-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 03 Oct 2015 20:47:33 +0200 Source: dropbear Binary: dropbear-bin dropbear-run dropbear-initramfs dropbear Architecture: source amd64 all Version: 2015.68-1 Distribution: unstable Urgency: low Maintainer: Guilhem Moulin <guil...@guilhem.org> Changed-By: Guilhem Moulin <guil...@guilhem.org> Description: dropbear - transitional dummy package for dropbear-{run,initramfs} dropbear-bin - lightweight SSH2 server and client - command line tools dropbear-initramfs - lightweight SSH2 server and client - initramfs integration dropbear-run - lightweight SSH2 server and client - startup scripts Closes: 558115 584780 626181 631858 632656 689618 692932 715048 720987 720988 735203 739519 761143 775222 776976 777324 793006 793917 797939 Changes: dropbear (2015.68-1) unstable; urgency=low . * New co-maintainer. . [ Matt Johnston ] * New upstream release. (Closes: #631858, #775222.) . [ Guilhem Moulin ] * debian/source/format: 3.0 (quilt) * debian/compat: 9 * debian/control: + Bump Standards-Version to 3.9.6 (no changes necessary). + Add Homepage, Vcs-Git, and Vcs-Browser fields. * debian/copyright: add machine-readable file. * Split up package in dropbear-bin (binaries), dropbear-run (init scripts) and dropbear-initramfs (initramfs integration). 'dropbear' is now a transitional dummy package depending on on dropbear-run and dropbear-initramfs. (Closes: #692932.) * Refactor the package using dh_* tools, including dh_autoreconf. (Closes: #689618, #777324, #793006, #793917.) * Add 'Multi-Arch: foreign' tags. * dropbear-run: + Add a status option to the /etc/init.d script. + Pass key files with -r not -d in /etc/init.d script. (Closes: #761143.) + Post-installation script: Generate missing ECDSA in addition to RSA and DSS host keys. (Closes: #776976.) * dropbear-initramfs: + No longer mark /usr/share/initramfs-tools/conf-hooks.d/dropbear as a configuration file, since it violates the Debian Policy Manual section 10.7.2. (Regression from 2014.64-1.) Instead, move the file to /etc/initramfs-tools/conf-hooks.d/dropbear and add a symlink in /usr/share/initramfs-tools/conf-hooks.d. + Delete debian/initramfs/premount-devpts, since /dev/pts in mounted by init since initramfs-tools 0.94. (Closes: #632656, #797939.) + Auto-generate host keys in the postinstall script, not when runing update-initramfs. Pass the '-R' option (via $PKGOPTION_dropbear_OPTION) for the old behavior. Also, print fingerprint and ASCII art for generated keys (if ssh-keygen is available). + Revert ad2fb1c and remove warning about changing host key. Users shouldn't be encouraged to use the same keys in the encrypted partition and in the initramfs. The proper fix is to use an alternative port or UserKnownHostFile. + Set ~root to `mktemp -d "$DESTDIR/root-XXXXXX"` to avoid collisions with $rootmnt. (Closes: #558115.) + Exit gracefully if $IP is 'none' or 'off'. (Closes: #692932.) + Start dropbear with flag -s to explicitly disable password logins. + Terminate all children before killing dropbear, to avoid stalled SSH connections. (Closes: #735203.) + Run configure_networking in the foreground. (Closes: #584780, #626181, #739519.) + Bring down interfaces and flush IP routes and addresses before exiting the ramdisk, to avoid dirty network configuration in the regular kernel. (Closes: #715048, #720987, #720988.) The interfaces considered are those matching the $DROPBEAR_IFDOWN shell pattern (default: '*'); the special value 'none' keeps all interfaces up and preserves routing tables and addresses. Checksums-Sha1: fc2e686b5ac53e34b45d953aabb3f88c0a9276e0 2113 dropbear_2015.68-1.dsc 42ef0bfd45066bcf641b689f4e92337d2dd5f3bf 1805539 dropbear_2015.68.orig.tar.gz 5fd8f076104fd783178a46fbc024b455a49aef61 17508 dropbear_2015.68-1.debian.tar.xz fd017943e36d42258cefb0d13a7b2345dbad9d0b 178118 dropbear-bin_2015.68-1_amd64.deb dc40a520003b92322290ea694de4cdff139d7c48 3848 dropbear-initramfs_2015.68-1_amd64.deb 7de238c3014624dc152a825bf9693deb3150303c 4752 dropbear-run_2015.68-1_amd64.deb 6cc65cbe277d8de1aa85701af889138a152e6955 27106 dropbear_2015.68-1_all.deb Checksums-Sha256: 552d81f3605b3d81d172289ea54823bdf86972a34c2845c995bc245e7f5d72f0 2113 dropbear_2015.68-1.dsc e37362515ec09ca59362f4bbb61ff2982aa23028eb161b7eb5ac99e182c14880 1805539 dropbear_2015.68.orig.tar.gz 5cd34aa4f34e33ec3e1bbc39eac461cea05573bdb8cbf47e9d7ba23177ff60fd 17508 dropbear_2015.68-1.debian.tar.xz 6a104a5517b76ce578d33349874fcb74ff1b1394d897c09c517a575bf14b2178 178118 dropbear-bin_2015.68-1_amd64.deb e571802e5658b9d00d785c44b57db13dd8ad03976c355db5f537edb519acce3c 3848 dropbear-initramfs_2015.68-1_amd64.deb fbd291dbd285194d2d9d65632a73d90064061179877223fbf485fbd18a26ef66 4752 dropbear-run_2015.68-1_amd64.deb fdfa52f60984c8efea92bdcfcc0f497b1bbf905b7bf50ec676a5b4b41f3ba2ac 27106 dropbear_2015.68-1_all.deb Files: 9daa2e8e6dfd5bb739cd6893e5ddc19f 2113 net optional dropbear_2015.68-1.dsc b58c7852cfceddb8e41005bdc98898a6 1805539 net optional dropbear_2015.68.orig.tar.gz c1054efb70902128a888c806c93a0bf0 17508 net optional dropbear_2015.68-1.debian.tar.xz 454f454cf9aa5a8a8dea9d4ba2fa79e7 178118 net optional dropbear-bin_2015.68-1_amd64.deb d124df9f2d3a3dfd24d5814ec3d18d00 3848 net optional dropbear-initramfs_2015.68-1_amd64.deb f7dd3ccf7f8ef66e3c1f2ecaf1040bbb 4752 net optional dropbear-run_2015.68-1_amd64.deb 3d0ec159bb5f9876009272636fc3e8d2 27106 oldlibs extra dropbear_2015.68-1_all.deb
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWGB9LAAoJEPNPCXROn13ZBtEP/1ni5m23OcoKOZ95EWwwt0D+ zaP8VVZF1oikhWvxYJWMQUJ08OLMPwxG3mabl4aVdK0ynkDVyb5mC7tLozcZKz2g PeSS1h6tWHKMtCKLtcElgJqkV/rBe7dXxgfu/3VFgg+GzPdtzHgGeviczuNg5DMR udVBRCCNbOrE0IKd5674AdPnzKZq4Zz6guL5GXV0U2bOFYrZCgYNyn7Uv2/iZ/WJ Ub1EEwbYG2rpFqyncVGpN+l6CyyaYGQ+lTYs3h+WKpR7kfJZRqtjvPQ4w8vhbTHi afYW97fSeBTNZ8dEjPwYkKYhN6DM0WrDxnTRVydn9655kdwDPJmayRL0uPWDQ/5g 6aVo1E758UQoZVT96ROFzvZrEwqnhEcavIfkdpNehCX9rmZR6Ho6Ptg9dHiqgF2I cGHOqcWqGS10hQXLtgZTtraK2SJj1dlsf/JMhQT+6KF/cn2U+o6JYHgLZzjX+2u8 DVKdQFTcbsE5RaHyg2NKkoJZ60MGFPhPV0V4UDkJnxgUlU+2arqlgFT3nyFL2s1f Y6BIJanuX8ZcpkyPmdA0dSKaulMiokw8eFUl3pnGn06eBao3oRhQTfgHU2/6RAfh 5nMfI0bfgBfOwemQqfywXLZ9bjfGN30Rm3fB3NLXLXNz8nLQM0qu/LFxUBd3EhdD LTIMvcAz/p+ObUdDhcfx =/3s1 -----END PGP SIGNATURE-----