Comment 17 for bug 10334

Revision history for this message
Colin Watson (cjwatson) wrote :

openssh (1:3.8.1p1-14ubuntu1) hoary; urgency=low

  * Resynchronise with Debian.

 -- Colin Watson <email address hidden> Mon, 29 Nov 2004 11:27:15 +0000

openssh (1:3.8.1p1-14) experimental; urgency=low

  * We use DH_COMPAT=2, so build-depend on debhelper (>= 2).
  * Fix timing information leak allowing discovery of invalid usernames in
    PAM keyboard-interactive authentication (backported from a patch by
    Darren Tucker; closes: #281595).
  * Make sure that there's a delay in PAM keyboard-interactive
    authentication when PermitRootLogin is not set to yes and the correct
    root password is entered (closes: #248747).

 -- Colin Watson <email address hidden> Sun, 28 Nov 2004 18:09:37 +0000