-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:29:20 +0100 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: amd64 Version: 1:10.0p1-7+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1130595 Changes: openssh (1:10.0p1-7+deb13u2) trixie-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: 64d391abe6b3488935e7570ca845409b89a44135 4055744 openssh-client-dbgsym_10.0p1-7+deb13u2_amd64.deb ae4fe86f14abefc91bcc0fdff7a24bc45d63aa3e 393012 openssh-client-udeb_10.0p1-7+deb13u2_amd64.udeb 81ee5403559c692363d565aad95d8269b99847ed 985740 openssh-client_10.0p1-7+deb13u2_amd64.deb 3d12d109e78aeac20d1344a04d5a6f8af68ff3f6 2519164 openssh-server-dbgsym_10.0p1-7+deb13u2_amd64.deb d1dfa712b8777b72b27dbf6a8719ac4e115d4101 507740 openssh-server-udeb_10.0p1-7+deb13u2_amd64.udeb cde7a0ac2f7608aa3d99f662209f274d3d199cd5 601604 openssh-server_10.0p1-7+deb13u2_amd64.deb 94d9af147ca6ef0f6a3b9790db9d5a270aab8c82 168928 openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_amd64.deb e8f5d8a5a9bfe1bcde39a451fc7dbeb6e29d6470 65320 openssh-sftp-server_10.0p1-7+deb13u2_amd64.deb 4b1f74836df09b1b001b55e217bc590c01e3ef76 3119288 openssh-tests-dbgsym_10.0p1-7+deb13u2_amd64.deb d447977cf71ae4d8f9f9d70e1a3f22448c205801 1034224 openssh-tests_10.0p1-7+deb13u2_amd64.deb 5507a2063b3a8a7fbe8adacc9cf62c10d794f361 18661 openssh_10.0p1-7+deb13u2_amd64-buildd.buildinfo 30e3af6932ecd5306cc9918f4e1faa925965d2bd 17276 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_amd64.deb 3e31596b13e22bd1eb44570f06612edb3ddbb3f1 156608 ssh-askpass-gnome_10.0p1-7+deb13u2_amd64.deb Checksums-Sha256: 13a7f7fb966af440ba16e9ae5b7778b1abb4c64f65ba03abe5b1ecdaed6d4fbe 4055744 openssh-client-dbgsym_10.0p1-7+deb13u2_amd64.deb 3c55c10510c114a0abca87e313e6e099bc9159516195c577a518a8a4fb917f2a 393012 openssh-client-udeb_10.0p1-7+deb13u2_amd64.udeb e6bbb079e06539ecebd598b74f7725299ba61cebd64a2cfb09f2bab8fbe25d18 985740 openssh-client_10.0p1-7+deb13u2_amd64.deb 90c4f466ead2508487f09fc1047605f819fcfca4af6ce051b004662da4cef6bc 2519164 openssh-server-dbgsym_10.0p1-7+deb13u2_amd64.deb 2a64e1560663ccf3708c02f5baa526ca1bb676c012cee93e2014d2befd69d14a 507740 openssh-server-udeb_10.0p1-7+deb13u2_amd64.udeb 46e9d73149ba34744d17f5859e8e7f0277f3f7f2daf078dd4f477dd1798f7b78 601604 openssh-server_10.0p1-7+deb13u2_amd64.deb 8138d652583c6ace06eedee986951913a0bfd186f9084a85c3634511a1485d7a 168928 openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_amd64.deb ceafc87f74e71d2b8346f7715064bfee197bdf2848e0a425e370e5cc4317d1f4 65320 openssh-sftp-server_10.0p1-7+deb13u2_amd64.deb 2ae826522de0fd2efcb7933c85c299e32d8300d6965b27daa48506d5a4435e36 3119288 openssh-tests-dbgsym_10.0p1-7+deb13u2_amd64.deb 583b212e73e14b52327edd28289c567b6a1a6b59851123f56d32e84741935b68 1034224 openssh-tests_10.0p1-7+deb13u2_amd64.deb db3ef2168589945b3c4d393312d383d798205c7ba5aa5d7bda8f86b0966446ca 18661 openssh_10.0p1-7+deb13u2_amd64-buildd.buildinfo 58fe2392aa0b8a7a31f8d38f9ea6ea6b7698a8b6852d652315e3db19d68b884e 17276 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_amd64.deb a3c58732a6c0e44b1a75d2c14371c9830f2e26e13ac92aeab44ba0d1b95119a9 156608 ssh-askpass-gnome_10.0p1-7+deb13u2_amd64.deb Files: 11de7393ab568664a4e0835c564b3af6 4055744 debug optional openssh-client-dbgsym_10.0p1-7+deb13u2_amd64.deb 8b6e208986d2d03760412e2df27237f4 393012 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u2_amd64.udeb 2cf37c18d452937e9f6e96d21214214d 985740 net standard openssh-client_10.0p1-7+deb13u2_amd64.deb 919a0b219e6d326908937b09c1e1b75c 2519164 debug optional openssh-server-dbgsym_10.0p1-7+deb13u2_amd64.deb 109f2005c21a5d07b9b48b96c0d6f9ac 507740 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u2_amd64.udeb cae7a8639e6a744765925b87a11aaf7d 601604 net optional openssh-server_10.0p1-7+deb13u2_amd64.deb ae5512cd185713157f3469654624248d 168928 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_amd64.deb 9634eafa552773f2de8b69f06ef1778d 65320 net optional openssh-sftp-server_10.0p1-7+deb13u2_amd64.deb 84a1e07210e12c11d907a921ee781613 3119288 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u2_amd64.deb 03d64461cbb08e4435667219edf4cf2f 1034224 net optional openssh-tests_10.0p1-7+deb13u2_amd64.deb 5877a1313479e8a3a879c35803603035 18661 net standard openssh_10.0p1-7+deb13u2_amd64-buildd.buildinfo 75a84f75b53ebeb45c79f84dd51a9176 17276 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_amd64.deb a094c4743c504ecf0f55010d0f12b8e4 156608 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmnRpuIACgkQTwt/65ON 6zfPVw/+PabeD6q1ULEJ1u38HteSLoOGbnIUQGXo8A2GYkqKLNk4Mp8RrvQ7XgM6 jG8qcWOBhqmc1wReRDGqKw+FCWqbOB+KUF6g5cDhUyE48AzIDp+CHc27uBCypNfB Rcsr4mTVKInE+OpvkePzSP78kDfSgjFOIDTeCNuXr+nQhICsvOO9pMCAMTMgolb7 9czJ5qJPJjypLWveV2HSERklk9oU4sHl/YMxObLkA2PF1sOUleq0dbL74fPLHC8R eK5WtaxrD5/5RA7xpg6z3CLJAnkd2wvGZVViUqwMynLXMXNS1ilfbf2CoIrd1bDG dMlGnaJ87DuibriNpQB0qRYncIYVdBLyOJvjb2FTN7nG7PYMpPmedBcPBPjCHOwO 9QYmz+QKdXQh2rTKAYk9BIR2sa99YZBtan73y20DcQHjia5/ug5Qo8quqe2dr1w2 73zpbK1UWvDGeM6k4s+IA5UHt3osycpZDD4XRL9Fn0GaFcSjw4YVBXcLjLo/infv kp56NPvP2LON2S2+iMYt0LyjH1GV7FL9P7g+ZmVQCj08HEU+6yCI51mKBb3DHZLy aiiCljJDU80FpwiS4US9DFzHPPqoUiIaauP1pV93ZM/a7J7Ly5BAaQHctC9txKgq Nl7EaH/0zJbG7AwwFaIw/HTho+SAKJsQqag4lHvr2/U5AVwI6sk= =GACc -----END PGP SIGNATURE-----