-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:29:20 +0100 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: arm64 Version: 1:10.0p1-7+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1130595 Changes: openssh (1:10.0p1-7+deb13u2) trixie-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: 60fa137bfc525590d1f7b407d951f28db571f9bf 4030436 openssh-client-dbgsym_10.0p1-7+deb13u2_arm64.deb 50eaaf7b54c6ecfae3e7745944d236f34bd9ac66 353780 openssh-client-udeb_10.0p1-7+deb13u2_arm64.udeb 09447282ec3c6c5a02e218e7681bb636c6754582 926384 openssh-client_10.0p1-7+deb13u2_arm64.deb a515fe13af1973216c79c81b694df7bf6c2843a4 2504328 openssh-server-dbgsym_10.0p1-7+deb13u2_arm64.deb f4ca822d9101fedb0969d214dfb5f6e51c9a32f9 468600 openssh-server-udeb_10.0p1-7+deb13u2_arm64.udeb 276b8ee641af55364bc81bd48e75aa7ab335081f 553280 openssh-server_10.0p1-7+deb13u2_arm64.deb fc02b9a7df8ef1941cf1f53420beb4778bc8e314 170312 openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_arm64.deb c6461602dd8f0474e7955f4f4ebe8607091130ad 60644 openssh-sftp-server_10.0p1-7+deb13u2_arm64.deb 8a616970ae55a66a20b9574850cbbddc963beae7 3108816 openssh-tests-dbgsym_10.0p1-7+deb13u2_arm64.deb e753a5ca069037190bc5343968bcf9646498fcec 996856 openssh-tests_10.0p1-7+deb13u2_arm64.deb 3e7475d7d329a649b493761867f44ab54cf3b1e1 18588 openssh_10.0p1-7+deb13u2_arm64-buildd.buildinfo 9fc2d7b9dbaa4f6715ef4794979e83ba61bdd6e3 17192 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_arm64.deb 7c134dee5842909d5d7d59349d18ad8a911a79d3 156516 ssh-askpass-gnome_10.0p1-7+deb13u2_arm64.deb Checksums-Sha256: 2e1f1e318c4dde279397d16665962db6941d9ea772b300be2c8bdd2c1e4d7108 4030436 openssh-client-dbgsym_10.0p1-7+deb13u2_arm64.deb f53695ef63535b963a00958def039771a4446dd3321d4b3c2000e6959e116d6f 353780 openssh-client-udeb_10.0p1-7+deb13u2_arm64.udeb d593a6b189b10109fce7804229e8649c11d4d1918824a0ba5ef256739ebee470 926384 openssh-client_10.0p1-7+deb13u2_arm64.deb e5efa7ff26e906005be9e11bcc3fbf957d34b5c55dff62da6417eed3c1dca785 2504328 openssh-server-dbgsym_10.0p1-7+deb13u2_arm64.deb 8b9f875dc2f9b57656a97d62f564b59dbe357f965559c91842f431b2e5e7559f 468600 openssh-server-udeb_10.0p1-7+deb13u2_arm64.udeb 3f27c087fe6c28e40a0bbc096f5289cd4afee34a9a3f4746e09a954dede23045 553280 openssh-server_10.0p1-7+deb13u2_arm64.deb 1060ecb536228bf608660311e724b627030657ab0b0edd1be6e21680ac580e62 170312 openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_arm64.deb 92456a2b0a0d71168e016c4d01fad2758c11d40ba941ebec7c084d89d205d40d 60644 openssh-sftp-server_10.0p1-7+deb13u2_arm64.deb f9de7a93240e327fdc210427dfe87927b6820529becdee8043dcbb4e43fdbccc 3108816 openssh-tests-dbgsym_10.0p1-7+deb13u2_arm64.deb 405ccedfce4ab271c15923db77cc7d149b4a045b80670a20bcaab5be71137a07 996856 openssh-tests_10.0p1-7+deb13u2_arm64.deb 3773dd25f1e5842c38326ace4df01e723b1d54359bebadb3a2fec324c2483b22 18588 openssh_10.0p1-7+deb13u2_arm64-buildd.buildinfo 1026c3c32beabd6d55f9377ce05e587c5c9c5b5f72d912b21c83aba66e8cb291 17192 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_arm64.deb a0af2c453a554c718616a071bfa7e344cf3074cc20bb71a12c2b62172d991ec4 156516 ssh-askpass-gnome_10.0p1-7+deb13u2_arm64.deb Files: 2c1a891e8f8ea09b4f88497972b5baaf 4030436 debug optional openssh-client-dbgsym_10.0p1-7+deb13u2_arm64.deb 07806d4c67aafce420d034cbe71b3d53 353780 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u2_arm64.udeb 766a83bdd1ee364496199ef23db5ccba 926384 net standard openssh-client_10.0p1-7+deb13u2_arm64.deb 71d3d6f111b9a407c310c50896360848 2504328 debug optional openssh-server-dbgsym_10.0p1-7+deb13u2_arm64.deb a56835f499e00a0346218dd0975f38a8 468600 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u2_arm64.udeb fc4e0e5f202eafe82963af3a44b3effd 553280 net optional openssh-server_10.0p1-7+deb13u2_arm64.deb 5444cc21dfbabaeff3899f019a521a21 170312 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_arm64.deb a08d16464f0a3fb6c4b0f41cdb24051b 60644 net optional openssh-sftp-server_10.0p1-7+deb13u2_arm64.deb c90f79bc18806b8196bc296cef5962bf 3108816 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u2_arm64.deb 193056a439afd5f6b0ef1c4a360b19f8 996856 net optional openssh-tests_10.0p1-7+deb13u2_arm64.deb 425ecad6dee6559a9454754b0c3340a0 18588 net standard openssh_10.0p1-7+deb13u2_arm64-buildd.buildinfo 1b67569e5530667e1f721f1faeeceecc 17192 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_arm64.deb 4e0783d7da82d0797182f943d0e278e2 156516 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmnRpt8ACgkQ8U6eOZMp j6/e6BAAwYjL8AnLU69Fhss3e6IN77Qju1KC+gumvuUJgCAgcHD8rEJ6XWN3l1P8 +7bg9a8a00hHSxFde0rETCEuQlXB1bzQBdFwRhLCkt4B4l5zoDl412pTcNKBdwzy FPmyZ6MHSZ+SUITyWuO8mAu3FYltB2GLJMtaIq4JYQ9tFI6xOCSSgWsZLaA8cE2T Jsx8hFoZ4KpcEEuKmeh5+356k2EIrAK64kj4X+/MWBKPX/bcqSUnojL1KzHD1B+p FLVhAGSBlXTo+yr7lGTLmSpTXYPiGK4uGippBkerAdHURfyBLCAN9DqyQey2y6Hd RC/vI9rf2uKVlvsRqp+xG0VU+WHSCJR6QEyut2uSQX06FXCtjZxF9KpgGx1Rl23V dyCI7BctQba1OrZN3FqRtjsEECyoLHu+otU7w1U1DwnCh1U7CYdMmt6s9IrThFrd R0gOskp3U8Gm2m1y1XlxCqUKEIRn6FTHNLBQlFo2Ehur/Wbdma9nUCtW5t3K/A7s no/AbYDDqHy8TK22P46hoBpBvzhAIiHwrP2Xk5+jM49d0FYGGn7FWKpuXVWnVB5a GP9ODlny1sXgKMKPGp5FhtqBcBnScSQ+D88HqOkh/payLsc39aSviMwhE+7nDgPa sWiQ48xH0eMvcMSCtYS1BCqcSPmWcCXbL+WSAFPzOzqOgDYJ2fI= =0JUg -----END PGP SIGNATURE-----