dropbear " if [ ! -r "$DROPBEAR_DSSKEY" ] || [ ! -r "$DROPBEAR_RSAKEY" ]; then $0 keygen fi startproc -p "$DROPBEAR_LOCKFILE" "$DROPBEAR_BIN" $OPTIONS # Remember status and be verbose rc_status -v ;; stop) echo -n "Shutting down Dropbear " killproc -p "$DROPBEAR_LOCKFILE" -TERM "$DROPBEAR_BIN" rc_status -v ;; try-restart) ## Do a restart only if the service was active before. $0 status if test $? = 0; then $0 restart else rc_reset # Not running is not a failure. fi rc_status ;; restart|reload) $0 stop $0 start rc_status ;; status) echo -n "Checking for Dropbear " checkproc -p "$DROPBEAR_LOCKFILE" "$DROPBEAR_BIN" rc_status -v ;; keygen) echo "Creating keys for Dropbear " if [ ! -r "$DROPBEAR_DSSKEY" ]; then dropbearkey -t dss -f "$DROPBEAR_DSSKEY" fi if [ ! -r "$DROPBEAR_RSAKEY" ]; then dropbearkey -t rsa -f "$DROPBEAR_RSAKEY" fi rc_status ;; *) echo "Usage: $0 {start|stop|status|try-restart|restart|reload|keygen}" exit 1 ;; esac rc_exit -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org