diff options
| author | Colin Watson <cjwatson@debian.org> | 2004-11-28 12:31:03 +0000 |
|---|---|---|
| committer | Colin Watson <cjwatson@debian.org> | 2004-11-28 12:31:03 +0000 |
| commit | 9ebd617cc085a14c1a197f140b037a3679ba3e2e (patch) | |
| tree | 2250f61f7e87ee984ca9b8c3d47b63c283c072f3 /debian | |
| parent | 4ce1a4433f9ee75c4c5508db6e499db725882887 (diff) | |
Fix timing information leak allowing discovery of invalid usernames in PAM
keyboard-interactive authentication (backported from a patch by Darren
Tucker; closes: #281595).
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/changelog | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 4a53bef7e..8693c48ef 100644 --- a/debian/changelog +++ b/debian/changelog | |||
| @@ -1,3 +1,11 @@ | |||
| 1 | openssh (1:3.8.1p1-8.sarge.4) UNRELEASED; urgency=high | ||
| 2 | |||
| 3 | * Fix timing information leak allowing discovery of invalid usernames in | ||
| 4 | PAM keyboard-interactive authentication (backported from a patch by | ||
| 5 | Darren Tucker; closes: #281595). | ||
| 6 | |||
| 7 | -- Colin Watson <cjwatson@debian.org> Sun, 28 Nov 2004 12:12:55 +0000 | ||
| 8 | |||
| 1 | openssh (1:3.8.1p1-8.sarge.3) unstable; urgency=low | 9 | openssh (1:3.8.1p1-8.sarge.3) unstable; urgency=low |
| 2 | 10 | ||
| 3 | * Enable threading for PAM, on Sam Hartman's advice (closes: #278394). | 11 | * Enable threading for PAM, on Sam Hartman's advice (closes: #278394). |