Package: ckermit
Version: 302-5.3
Severity: grave
Tags: security
Justification: user security hole

Dear Maintainer,

Please rebuild C-Kermit against the new OpenSSL in Stretch.  Currently all 
SSL/TLS functionality in C-Kermit is disabled due to detecting mismatching 
libraries.


-- System Information:
Debian Release: 9.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: arm64 (aarch64)

Kernel: Linux 4.9.0-8-arm64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ckermit depends on:
ii  debconf [debconf-2.0]  1.5.61
ii  libc6                  2.24-11+deb9u3
ii  libcomerr2             1.43.4-2
ii  libgssapi-krb5-2       1.15-1+deb9u1
ii  libk5crypto3           1.15-1+deb9u1
ii  libkrb5-3              1.15-1+deb9u1
ii  libncurses5            6.0+20161126-1+deb9u2
ii  libpam0g               1.1.8-3.6
ii  libssl1.0.2            1.0.2q-1~deb9u1
ii  libtinfo5              6.0+20161126-1+deb9u2

Versions of packages ckermit recommends:
ii  openbsd-inetd [inet-superserver]  0.20160825-2
ii  openssh-client [ssh-client]       1:7.4p1-10+deb9u4

ckermit suggests no packages.

-- debconf information:
  ckermit/iksd-anon: false
  ckermit/iksd-no-inetd:
  ckermit/iksd: false
  ckermit/iksd-anondir: /home/ftp

Reply via email to