-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:33:31 +0100 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: i386 Version: 1:9.2p1-2+deb12u9 Distribution: bookworm-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1130595 Changes: openssh (1:9.2p1-2+deb12u9) bookworm-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: 5b770bfc4c63b8ebe3fb022cd22617e4f6d04594 3163280 openssh-client-dbgsym_9.2p1-2+deb12u9_i386.deb 08f103cc927287464c7b74bb168ba4fdf6eb2fda 353640 openssh-client-udeb_9.2p1-2+deb12u9_i386.udeb f74e9b2e4a307b320f57bae2fa4d9c490ea63537 1009936 openssh-client_9.2p1-2+deb12u9_i386.deb 135387cc1633b6c3cae47931a4e66396074aae52 780720 openssh-server-dbgsym_9.2p1-2+deb12u9_i386.deb 68e6083b7584e2b119b0fe4a32a60344e127fad6 369984 openssh-server-udeb_9.2p1-2+deb12u9_i386.udeb 25e77ba4ba601ef097559be950c526fbf5422f5d 465264 openssh-server_9.2p1-2+deb12u9_i386.deb 89e3a264ca7c934f9a7c298cc27736bda79c0419 140648 openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_i386.deb 25df6c06630dbe258c12c0ac20151f249d9d4648 70196 openssh-sftp-server_9.2p1-2+deb12u9_i386.deb d9116ba1b5e91b4ba19628343f478220707929eb 2385728 openssh-tests-dbgsym_9.2p1-2+deb12u9_i386.deb 8079f986bbe96965f22f7092599c86ccd90a3aa3 1023580 openssh-tests_9.2p1-2+deb12u9_i386.deb 6c7475014c300cfbac8bd864183175c050bbc857 18746 openssh_9.2p1-2+deb12u9_i386-buildd.buildinfo 310d4b419d371f42bb560fb839f279c0a8bff2c3 16088 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_i386.deb 3f50ea482c2ce58ef033c9a5d57410244e2399f8 188408 ssh-askpass-gnome_9.2p1-2+deb12u9_i386.deb Checksums-Sha256: 5c96edebd4b1b54a7e040bcbe522f2190397d624e70644bc82243d2bab5af085 3163280 openssh-client-dbgsym_9.2p1-2+deb12u9_i386.deb f49e8b97e72958ef3ef36e2ae2ad9aefd9bdefd7de7970546259079615fc8aa8 353640 openssh-client-udeb_9.2p1-2+deb12u9_i386.udeb 52571162cee50a60c9581434329da8c39ed9b673627df3551e120b4f4154d13f 1009936 openssh-client_9.2p1-2+deb12u9_i386.deb 05e33ccb99fd3661e814cd3cc693fa0242a94c65c4ae2a4bbdfa1db4be264069 780720 openssh-server-dbgsym_9.2p1-2+deb12u9_i386.deb 1609f80e647e11a0a2d6816a4d290caa4ed89bd5d9341e5f1b62445755cf5a9e 369984 openssh-server-udeb_9.2p1-2+deb12u9_i386.udeb ee6459b21cb2fdf3b364ce6e6f4a9936975eb3284ade145b898b112f7ed80412 465264 openssh-server_9.2p1-2+deb12u9_i386.deb 957346e693ec742db51d3fee33957f5cdbc3ccd714bcfc57465b4e3854b0809d 140648 openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_i386.deb e534f5037c1f215a285880a7f626a7792aed60a59caae0aecdb3f8cae1e2cd98 70196 openssh-sftp-server_9.2p1-2+deb12u9_i386.deb 304531329159ba98eeb2a5303aa4685c6df1be097d14f426f525263374bce7ab 2385728 openssh-tests-dbgsym_9.2p1-2+deb12u9_i386.deb 9528ae9d095abd31f50a685142ad28ea913f2fbe1a5cdbc3a80d0d938f970310 1023580 openssh-tests_9.2p1-2+deb12u9_i386.deb fcbb42df91eba17db5282c230d50ee4cd8ee0e5ebc5aeac9018f9081ba436a29 18746 openssh_9.2p1-2+deb12u9_i386-buildd.buildinfo 0bac95e271a932fdbe92dfd0520d79a98c6020a704834e880cecc696a99c4280 16088 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_i386.deb 29c3e30c5201185dca672dc5bf240566eb1c0d434ae0206347f5512f7a6b5297 188408 ssh-askpass-gnome_9.2p1-2+deb12u9_i386.deb Files: 133f82b78e075f5d5a9fe3c29aed73e1 3163280 debug optional openssh-client-dbgsym_9.2p1-2+deb12u9_i386.deb b8d1a48b5183e7f0fa3359352c72056a 353640 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u9_i386.udeb 1fe75da4d1bea64ca48b35d0a320a190 1009936 net standard openssh-client_9.2p1-2+deb12u9_i386.deb 0b4171d42586229e2354417b4ddf32fd 780720 debug optional openssh-server-dbgsym_9.2p1-2+deb12u9_i386.deb 32e962b00b7cdeb24b5e117c2ff9f33f 369984 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u9_i386.udeb bc2fedb07f074a8b39bbb261f6b8d057 465264 net optional openssh-server_9.2p1-2+deb12u9_i386.deb 4cec5f95766b1f22c198733c76ff93d8 140648 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_i386.deb 1c2c51f535543c74e0f4db86ea444c1b 70196 net optional openssh-sftp-server_9.2p1-2+deb12u9_i386.deb f6dd0b6bcafd2511cb357ceb7e66787a 2385728 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u9_i386.deb bcc410ac53eef8f3869a46fee10f4497 1023580 net optional openssh-tests_9.2p1-2+deb12u9_i386.deb 4dc0479531b27b63bd407655f86bea84 18746 net standard openssh_9.2p1-2+deb12u9_i386-buildd.buildinfo 0818cf42c70dd9ee800a67d9267aea7f 16088 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_i386.deb a26d1d11bbaf36e00ad6c471b147b714 188408 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u9_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmnRqKMACgkQf2INRiCd aWKTDQ//ZVBQkGWWmsfmLvZjK9/st6aJjLKZJRobIZEqhcAl5VUZdKNwzFTrfLKT 390eDSu+58As9XfsA2Ak35q5W8Kd8eV6bHNDHQjgzZT89nt+CFutoVDjZJl28uET stikLiTEfQ3jj6t3MUOFp3cLpwHQVR8aXC9/7vaqZiGkhk9J0718k4ljkCVLtt8q lgrLk7R41Loz/Q8Dg4aNgxbOXOXBudwwb/PnUEHkBZzL+fF5ggHJ/EBLHOgF2wg8 sdcuSakm9FvQ23nXLLvAirIK/aC//nBnxeFXb7tO3dlZt9K/C9li68gOstg9xpNq aYhgDNKDhCG1IbwUudnwHtzh54qeyHX8FrFeMZ2+UUrt4dbDMid6PwdgrbtnVNy0 zF/DDgTVV6VHp7RAjNtC1qWmv6XUP25lgWkrEty4LTbQj5+QujEV/Ld9pfYl9l1V wq8bJMzPxlA3r3mYwZXaTZ66ZifVk7vI+3EZCrO30kb1oULOc52VLz2T2UEakxhY SRfyNthAbpfrvjMHAQq+FXUb9slyhBhAPsnR+235SZj5aX3QJDbrb94ojBb5VPNq /4tadHQww42uz+iYDsfCiHAPgDDdvzYTXYKYSTSo3RPYTnGuLhMm9XF6PvcQr7GZ nRzZc3zc11u8sU6x/TCpIHEJvOONd9+sUZRtuHc3SMAdWZhq6ss= =xj4a -----END PGP SIGNATURE-----