Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.1

Related Vulnerabilities: CVE-2017-17439  

Source

Debian Bug report logs - #878144
CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.1

version graph

Package: heimdal-kdc; Maintainer for heimdal-kdc is Brian May <bam@debian.org>; Source for heimdal-kdc is src:heimdal (PTS, buildd, popcon).

Reported by: Michael Eder <eder@fs.tum.de>

Date: Tue, 10 Oct 2017 12:15:02 UTC

Severity: serious

Tags: security, upstream

Found in versions heimdal/7.1.0+dfsg-13, heimdal/7.4.0.dfsg.1-2, heimdal/7.1.0+dfsg-13+deb9u1

Fixed in versions heimdal/7.1.0+dfsg-13+deb9u2, heimdal/7.5.0+dfsg-1

Done: Dominik George <nik@naturalnet.de>

Bug is archived. No further changes may be made.

Forwarded to https://github.com/heimdal/heimdal/issues/353

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Brian May <bam@debian.org>:
Bug#878144; Package heimdal-kdc. (Tue, 10 Oct 2017 12:15:05 GMT) (full text, mbox, link).

Acknowledgement sent to Michael Eder <eder@fs.tum.de>:
New Bug report received and forwarded. Copy sent to Brian May <bam@debian.org>.

Your message had a Version: pseudo-header with an invalid package version:

7.1.0+dfsg-13+deb9u1 amd64

please either use found or fixed to the control server with a correct version, or reply to this report indicating the correct version so the maintainer (or someone else) can correct it for you.

(Tue, 10 Oct 2017 12:15:05 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Michael Eder <eder@fs.tum.de>
To: submit@bugs.debian.org
Cc: Thomas Kittel <kittel@fs.tum.de>
Subject: Remote unauthenticated DoS in Heimdal-KDC 7.1 (Debian)
Date: Tue, 10 Oct 2017 14:01:53 +0200
[Message part 1 (text/plain, inline)]
Package: heimdal-kdc
Version: 7.1.0+dfsg-13+deb9u1 amd64
Severity: important


We are running heimdal-kdc 7.1.0+dfsg-13+deb9u1 amd64 shipped with
Debian stretch for our Domain and have discovered several crashes in the
past few months. Investigation showed that dmesg contained several logs
about segfaults:

[Fr Jun 23 12:07:17 2017] kdc[14596]: segfault at 18 ip 00007f65c02ef5d0
sp 00007ffd1d7f7298 error 4 in libasn1.so.8.0.0[7f65c0268000+a7000]
[Di Jun 27 21:37:26 2017] kdc[10087]: segfault at 18 ip 00007f65c02ef5d0
sp 00007ffd1d7f7298 error 4 in libasn1.so.8.0.0[7f65c0268000+a7000]
[Mo Jul  3 16:18:39 2017] kdc[2656]: segfault at 18 ip 00007fa27ec105d0
sp 00007ffedcb061f8 error 4 in libasn1.so.8.0.0[7fa27eb89000+a7000]
[So Jul  9 08:55:39 2017] kdc[6092]: segfault at 18 ip 00007fa27ec105d0
sp 00007ffedcb061f8 error 4 in libasn1.so.8.0.0[7fa27eb89000+a7000]
[Di Jul 11 13:06:14 2017] kdc[28993]: segfault at 18 ip 00007fb9dccda5d0
sp 00007ffc6e2ee648 error 4 in libasn1.so.8.0.0[7fb9dcc53000+a7000]
[Di Jul 11 23:39:40 2017] kdc[32211]: segfault at 18 ip 00007fb9dccda5d0
sp 00007ffc6e2ee648 error 4 in libasn1.so.8.0.0[7fb9dcc53000+a7000]
[Sa Jul 15 13:20:17 2017] kdc[6902]: segfault at 18 ip 00007fb76d5ef5d0
sp 00007ffc22a84078 error 4 in libasn1.so.8.0.0[7fb76d568000+a7000]
[Fr Jul 21 12:17:37 2017] kdc[9219]: segfault at 18 ip 00007fdfcbf2b5d0
sp 00007ffe9f295128 error 4 in libasn1.so.8.0.0[7fdfcbea4000+a7000]
[So Jul 23 21:10:59 2017] kdc[26977]: segfault at 18 ip 00007fdfcbf2b5d0
sp 00007ffe9f295128 error 4 in libasn1.so.8.0.0[7fdfcbea4000+a7000]
[So Aug  6 12:06:04 2017] kdc[26494]: segfault at 18 ip 00007f342c8d35d0
sp 00007fff8ae39088 error 4 in libasn1.so.8.0.0[7f342c84c000+a7000]
[Di Aug 15 15:21:41 2017] kdc[28412]: segfault at 18 ip 00007f4780b605d0
sp 00007ffd63250328 error 4 in libasn1.so.8.0.0[7f4780ad9000+a7000]
[Mi Aug 16 08:46:13 2017] kdc[5166]: segfault at 18 ip 00007f4780b605d0
sp 00007ffd63250328 error 4 in libasn1.so.8.0.0[7f4780ad9000+a7000]
[Di Aug 29 04:01:58 2017] kdc[5268]: segfault at 18 ip 00007f31fdd065d0
sp 00007ffd8392c748 error 4 in libasn1.so.8.0.0[7f31fdc7f000+a7000]
[Fr Sep  1 16:56:57 2017] kdc[13396]: segfault at 18 ip 00007f31fdd065d0
sp 00007ffd8392c748 error 4 in libasn1.so.8.0.0[7f31fdc7f000+a7000]
[Mo Sep 11 20:10:45 2017] kdc[16093]: segfault at 18 ip 00007f8a096715d0
sp 00007ffd48ba4b28 error 4 in libasn1.so.8.0.0[7f8a095ea000+a7000]
[Di Sep 12 13:46:17 2017] kdc[24683]: segfault at 18 ip 00007f8a096715d0
sp 00007ffd48ba4b28 error 4 in libasn1.so.8.0.0[7f8a095ea000+a7000]

The heimdal-kdc log gave us additional information:

lofar log # zgrep "AS-REQ malformed client name" heimdal-kdc.log*
heimdal-kdc.log:2017-09-11T20:10:46 AS-REQ malformed client name from
IPv4:80.82.77.139
heimdal-kdc.log:2017-09-12T13:46:18 AS-REQ malformed client name from
IPv4:185.100.87.246
heimdal-kdc.log.2.gz:2017-08-29T04:01:59 AS-REQ malformed client name
from IPv4:71.6.135.131
heimdal-kdc.log.2.gz:2017-09-01T16:56:58 AS-REQ malformed client name
from IPv4:34.208.25.133
heimdal-kdc.log.4.gz:2017-08-15T15:21:41 AS-REQ malformed client name
from IPv4:96.126.127.61
heimdal-kdc.log.4.gz:2017-08-16T08:46:13 AS-REQ malformed client name
from IPv4:71.6.158.166
heimdal-kdc.log.5.gz:2017-08-06T12:06:05 AS-REQ malformed client name
from IPv4:71.6.167.142

The KDC was directly reachable over the Internet - those IPs do not
belong to us but seemed to send packets crashing our master or our slave
(we observed the same there).
While waiting to capture one of those packets and reproduce the issues,
my colleague Thomas Kittel located the part of the code responsible for
the crash:

  * RIP in libasn1.so.0 (relativ) 0x875d0.
  * "der_length_visible_string@@HEIMDAL_ASN1_1.0"
  ____________________________
   875d0:       48 8b 3f                mov    rdi,QWORD PTR [rdi]
   875d3:       e9 e8 83 f9 ff          jmp    1f9c0 <strlen@plt>
   875d8:       0f 1f 84 00 00 00 00    nop    DWORD PTR [rax+rax*1+0x0]
   875df:       00
  ____________________________

  * Source:
https://github.com/heimdal/heimdal/blob/master/lib/asn1/der_length.c
  size_t
  der_length_visible_string (const heim_visible_string *data)
  {
      return strlen(*data);
  }

As quickfix, he supposed to include a NULL check (which we did not test
yet): if(!data) return 0;

We managed to get our hands on one of the payloads (c.f. attachments).
It seems to be a syntactically valid Kerberos message (see decoded_der.txt)
with nonsense values but nothing obviously looking like attempts to
inject shellcode or abuse any vulnerability.
I attached the raw bytes of the complete packet as well as the raw bytes
of the Kerberos message only. Replaying the payload lead to reproducible
crashes (steps to reproduce attached) and since we see these packets at
least since June (symptoms for over a year) there seem to be people
making use of this in the wild.

We do currently not know if the packets are only DoS attempts or if the
crashes are only side effects of more severe attacks like leaks or code
execution. We enabled the firewall to drop Kerberos packets coming from
the Internet, but there may be others suffering from these attacks.

We believe that this is a upstream bug. I tried to contact the
developers via PGP-encrypted mail but they did not react.

If there are any open questions, please do not hesitate to contact us!

Best regards,
Michael Eder



[decoded_der.txt (text/plain, attachment)]
[krb_crash.bin (application/octet-stream, attachment)]
[krb_crash_only_krb_packet.bin (application/octet-stream, attachment)]
[steps_to_reproduce_krb_crash.txt (text/plain, attachment)]
[signature.asc (application/pgp-signature, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org:
Bug#878144; Package heimdal-kdc. (Sun, 15 Oct 2017 00:15:05 GMT) (full text, mbox, link).

Acknowledgement sent to Brian May <bam@debian.org>:
Extra info received and forwarded to list. (Sun, 15 Oct 2017 00:15:05 GMT) (full text, mbox, link).

Message #10 received at 878144@bugs.debian.org (full text, mbox, reply):

From: Brian May <bam@debian.org>
To: Michael Eder <eder@fs.tum.de>, 878144@bugs.debian.org
Cc: Thomas Kittel <kittel@fs.tum.de>
Subject: Re: Bug#878144: Remote unauthenticated DoS in Heimdal-KDC 7.1 (Debian)
Date: Sun, 15 Oct 2017 11:12:10 +1100
Michael Eder <eder@fs.tum.de> writes:

> We believe that this is a upstream bug. I tried to contact the
> developers via PGP-encrypted mail but they did not react.

Can you please report this here?

https://github.com/heimdal/heimdal/issues/

As this is now on a public BTS system, there doesn't seem to be any need
to keep this private.
-- 
Brian May <bam@debian.org>

Information forwarded to debian-bugs-dist@lists.debian.org, Brian May <bam@debian.org>:
Bug#878144; Package heimdal-kdc. (Mon, 04 Dec 2017 15:12:03 GMT) (full text, mbox, link).

Acknowledgement sent to Dominik George <nik@naturalnet.de>:
Extra info received and forwarded to list. Copy sent to Brian May <bam@debian.org>. (Mon, 04 Dec 2017 15:12:03 GMT) (full text, mbox, link).

Message #15 received at 878144@bugs.debian.org (full text, mbox, reply):

From: Dominik George <nik@naturalnet.de>
To: 878144@bugs.debian.org
Subject: Re: Remote unauthenticated DoS in Heimdal-KDC 7.1 (Debian)
Date: Mon, 4 Dec 2017 16:00:26 +0100
[Message part 1 (text/plain, inline)]
Hi,

> We are running heimdal-kdc 7.1.0+dfsg-13+deb9u1 amd64 shipped with
> Debian stretch for our Domain and have discovered several crashes in the
> past few months. Investigation showed that dmesg contained several logs
> about segfaults:

We can reproduce this issue at Teckids and have now closed the KDC to
the internet. It was intentional that users could get a ticket over the
internet, but heimdal-kdc crashed at the same code point with the same
cause regularly.

-nik


[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org:
Bug#878144; Package heimdal-kdc. (Tue, 05 Dec 2017 10:24:02 GMT) (full text, mbox, link).

Acknowledgement sent to Brian May <bam@debian.org>:
Extra info received and forwarded to list. (Tue, 05 Dec 2017 10:24:02 GMT) (full text, mbox, link).

Message #20 received at 878144@bugs.debian.org (full text, mbox, reply):

From: Brian May <bam@debian.org>
To: Dominik George <nik@naturalnet.de>, 878144@bugs.debian.org
Subject: Re: Bug#878144: Remote unauthenticated DoS in Heimdal-KDC 7.1 (Debian)
Date: Tue, 05 Dec 2017 21:22:05 +1100
Dominik George <nik@naturalnet.de> writes:

> We can reproduce this issue at Teckids and have now closed the KDC to
> the internet. It was intentional that users could get a ticket over the
> internet, but heimdal-kdc crashed at the same code point with the same
> cause regularly.

Sorry, very short of time lately. Are you able to submit a bug report
upstream?

https://github.com/heimdal/heimdal/issues/

Thanks
-- 
Brian May <bam@debian.org>

Information forwarded to debian-bugs-dist@lists.debian.org, Brian May <bam@debian.org>:
Bug#878144; Package heimdal-kdc. (Tue, 05 Dec 2017 11:51:06 GMT) (full text, mbox, link).

Acknowledgement sent to Dominik George <nik@naturalnet.de>:
Extra info received and forwarded to list. Copy sent to Brian May <bam@debian.org>. (Tue, 05 Dec 2017 11:51:06 GMT) (full text, mbox, link).

Message #25 received at 878144@bugs.debian.org (full text, mbox, reply):

From: Dominik George <nik@naturalnet.de>
To: Brian May <bam@debian.org>
Cc: 878144@bugs.debian.org
Subject: Re: Bug#878144: Remote unauthenticated DoS in Heimdal-KDC 7.1 (Debian)
Date: Tue, 5 Dec 2017 12:48:55 +0100
[Message part 1 (text/plain, inline)]
Control: forwarded -1 https://github.com/heimdal/heimdal/issues/353

Hi Brian,

On Tue, Dec 05, 2017 at 09:22:05PM +1100, Brian May wrote:
> Dominik George <nik@naturalnet.de> writes:
> 
> > We can reproduce this issue at Teckids and have now closed the KDC to
> > the internet. It was intentional that users could get a ticket over the
> > internet, but heimdal-kdc crashed at the same code point with the same
> > cause regularly.
> 
> Sorry, very short of time lately. Are you able to submit a bug report
> upstream?

Done.

I will also happily prepare a patch for stable / stable-security once
upstream gave an opinion concerning the fix.

-nik

[signature.asc (application/pgp-signature, inline)]

Set Bug forwarded-to-address to 'https://github.com/heimdal/heimdal/issues/353'. Request was from Dominik George <nik@naturalnet.de> to 878144-submit@bugs.debian.org. (Tue, 05 Dec 2017 11:51:06 GMT) (full text, mbox, link).

Added tag(s) security and upstream. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Wed, 06 Dec 2017 13:18:03 GMT) (full text, mbox, link).

Marked as found in versions heimdal/7.1.0+dfsg-13. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Wed, 06 Dec 2017 13:18:05 GMT) (full text, mbox, link).

Marked as found in versions heimdal/7.1.0+dfsg-13+deb9u1. Request was from nik@naturalnet.de (Dominik George) to control@bugs.debian.org. (Wed, 06 Dec 2017 15:15:03 GMT) (full text, mbox, link).

Marked as found in versions heimdal/7.4.0.dfsg.1-2. Request was from nik@naturalnet.de (Dominik George) to control@bugs.debian.org. (Wed, 06 Dec 2017 15:15:05 GMT) (full text, mbox, link).

Changed Bug title to 'CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.1' from 'Remote unauthenticated DoS in Heimdal-KDC 7.1 (Debian)'. Request was from nik@naturalnet.de (Dominik George) to control@bugs.debian.org. (Wed, 06 Dec 2017 15:33:04 GMT) (full text, mbox, link).

Severity set to 'serious' from 'important' Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Thu, 07 Dec 2017 07:42:05 GMT) (full text, mbox, link).

Reply sent to Dominik George <nik@naturalnet.de>:
You have taken responsibility. (Sat, 09 Dec 2017 12:03:13 GMT) (full text, mbox, link).

Notification sent to Michael Eder <eder@fs.tum.de>:
Bug acknowledged by developer. (Sat, 09 Dec 2017 12:03:13 GMT) (full text, mbox, link).

Message #44 received at 878144-close@bugs.debian.org (full text, mbox, reply):

From: Dominik George <nik@naturalnet.de>
To: 878144-close@bugs.debian.org
Subject: Bug#878144: fixed in heimdal 7.1.0+dfsg-13+deb9u2
Date: Sat, 09 Dec 2017 12:02:38 +0000
Source: heimdal
Source-Version: 7.1.0+dfsg-13+deb9u2

We believe that the bug you reported is fixed in the latest version of
heimdal, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 878144@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dominik George <nik@naturalnet.de> (supplier of updated heimdal package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384

Format: 1.8
Date: Wed, 06 Dec 2017 13:24:04 +0100
Source: heimdal
Binary: heimdal-docs heimdal-kdc heimdal-multidev heimdal-dev heimdal-clients heimdal-kcm heimdal-servers heimdal-dbg libheimbase1-heimdal libasn1-8-heimdal libkrb5-26-heimdal libhdb9-heimdal libkadm5srv8-heimdal libkadm5clnt7-heimdal libgssapi3-heimdal libkafs0-heimdal libroken18-heimdal libotp0-heimdal libsl0-heimdal libkdc2-heimdal libhx509-5-heimdal libheimntlm0-heimdal libwind0-heimdal libhcrypto4-heimdal
Architecture: source i386 all
Version: 7.1.0+dfsg-13+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Brian May <bam@debian.org>
Changed-By: Dominik George <nik@naturalnet.de>
Description:
 heimdal-clients - Heimdal Kerberos - clients
 heimdal-dbg - Heimdal Kerberos - debugging symbols
 heimdal-dev - Heimdal Kerberos - development files
 heimdal-docs - Heimdal Kerberos - documentation
 heimdal-kcm - Heimdal Kerberos - KCM daemon
 heimdal-kdc - Heimdal Kerberos - key distribution center (KDC)
 heimdal-multidev - Heimdal Kerberos - Multi-implementation Development
 heimdal-servers - Heimdal Kerberos - server programs
 libasn1-8-heimdal - Heimdal Kerberos - ASN.1 library
 libgssapi3-heimdal - Heimdal Kerberos - GSSAPI support library
 libhcrypto4-heimdal - Heimdal Kerberos - crypto library
 libhdb9-heimdal - Heimdal Kerberos - kadmin server library
 libheimbase1-heimdal - Heimdal Kerberos - Base library
 libheimntlm0-heimdal - Heimdal Kerberos - NTLM support library
 libhx509-5-heimdal - Heimdal Kerberos - X509 support library
 libkadm5clnt7-heimdal - Heimdal Kerberos - kadmin client library
 libkadm5srv8-heimdal - Libraries for Heimdal Kerberos
 libkafs0-heimdal - Heimdal Kerberos - KAFS support library
 libkdc2-heimdal - Heimdal Kerberos - KDC support library
 libkrb5-26-heimdal - Heimdal Kerberos - libraries
 libotp0-heimdal - Heimdal Kerberos - OTP support library
 libroken18-heimdal - Heimdal Kerberos - roken support library
 libsl0-heimdal - Heimdal Kerberos - SL support library
 libwind0-heimdal - Heimdal Kerberos - stringprep implementation
Closes: 878144
Changes:
 heimdal (7.1.0+dfsg-13+deb9u2) stretch-security; urgency=high
 .
   * CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.1
     (Closes: #878144)
Checksums-Sha1:
 18092e4d898242aa03f4555155050c203de85c08 3743 heimdal_7.1.0+dfsg-13+deb9u2.dsc
 7160959e5db2804cc0f94e889d3a90f32dfba19b 70108 heimdal_7.1.0+dfsg-13+deb9u2.debian.tar.xz
 30b224320b907cfa5973017a3f81e31ae5c819b8 183232 heimdal-clients_7.1.0+dfsg-13+deb9u2_i386.deb
 202df9729e5fb78e0d5d2c16a6ac034ff7d304d8 4749174 heimdal-dbg_7.1.0+dfsg-13+deb9u2_i386.deb
 1fd02152a905b1504c7ac683e4f81cc44dbcade9 140908 heimdal-dev_7.1.0+dfsg-13+deb9u2_i386.deb
 64b6311faa4ac9a824d937715d91c92c061aff89 104498 heimdal-docs_7.1.0+dfsg-13+deb9u2_all.deb
 8bf74125dd547e22b75623bb0849a1dfbb1ee7b8 57650 heimdal-kcm_7.1.0+dfsg-13+deb9u2_i386.deb
 1cf1d88b6cebd1f7a06882de90a5004592bbaf67 132630 heimdal-kdc_7.1.0+dfsg-13+deb9u2_i386.deb
 6b1353b20575237408318818b181c472944242eb 1275518 heimdal-multidev_7.1.0+dfsg-13+deb9u2_i386.deb
 9c9985a848ad13f7e47cdf3f5f35ef5ab9d49097 35526 heimdal-servers_7.1.0+dfsg-13+deb9u2_i386.deb
 ba11608f9641babb6b5bbf98deb85f588e5aa0ca 14329 heimdal_7.1.0+dfsg-13+deb9u2_i386.buildinfo
 3e87c18c6b2e5e0e547ff0e6697872c5bed0840c 217660 libasn1-8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 21c968bd6e3f1bbbc6cc4839f7fee68efcf48781 133300 libgssapi3-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 2a8f6c261b8fbb5f560e274a10716e23d8791ea0 120006 libhcrypto4-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 21a623ac1dccea4d56c6648a341e1a36467a4610 95530 libhdb9-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 0835d422abcd73547407ab3dac97c31523caf1fb 56670 libheimbase1-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 9f995aae3efe287ed7bf32f47ab361d77eeacc71 42026 libheimntlm0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 674318dd19b48c487c3e26f7e525bd7e2c22a8db 143848 libhx509-5-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a75cf753221af2b3cc43df2974ac6e79351b4467 45842 libkadm5clnt7-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 d145f9eb55f19f90eb27e18b48aa9811fa3cc57f 64596 libkadm5srv8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 c6ae128e9dbe6e13d61b7dfc8ff885a86b596dd5 42450 libkafs0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 947a7337a80f27f97acd4a878a4cbd9a1ff39bc7 85408 libkdc2-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a65eb31dc358dd31c6ad159af5daa25a9d779b33 259294 libkrb5-26-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 bed29de175f8055cc584e25b6951e913ad53eb0d 51006 libotp0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 421d4f940a71b302b16c68e82fa4dc3875c98871 69254 libroken18-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 00a671df2015ba49c0bbe1bb9c244fde19fb632d 38056 libsl0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 4e9388c69a7214109f4c7188746e6ca3c680aae9 74166 libwind0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
Checksums-Sha256:
 c95b3a693cd33f25c1b927637125826652403ccee860ee2f9b393a0155266393 3743 heimdal_7.1.0+dfsg-13+deb9u2.dsc
 677386d6ad1840a154d3105e491a5cc2dda327b20fa92abc1d6f7c527757501d 70108 heimdal_7.1.0+dfsg-13+deb9u2.debian.tar.xz
 c351969cf98180fea57183c49f1b8ee6f2ee049edab98a564c2539dfedba474c 183232 heimdal-clients_7.1.0+dfsg-13+deb9u2_i386.deb
 0de699855f4f7375ccc987ef76349b8e82303e9ac734ee6e8e8a06e57b9bb3f5 4749174 heimdal-dbg_7.1.0+dfsg-13+deb9u2_i386.deb
 c2fc07e47893bf9e5f66c77fea6d72e8d2683f2887202fc627aa345c0c3bbbe7 140908 heimdal-dev_7.1.0+dfsg-13+deb9u2_i386.deb
 eb68c29ab4e5b7f31c1f70ee96886944a9831f136156af52fb0c6c405922441b 104498 heimdal-docs_7.1.0+dfsg-13+deb9u2_all.deb
 dd5959da3e4fcf1eff0b483f51438ae702d04835f30d07c57d2db506d531602e 57650 heimdal-kcm_7.1.0+dfsg-13+deb9u2_i386.deb
 e56ff12f5a3a7fd71990ff02d0b3a4cac720f261099ecde5d826266bfcc47993 132630 heimdal-kdc_7.1.0+dfsg-13+deb9u2_i386.deb
 7b30046f31eea6991905b922cdcf965ef1b20ba9a11fc3cf65b2b9997bee91ea 1275518 heimdal-multidev_7.1.0+dfsg-13+deb9u2_i386.deb
 00badfb5912f1f0f18b63dd4ca7ca51f306109ceaed0bb5bc548bcfa989c304e 35526 heimdal-servers_7.1.0+dfsg-13+deb9u2_i386.deb
 9022c625218102122a458111e8b9a1db5c04878eb3a5ee31a0a1a9da433b324f 14329 heimdal_7.1.0+dfsg-13+deb9u2_i386.buildinfo
 55adfb00126fdca9c2c545a7d6000362e2911a7e813bc27a54e3c3794bf121fc 217660 libasn1-8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 af38b5f79b0dea4495b0ba1f93df8e5d3dcad2a9ef11925d0e19c22acd341b55 133300 libgssapi3-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 2778a3d107986b602956da0d9bf5256994ae4a5d16102dea02bf351ae6ed1309 120006 libhcrypto4-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 47b04e9931d4fae2c89e38fdca2b810874dcd05ee7f69cb4afcf647d7094e31f 95530 libhdb9-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 744e4efe7c921ca20a278f7b6e1a80cd8619d37c1143c977e982c99ddf2b5480 56670 libheimbase1-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 be3813228f9686daa1c17eed8acd5a7c267deced23dc60ec30fa25be9f190d8c 42026 libheimntlm0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 29eaa8ea0249ffe8099538bae5096efa5f3dd27cb5d230092e4dfea5622da14a 143848 libhx509-5-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 3d1504bd6edb43729fe78a7b65e16ae94965d1e893cdb1d44fe6088268b2d15e 45842 libkadm5clnt7-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 d948e2db649509604c81748fec3ef4fea5398a1bd76c84c6b727d5f2905cf400 64596 libkadm5srv8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 8dc23d36f6b358d750f34327224a2a43846aca9fbad4530db7ecc268ec638da8 42450 libkafs0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 bb0b4981fe4b4325487ae048f6e26f3e7d6a2fac07928774ebf0c115bad897c9 85408 libkdc2-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 92fe071d4c1b25796372738db6f87f4cba8d350765e63cafb2cc7c1245ffbd90 259294 libkrb5-26-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 93ed264cd538ddf3a6ab425bb3b16c168a7c697d4cb0c0ebfa2bcf2700053e51 51006 libotp0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 556645621d927c85aa07b89c598c1d81bf510216ddeaa8c4c1ffc73361f83d7a 69254 libroken18-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a7727d11441bb617a25997ae5d2d18aa465e758e51d787ca9f79b15c3a6e312c 38056 libsl0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a847e21ef88929e967d68ec3bc3fcbfd2035ca1b8469774897999a340521463e 74166 libwind0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
Files:
 ecabe815edf9e7b54d249f08c8d1efe7 3743 net optional heimdal_7.1.0+dfsg-13+deb9u2.dsc
 cbf5b9934b2c252610096f2a2107e735 70108 net optional heimdal_7.1.0+dfsg-13+deb9u2.debian.tar.xz
 109ed7c5dea6a6d624aed91c542a4f74 183232 net extra heimdal-clients_7.1.0+dfsg-13+deb9u2_i386.deb
 60e45eb709eb7ca0fb0dbe10839d41e8 4749174 debug extra heimdal-dbg_7.1.0+dfsg-13+deb9u2_i386.deb
 2c25b21cf944855a01add8e0d1b3c914 140908 devel extra heimdal-dev_7.1.0+dfsg-13+deb9u2_i386.deb
 8c3144e72322abd516cc5bb548c238b1 104498 doc extra heimdal-docs_7.1.0+dfsg-13+deb9u2_all.deb
 1580f254a8a1c7bc3519a93e992994c4 57650 net extra heimdal-kcm_7.1.0+dfsg-13+deb9u2_i386.deb
 d685ab6e6a1ebb555f3d14e4ce8a9da0 132630 net extra heimdal-kdc_7.1.0+dfsg-13+deb9u2_i386.deb
 3f4e385aecc7d97dd0fc9dd42e70fc0b 1275518 devel extra heimdal-multidev_7.1.0+dfsg-13+deb9u2_i386.deb
 33c4fa0f2e10399c9f3e05a23dc4ed49 35526 net extra heimdal-servers_7.1.0+dfsg-13+deb9u2_i386.deb
 c8ea602fe9800ec1f2f21aae6e75be8b 14329 net optional heimdal_7.1.0+dfsg-13+deb9u2_i386.buildinfo
 b83d200dc0e9e9b06b04b382d0b8e31c 217660 libs optional libasn1-8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 3b4fe562eb1367ab1b159db528852ce6 133300 libs optional libgssapi3-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 d2ad5feb0fd037ea7cdaeaf5a3f70904 120006 libs optional libhcrypto4-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 85c6f2b562bc8995270a56e502c8900b 95530 libs optional libhdb9-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 13e3cd87e053e900ddb68aab1e88ac82 56670 libs optional libheimbase1-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 1ce7b7c4880e4d32d26b22ed72afbffd 42026 libs optional libheimntlm0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 6ba3a2081970e7c364a3375d53ee04cf 143848 libs optional libhx509-5-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 27fd84d01c2734a0eba99cc9a533130d 45842 libs optional libkadm5clnt7-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 c0b9857ff80dc0067a6cce1578610982 64596 libs optional libkadm5srv8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 840e66b6a15db30fd57d19b3c7c0b46a 42450 libs extra libkafs0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 cd95b227be936fce56eaedafdd8b4776 85408 libs extra libkdc2-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 ed62a71bf3f9c438fa04cb10aad3699a 259294 libs optional libkrb5-26-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 942c43ab6ef02041e7fb58bf93b97d4b 51006 libs extra libotp0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 663407a5c8e29fcfe1253df1fb305be3 69254 libs optional libroken18-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 482025636c9f1a365e7a2ba395e11d95 38056 libs extra libsl0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a8d88bdda919ebccd7ab2edd20871466 74166 libs optional libwind0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (MirBSD)
Comment: ☃ ЦΤℱ—８　☕☂☄
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=UhST
-----END PGP SIGNATURE-----

Reply sent to Dominik George <nik@naturalnet.de>:
You have taken responsibility. (Fri, 15 Dec 2017 03:09:08 GMT) (full text, mbox, link).

Notification sent to Michael Eder <eder@fs.tum.de>:
Bug acknowledged by developer. (Fri, 15 Dec 2017 03:09:08 GMT) (full text, mbox, link).

Message #49 received at 878144-close@bugs.debian.org (full text, mbox, reply):

From: Dominik George <nik@naturalnet.de>
To: 878144-close@bugs.debian.org
Subject: Bug#878144: fixed in heimdal 7.5.0+dfsg-1
Date: Fri, 15 Dec 2017 03:05:33 +0000
Source: heimdal
Source-Version: 7.5.0+dfsg-1

We believe that the bug you reported is fixed in the latest version of
heimdal, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 878144@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dominik George <nik@naturalnet.de> (supplier of updated heimdal package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 15 Dec 2017 01:13:04 +0100
Source: heimdal
Binary: heimdal-docs heimdal-kdc heimdal-multidev heimdal-dev heimdal-clients heimdal-kcm heimdal-servers libheimbase1-heimdal libasn1-8-heimdal libkrb5-26-heimdal libhdb9-heimdal libkadm5srv8-heimdal libkadm5clnt7-heimdal libgssapi3-heimdal libkafs0-heimdal libroken18-heimdal libotp0-heimdal libsl0-heimdal libkdc2-heimdal libhx509-5-heimdal libheimntlm0-heimdal libwind0-heimdal libhcrypto4-heimdal
Architecture: source amd64 all
Version: 7.5.0+dfsg-1
Distribution: unstable
Urgency: high
Maintainer: Brian May <bam@debian.org>
Changed-By: Dominik George <nik@naturalnet.de>
Description:
 heimdal-clients - Heimdal Kerberos - clients
 heimdal-dev - Heimdal Kerberos - development files
 heimdal-docs - Heimdal Kerberos - documentation
 heimdal-kcm - Heimdal Kerberos - KCM daemon
 heimdal-kdc - Heimdal Kerberos - key distribution center (KDC)
 heimdal-multidev - Heimdal Kerberos - Multi-implementation Development
 heimdal-servers - Heimdal Kerberos - server programs
 libasn1-8-heimdal - Heimdal Kerberos - ASN.1 library
 libgssapi3-heimdal - Heimdal Kerberos - GSSAPI support library
 libhcrypto4-heimdal - Heimdal Kerberos - crypto library
 libhdb9-heimdal - Heimdal Kerberos - kadmin server library
 libheimbase1-heimdal - Heimdal Kerberos - Base library
 libheimntlm0-heimdal - Heimdal Kerberos - NTLM support library
 libhx509-5-heimdal - Heimdal Kerberos - X509 support library
 libkadm5clnt7-heimdal - Heimdal Kerberos - kadmin client library
 libkadm5srv8-heimdal - Libraries for Heimdal Kerberos
 libkafs0-heimdal - Heimdal Kerberos - KAFS support library
 libkdc2-heimdal - Heimdal Kerberos - KDC support library
 libkrb5-26-heimdal - Heimdal Kerberos - libraries
 libotp0-heimdal - Heimdal Kerberos - OTP support library
 libroken18-heimdal - Heimdal Kerberos - roken support library
 libsl0-heimdal - Heimdal Kerberos - SL support library
 libwind0-heimdal - Heimdal Kerberos - stringprep implementation
Closes: 850723 868157 878144
Changes:
 heimdal (7.5.0+dfsg-1) unstable; urgency=high
 .
   * New upstream version. (Closes: #850723)
     + CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.4
       (Closes: #878144, #868157)
     + Refresh patches.
   * Bump Standards-Version to 4.1.2 and compat level to 10.
     + Remove explicit reference to dh-autoreconf.
   * Use uscan to get orig source.
     + Refrain from mangling some bundled RFC texts;
       just exclude the mas they are not installed into any binary anyway.
     + Update d/copyright to DEP-5.
     + Can now use standard uscan/gbp/pristine-tar workflow.
   * Fix some lintian errors/warnings.
     + Strip trailing whitespace from changelog.
     + Fix some duplicate long descriptions.
     + Use optional priority everywhere.
     + Update/remove some overrides.
     + Enforce set -e in maintainer scripts.
     + Enable hardening.
   * Migrate to -dbgsym.
   * Add myself to uploaders.
Checksums-Sha1:
 2cebb3987b936bcef04fc112ac46b2ced1f07a0d 3674 heimdal_7.5.0+dfsg-1.dsc
 1ba39f71a5627a23afbc8b987362831bed764f7d 8955005 heimdal_7.5.0+dfsg.orig.tar.gz
 c7ca4e66f33aae8e217f1f6a6c30e3b5d153f672 125776 heimdal_7.5.0+dfsg-1.debian.tar.xz
 6d0e1a99ff4610efee38980fe33fe67880a8cb16 543424 heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb
 ed6aa9f6744a3704dc9be4c6a82caea636297706 182960 heimdal-clients_7.5.0+dfsg-1_amd64.deb
 927e921e74580f522fea17780ad49a6aa1c69670 140784 heimdal-dev_7.5.0+dfsg-1_amd64.deb
 0d7a29f92753d4e7ad02ef404ff19ebc55d85104 106584 heimdal-docs_7.5.0+dfsg-1_all.deb
 a6fbf8cb1d7dae4b171f8a47a78886359b0e4170 101660 heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb
 c6845991006f6fcafad413d7ee0ace217a6d868f 55316 heimdal-kcm_7.5.0+dfsg-1_amd64.deb
 22090a3d011d31a605a5b0c1458c0d9b311fba15 395240 heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb
 a3e53d022eba13e5402ee526fcd89cda10178727 130100 heimdal-kdc_7.5.0+dfsg-1_amd64.deb
 67c96a3febfd3dd32cd967da97fb1ac8eb13c66d 160420 heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb
 a8ef23f3b89828f66eda2fc4993f12449a243fcb 1173320 heimdal-multidev_7.5.0+dfsg-1_amd64.deb
 79d146cb498c479ad14fa27ab051d28429f981a0 16568 heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb
 191debce9285269821d0f739eceac9c0de6da746 35384 heimdal-servers_7.5.0+dfsg-1_amd64.deb
 0894990213b0ec7f32ba90d470e12374ad6ff903 20606 heimdal_7.5.0+dfsg-1_amd64.buildinfo
 5b36d98ac8a10ceb6233bd63dedf91417717bd7b 608316 libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 895bd1bd53a38ff3f4582c24872cfa800dd83456 205340 libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb
 add77d66d53594f48bf60b7655fed02cca99edf9 650480 libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0b8420bbbfb318532615b03d86d78876bd0e11fb 122344 libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb
 030332164de77b7816f9545f994ce085e894d32f 228944 libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 5e0b2e5131b01ae12ae7b6fdb93aea5fcc43915c 112536 libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb
 2b9c259abb2a4d63a1f7dd3c35f9ad40c13279d9 256956 libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 e39e297380220df00604a5f9d4395e11354a4ec0 90228 libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb
 cb9b90e9cd087753a8f592720770f9fd165116e5 75020 libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 805711bf8a8d3d23598051cfc415ce7e9d3bc3f6 53836 libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb
 0fe0d90b8b8e5bc237aca84a4a2362d05db26164 30572 libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 d8069b1e2a6cbc5a772f6b9bb3a74782bbf992c0 40492 libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb
 d0c0408be2b56444e082145113534e97e6c0606f 396880 libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 8030303d6123b670475712d04d3110699984b47f 134220 libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb
 112d7d1de3b4da7cf9a87be34f050f8b972b4358 80244 libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 58f34ca50e25f6753bc8df8589ceb6fd695cbbf5 44160 libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb
 79cf59b7dcf0288983e677da4df8fb9e7bf64c53 174016 libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 53298a7b7967e1eb2da0a7736ce2a3f44bf0a40d 60504 libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb
 b3e9cf73c8aae91f2f78981ee1f86ebd658fee5c 46824 libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 959cf25451e39d6766359fc0e02d1c524f01b5b2 41292 libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb
 7787d669fa571b2ad66d1ce59b171b8bff5b868a 237056 libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 cc3d643d58e08ace75967b02439a617809526d4a 81524 libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb
 3f821b5d04e89749b4fb84053c31441b2a4f3c77 1139168 libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 50e7c030ff09cef147248db0bbc41531f280bcf6 234040 libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb
 2c2ab1a1ccfd98e70d1d85ad6538c1870f050027 65764 libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0a650f2bdbb9bd45ee167180703f9f4737640d9f 55444 libotp0-heimdal_7.5.0+dfsg-1_amd64.deb
 cf2af553afff7dcce3f53c3368c3597b232ab169 129756 libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 a9f126b08ed15f445759af5441fcb668935e5000 66076 libroken18-heimdal_7.5.0+dfsg-1_amd64.deb
 7793bf55ffb61d14a4f8b31466409f5d27d2ac0d 22948 libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 2c920cea3fcb4f75f543604cfb2f7fb034abfaf7 37188 libsl0-heimdal_7.5.0+dfsg-1_amd64.deb
 d6d8b9b13fe016422bdd363286ee0492fda84c73 26944 libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 9102ebf7c770388083e37795a349d1110440dee7 73992 libwind0-heimdal_7.5.0+dfsg-1_amd64.deb
Checksums-Sha256:
 98ce6bf21ac01400ec10a3620fe3c047da4cf63269f521ba96c59bbcaed822bf 3674 heimdal_7.5.0+dfsg-1.dsc
 489119b7a1a900b88163765654dc59cba9a321b078fafc76629e2b85ef140867 8955005 heimdal_7.5.0+dfsg.orig.tar.gz
 7ad6c3f3968989ff06181409e1515a3feaf5a630d27ade7f2f018c9241f8c225 125776 heimdal_7.5.0+dfsg-1.debian.tar.xz
 eb68a9bef68b0e874f576971b251b6096263a5772f3a6526e2cd8e1d82a9bf2d 543424 heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb
 14fe3a54a3a013488d93cd8666e605c1aac3d8879344467ec68c56af75a80f71 182960 heimdal-clients_7.5.0+dfsg-1_amd64.deb
 97677be226e6bb7c71d24082e99a5354b3c3413f67147f5d953e1365948887f5 140784 heimdal-dev_7.5.0+dfsg-1_amd64.deb
 50bee2c6ee0a84d1e504bf27e9898d11ee3b161c15b03215f415a63db97dab80 106584 heimdal-docs_7.5.0+dfsg-1_all.deb
 bbaa3ec06ebd3939d1cd342afaceea4033cd8d8bbd38e8288d20d4714fa649b0 101660 heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb
 c0cb7795991461f8cd9bb465b2e6e6bf79013a1965f61425692b1a665abea748 55316 heimdal-kcm_7.5.0+dfsg-1_amd64.deb
 7af743e56803e74576915a5283798c0f7ef048c787e791f24d464c99b0f13e43 395240 heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb
 d6d90b400000b54bcdfb32f6912e8812b47ed52a1d49d91436d886b0088e6f87 130100 heimdal-kdc_7.5.0+dfsg-1_amd64.deb
 3665fde42c06a712225831c1e7609dad243655eba5a5a1f1f354a8bc695c8ef2 160420 heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb
 77738bf0da5bfc032999fef7ad9aa6f312220e9ae04d08b5214fcb529c8b4f73 1173320 heimdal-multidev_7.5.0+dfsg-1_amd64.deb
 ea4dbffbf497594b7e2fa5836dca6592a71a335c095a2e5d5d377da8bde45af2 16568 heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb
 d21ca4337160c8db15fcf753a82e9fcc1a59a794c4bee5555eda85b5219017c5 35384 heimdal-servers_7.5.0+dfsg-1_amd64.deb
 87536f256e7da258cbb3f9768e452106520dccafeee39c07a17e0d9150f01467 20606 heimdal_7.5.0+dfsg-1_amd64.buildinfo
 4ca779e5211ba59b30770ac783b6372c823f9bd0d409f8125b51f82aafdfbc83 608316 libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0dfdbf724d163663f5520f794d6363ee437fd47d1a4606dffa90a9843186bf8f 205340 libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb
 2b73df857e504e654f9cc64fe7fc1e595ef56c787d7aa0f7886a87fb33b5978b 650480 libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 4e1f482a383f7549571c6afc7dbd203da457ae55ec3f7b19bab469d0e271f6e9 122344 libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb
 e0055e369717bd376e17a505b52af1b7437b74a598f56fe11da846298468742e 228944 libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 5da5023759a3b96163d7c98925e17c1ba19f85081a4b9ce2240b5137fcdeada5 112536 libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb
 49f2bc4dccba85c1d1c98f663dc7a625683b89f0eaf4c28f581a66c984194814 256956 libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 1781f17abe94bc8f24f47f99b137a8bdeda4641ed118610b577ba5f0b96ce4d4 90228 libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb
 a710d8cf135312a556962452721b14fa68e6957b5456110c25e502345237e01f 75020 libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0ce743cb4b2388a12f5143e71bf346f80fcedd34eb612373cd720feec15dc26a 53836 libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb
 9a8c6985e9fecc558f2a19818f7bd7b24cdb119730c15869ab0f14a9acbc6251 30572 libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 e320e089b4946cfd91fcccc111b9148f1c7eb4eea5443f4896a8cc7e61ae9172 40492 libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb
 ac7afe0fa07fe5b71f30b6422e87ea8f087585189e73c398447796c750d9ed4d 396880 libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 285e21edbe268fcc90c02303f5d64c1b91a074268847949efa31f50830402b30 134220 libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb
 3580855e22df074520823d04d21db9070f09246ae3fff2debd8916343acfeb92 80244 libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0f7b17db91c45e50650f2a38685041ade06f214feef15ff49593c36d9f77fca3 44160 libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb
 dff422b18004001c0096f05b0a4c93150af1c4d1554e0be99bf0354cf4ab18b3 174016 libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 8da093a2e0319706c720d74a89ab6a6629ca7508a01d64fb536db28673486ae1 60504 libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb
 546473af3a4a33c1bc74e6608a7cdcca818b167ec54043b7c55f84a99bc212f3 46824 libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 965094f90a33186d0232c8d1647d0f1b076e4aaca2d6085eb2525f9d6e9c1470 41292 libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb
 541a6c0987c4d89c63b08063c0370517ce0b535857a0de96aaf72584738aa59c 237056 libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 7eb1dd5e56b3e51b9d8fbc9560dc58eb4541d8e06fff7c446883a7429fb0e13c 81524 libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb
 bde4e8ece4d98cfa7dd1c14b2fd07a333c16f234a3c12ddffa7ba870ef464b9d 1139168 libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 bda3a1f72210722e7166105137150c5046caaf526e635e5ba3d9a16ba27a1fc2 234040 libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb
 cfbed9dda4a930555ea6381bab0b2c0bbdc6165e97088f0c51527206b602cbaa 65764 libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 6559c76c6f87ca72dafc069a4e84f0179f9405fb436c41f29f23ee3c46b2025d 55444 libotp0-heimdal_7.5.0+dfsg-1_amd64.deb
 01e783c91f62f62fa83c873af2edd9c033764daad6b74e36446dd047e5ab6977 129756 libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 62797ccb86fc5bd572d840b743c208080eae0c4088e1fcc120a2667591f20d01 66076 libroken18-heimdal_7.5.0+dfsg-1_amd64.deb
 4a58652d82e1c31377c67faa9d3da37990add97462452da368d78dd1c431370e 22948 libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 353ad1afaf5328158e5cf521ecac54c80f4f97e7624c8fea659f5d77d31acf29 37188 libsl0-heimdal_7.5.0+dfsg-1_amd64.deb
 df5be2827ad43335f36e348967b07839b7ffa7276d55661e326148db6e7d01d5 26944 libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 b71f69567c343ba55e9c17a3ac2df8b39c1a62b2dbe3c3b7adfe6a20e0a9e341 73992 libwind0-heimdal_7.5.0+dfsg-1_amd64.deb
Files:
 1e7f08d6d923a4fc853606185418b921 3674 net optional heimdal_7.5.0+dfsg-1.dsc
 b45b9d03cdd4f3288e79feba99e13a51 8955005 net optional heimdal_7.5.0+dfsg.orig.tar.gz
 ce5fbebc2e23fca3f6ea2fd2a47e3714 125776 net optional heimdal_7.5.0+dfsg-1.debian.tar.xz
 eedf21d0a98aa0f0eca99505edfcb961 543424 debug optional heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb
 b412c647cf740a8daf73e900b7dd56fd 182960 net optional heimdal-clients_7.5.0+dfsg-1_amd64.deb
 3135a1e02250d850924496e34f5c725c 140784 devel optional heimdal-dev_7.5.0+dfsg-1_amd64.deb
 92b7787b0e4e3d01ae7291464c29b42d 106584 doc optional heimdal-docs_7.5.0+dfsg-1_all.deb
 bfaef794c145c2912a37ba5846b1ce04 101660 debug optional heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb
 d9e3fc1cd3cb3b9be5804793f2c5c1ab 55316 net optional heimdal-kcm_7.5.0+dfsg-1_amd64.deb
 a18c9fe2f1cc52849db2e182a37ad1f5 395240 debug optional heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb
 f8e837b1cac7d5246bc735039e75df45 130100 net optional heimdal-kdc_7.5.0+dfsg-1_amd64.deb
 df7d8e0beb2512af284e33606966200c 160420 debug optional heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb
 61ee86204bbb2c69e78df040f7d14a40 1173320 devel optional heimdal-multidev_7.5.0+dfsg-1_amd64.deb
 a0c6a35e9afb6b5ce19d3297f4dbeb81 16568 debug optional heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb
 8d7bd210c837428d28c54138f3770fb8 35384 net optional heimdal-servers_7.5.0+dfsg-1_amd64.deb
 7a1690091ad4dac3e4220c2619ff7f93 20606 net optional heimdal_7.5.0+dfsg-1_amd64.buildinfo
 c6f78b5e715f4276f2dfe36a91263704 608316 debug optional libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 4cc8c9f107c70b84af8841997069ad6d 205340 libs optional libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb
 76e3662c5decf1f91869fba3d4e5038f 650480 debug optional libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 3ee2ad5c84c1cfbb01ed956285b523d0 122344 libs optional libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb
 40ad70cc790917501acc0444f8a9c77a 228944 debug optional libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 43e9d027620ee392ff6e54db0381892e 112536 libs optional libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb
 1ff06f9c6c267a9cd6fc2041052c8a0a 256956 debug optional libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 796931b259857c9c480e25803cbf7e3a 90228 libs optional libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb
 95ee99a316abd85a154eaf2ffed9f309 75020 debug optional libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 b5d08f1f0a4eca8211a3751c43445a48 53836 libs optional libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb
 89bd2831c62cdd7a3200c5bff4fd4f76 30572 debug optional libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 3876734d20c5a2308f60008216052735 40492 libs optional libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb
 976fc1dee4af11e4be7f24e5da99dba0 396880 debug optional libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 32c9d79131f6f5b04155611142a116d5 134220 libs optional libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb
 6a6b521a81b2dcab45000524922cd693 80244 debug optional libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 5b659f64f86103704a41699e153ab95a 44160 libs optional libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb
 8e2feee5b4c8401378fe9f7ea3ba0e3f 174016 debug optional libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 52a5572db05e1270f94fb0f647789b3b 60504 libs optional libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb
 498e2dc04c2d72364509916f8520e563 46824 debug optional libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 112fede1e1fde311a99e08b211511c55 41292 libs optional libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb
 6cf1555775e23bdb7f919e88d38aa94c 237056 debug optional libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 9d82ccd6a62f3b3405f4371975f61c86 81524 libs optional libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb
 d4c635c9f6032aa4589c49914b49e132 1139168 debug optional libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 be68bb17a2db71bf59f1dccd18b98304 234040 libs optional libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb
 8df9e74f311b9f2c368fd39e657dca7b 65764 debug optional libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 4d29cf0be8aa75033e12f0e9133c25f1 55444 libs optional libotp0-heimdal_7.5.0+dfsg-1_amd64.deb
 41ccb8fc8270590db3aa4f3f5d2b67fb 129756 debug optional libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 1bc42f60831544719bb9d5dec5a16f1f 66076 libs optional libroken18-heimdal_7.5.0+dfsg-1_amd64.deb
 8460b71a23380bff3f2d1b5ca5df802d 22948 debug optional libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0179a22f5f3316602543f55aad85e200 37188 libs optional libsl0-heimdal_7.5.0+dfsg-1_amd64.deb
 c2b1c09c8482f1dcda3c469024a46741 26944 debug optional libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 dc0ec30c08198a6bba2a5d4a113b28d2 73992 libs optional libwind0-heimdal_7.5.0+dfsg-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=v5io
-----END PGP SIGNATURE-----

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 16 Apr 2018 07:28:12 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 18:30:37 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started