[Secure-testing-team] Bug#726019: dropbear: CVE-2013-4421

[Salvatore Bonaccorso]

Package: dropbear
Severity: important
Tags: security patch upstream

Hi,

the following vulnerability was published for dropbear.

CVE-2013-4421[0]:
memory exhaustion denial of service

See also [1] for the isolated upstream patch.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4421
    http://security-tracker.debian.org/tracker/CVE-2013-4421
[1] https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f

Please adjust the affected versions in the BTS as needed (in
particular I have not verified older version in oldstable).

Regards,
Salvatore