-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:33:31 +0100 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: arm64 Version: 1:9.2p1-2+deb12u9 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1130595 Changes: openssh (1:9.2p1-2+deb12u9) bookworm-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: 369bd73fcde5e2ba28a1976310129c57f3bc636a 3784908 openssh-client-dbgsym_9.2p1-2+deb12u9_arm64.deb 84f0fdf141822d178bdd47d4a0ebcb2997ca50cc 339608 openssh-client-udeb_9.2p1-2+deb12u9_arm64.udeb 0cce0cac5854ddd4aee55930f8b68b24c1750bda 934600 openssh-client_9.2p1-2+deb12u9_arm64.deb 1ddfa9b9bc9a6f0dc998679f041dc9e5c3092d56 943844 openssh-server-dbgsym_9.2p1-2+deb12u9_arm64.deb 1718566aa4fe338ca9060925077e90e28369625f 351980 openssh-server-udeb_9.2p1-2+deb12u9_arm64.udeb 193005cedfe084486f61d6eac82d7d10723692a6 410976 openssh-server_9.2p1-2+deb12u9_arm64.deb 880ca48d4601fb5c6e3ea2f723b21f8decf2a3be 166836 openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_arm64.deb 50b5f205cf0cecd7a0319d2028c99784442835ce 60276 openssh-sftp-server_9.2p1-2+deb12u9_arm64.deb 901c3b59b3a2e355131d959f7d98beef0653f984 2958576 openssh-tests-dbgsym_9.2p1-2+deb12u9_arm64.deb 56b36b13e9e6b958749d31896f35da1a7f50be1b 1016940 openssh-tests_9.2p1-2+deb12u9_arm64.deb 87e4cf1a3c01dc93f138d11ad4148237d5238fd2 18772 openssh_9.2p1-2+deb12u9_arm64-buildd.buildinfo c20f17021cfc5f8c0102244db19c38544e8214d9 16992 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_arm64.deb d0c3b50e87f74c52a6bdc20497dc0ce261c4c388 188144 ssh-askpass-gnome_9.2p1-2+deb12u9_arm64.deb Checksums-Sha256: d198d155c72b3f0b43ca816b9e4a7c6a82a343c8aa1feb7d01c962454d08f286 3784908 openssh-client-dbgsym_9.2p1-2+deb12u9_arm64.deb 2aca9f5c2f28a28ac181dea95a83650e47ddd5935aae14592f7c97cfcc805361 339608 openssh-client-udeb_9.2p1-2+deb12u9_arm64.udeb 8058f41696f15d1c8046d3ba7c0959c6385fde5a86385ddb32ca7cbd83644797 934600 openssh-client_9.2p1-2+deb12u9_arm64.deb 679af2a89f5a854de46006d20b7adcb354f961b6d050a48f0a1d9ddb3636db14 943844 openssh-server-dbgsym_9.2p1-2+deb12u9_arm64.deb cc6ca3bcde78fb9539a25d4b1d4605eb849f3beaa5db43b4e028180c0cfabb4a 351980 openssh-server-udeb_9.2p1-2+deb12u9_arm64.udeb ad0b59e2c075d046089ee1f2f967182b59f731579b2c016722f63d2951483ae8 410976 openssh-server_9.2p1-2+deb12u9_arm64.deb 39e2cb45696684b81b8f32fd0c08053e94a657e7027f64beb100b8c340a9cfee 166836 openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_arm64.deb 61c53043104ba2dfbda63f73e94d5aeae3fc75fa5d93a7a54c968e745b81d75b 60276 openssh-sftp-server_9.2p1-2+deb12u9_arm64.deb a7be21e889a8c85701c7b992570b1a42d845e89c28bad15db386b7d5263b009b 2958576 openssh-tests-dbgsym_9.2p1-2+deb12u9_arm64.deb a1c31b0bb27f295127187578bb17d0f466249f42c9dccde3004ee2ed6885aeca 1016940 openssh-tests_9.2p1-2+deb12u9_arm64.deb d79d6de23556731f51514cc0954696117739d4d4275788532011247125e071b7 18772 openssh_9.2p1-2+deb12u9_arm64-buildd.buildinfo abbca8641097696e91718f63549cfe04836233fd0f9c73a31f7745ac27cf797e 16992 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_arm64.deb 7ac603b6cbce0ee36378f341ea931333db1b7aba67132357167e33ba487de739 188144 ssh-askpass-gnome_9.2p1-2+deb12u9_arm64.deb Files: b71ef24e16189a30e7421246ae17eb69 3784908 debug optional openssh-client-dbgsym_9.2p1-2+deb12u9_arm64.deb e90b79fd83667e981e147771c4a7e6b6 339608 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u9_arm64.udeb c4637150a73f5c8bf0232d4ac373c21a 934600 net standard openssh-client_9.2p1-2+deb12u9_arm64.deb 94687a831bbbb417133a9db862127de5 943844 debug optional openssh-server-dbgsym_9.2p1-2+deb12u9_arm64.deb 2b126b920673b81022cee3b98288dc2d 351980 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u9_arm64.udeb d8be220a0dc77c028b8ad5a9839eec1f 410976 net optional openssh-server_9.2p1-2+deb12u9_arm64.deb cce7d4162d67552898c6aa3c3a9c3dab 166836 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_arm64.deb 3de08e997c2e2f5cfdc8d75cbaf6b401 60276 net optional openssh-sftp-server_9.2p1-2+deb12u9_arm64.deb d3e85f7f61580e94685c2fb76598d6f7 2958576 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u9_arm64.deb 7923744c46cfec8169cdaf0c4a8886c2 1016940 net optional openssh-tests_9.2p1-2+deb12u9_arm64.deb 8193eb58c680d203ed20c4cde65aae45 18772 net standard openssh_9.2p1-2+deb12u9_arm64-buildd.buildinfo 5672223b5c47e848fd427c371d97c066 16992 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_arm64.deb 140f2165fe708e0929ae3121daf60d56 188144 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u9_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmnRp+QACgkQvzDqKQSG l8WB8g//WZ4nAI05aUIL2tXteugM9lszbvZZH/eZVDOsYZYSn1GVKqqDLj0OtXDf QTDANOHV1EUzDKKmv+T+q6Obkvq/Zg12lNNv287F4aOLhCDdjYMOhBzKSkuQINVe xEW+ufGuHmzHVo2ugvEfwycEJRRgKbavZ305sX/F4p+m1GySnmKavl+7u6ULcVqm /AeitZaRcH6LRIbW6DPEj4cOzWmdXvm3P5VmoR1+c33705Z4Z7ZpYSWkSGkCrvsd NEjnrPk85CePYhF1Pnpz9LadefX3GJr6svj2tyxTV/XyIeCQT3fFcmtbdItjy7wn 8mSGKnt8Elt1G062A1yUGw9wvvWLUdd3K3maxckRFB2M50do5VRyTXgyOTiqVlIJ pf+oEnCut8rhs0cnYC9vyXEcQveRQI4PYia2wpuQlP83n7t0bvYbS1Pydg4998lF So2Dk1g6a/3nJiEddZJjAwP4lYjThE9l9IXkpxrhLmc+sUogLCzAD23BaxUUR0Cm N0FVITreUlQLusPCSibqXV6sb7GdLU7dmvoc7rHDYb0PArXZNWmdTZrEj5KlvJx2 Q8/DcJYaj1ySrtIiX7f93xGCL5TAxs+IuY/XAgaogdcsaFUvhUN2J3GzHaVNYeeS 0y2Hz3VxNv/pfTQhMaD7cPDrhjkZLp3fExwMjLLQi94icqYRWzQ= =mR4d -----END PGP SIGNATURE-----