-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:29:20 +0100 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: i386 Version: 1:10.0p1-7+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1130595 Changes: openssh (1:10.0p1-7+deb13u2) trixie-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: 46b76bc459d6737de03d6e955a92b138b946aace 3446280 openssh-client-dbgsym_10.0p1-7+deb13u2_i386.deb a76f5805e0782090d6148c013ea86f7260351fc3 368576 openssh-client-udeb_10.0p1-7+deb13u2_i386.udeb 498dedad4d49d6a33dd8e0b9f007bb8d576dda33 1015536 openssh-client_10.0p1-7+deb13u2_i386.deb f5337b8989e79ade1fdcac7cc7e5d851f5fb0be7 2160376 openssh-server-dbgsym_10.0p1-7+deb13u2_i386.deb 3e1bcf5fc1256018e90da43ec210452eaecd84d2 486468 openssh-server-udeb_10.0p1-7+deb13u2_i386.udeb 74b8ff562863b1e99430e570700506dace3925ac 616592 openssh-server_10.0p1-7+deb13u2_i386.deb 85d49928c029b72a21520875eefe6cefe970ce4d 143880 openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_i386.deb f15be40e0adbfd07348ef7a13a64c2183a72ff45 70048 openssh-sftp-server_10.0p1-7+deb13u2_i386.deb d1cbd13c2ced22915cd6f5e5ca16ae050e0eb446 2579372 openssh-tests-dbgsym_10.0p1-7+deb13u2_i386.deb a178614eef020d8bcd7e49817eec19f5b51228c5 1012556 openssh-tests_10.0p1-7+deb13u2_i386.deb 8297ac0c2adfd50dd9183c13de192b4c507c2ab4 18535 openssh_10.0p1-7+deb13u2_i386-buildd.buildinfo 397535a035bf3532ff10eda73d6733a1f00c0fbe 16380 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_i386.deb 70f082b64b1c88543ff5ca706e2fde976e38b8e5 156648 ssh-askpass-gnome_10.0p1-7+deb13u2_i386.deb Checksums-Sha256: ca254a2795dfc25f53cc6a833a146bf488305c651fc3a9a212aacbf55530770f 3446280 openssh-client-dbgsym_10.0p1-7+deb13u2_i386.deb ef5274fe51270eb8ab98e21a7e43ca3b138e69b0ee7b00149c4b708e7b72af3e 368576 openssh-client-udeb_10.0p1-7+deb13u2_i386.udeb 6b98d4a138f7ec7cf2ea9e800e31267276e3d003608055fc9b94de4f31394263 1015536 openssh-client_10.0p1-7+deb13u2_i386.deb d9a59b6faeef82283e273d7c598206018e36b686ce92516c688d5e4e25b8c352 2160376 openssh-server-dbgsym_10.0p1-7+deb13u2_i386.deb 051c837e35f6171a38096d7dd3c5757899b7dd1cfb6b159d672529cfdd44e853 486468 openssh-server-udeb_10.0p1-7+deb13u2_i386.udeb 41f47170063221467cf82bf98abf9445f9031e9202255f9d7b60164ec5adcf4d 616592 openssh-server_10.0p1-7+deb13u2_i386.deb 3489ab28c08849ccd443aa83faf6a9118c29d1a4b48b5163d4bf258394a95d2e 143880 openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_i386.deb 2554d1347010e2a8b56a2df3ff01a5398e3622e6a66cccd6d80086da0b7a8091 70048 openssh-sftp-server_10.0p1-7+deb13u2_i386.deb 1321f0cf62401e97142d7326c1bb3f2a32d6e327231ceb3ea06b221bee45ff1f 2579372 openssh-tests-dbgsym_10.0p1-7+deb13u2_i386.deb 3a881f089b5ab72572cbdb090e246763cfe7da5ead93c374136a12602de4fe08 1012556 openssh-tests_10.0p1-7+deb13u2_i386.deb 13bdf90486b538733292cc5df87f115a03478649f010af9cfc13342d889b0305 18535 openssh_10.0p1-7+deb13u2_i386-buildd.buildinfo b1bac66b4bf36033c415375dd2c950042649ed78d3296653bd24a925e0976d66 16380 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_i386.deb 6286268dd91c3864c61b24f934ac48ec437543777b7d84a881cdbda084369e6f 156648 ssh-askpass-gnome_10.0p1-7+deb13u2_i386.deb Files: 8fb109b036a25e81730441589ec281a6 3446280 debug optional openssh-client-dbgsym_10.0p1-7+deb13u2_i386.deb 655d95b3a6cd20024e59ad59dbe96a68 368576 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u2_i386.udeb 937e43d2971c5e01ed6eb3d10b283250 1015536 net standard openssh-client_10.0p1-7+deb13u2_i386.deb de4925c702a71684f0cfdc85456178b2 2160376 debug optional openssh-server-dbgsym_10.0p1-7+deb13u2_i386.deb f08b6c8e4cdba204bd6708d44b963c98 486468 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u2_i386.udeb 058fdfaf11e2ea8eeb543086e551ea3f 616592 net optional openssh-server_10.0p1-7+deb13u2_i386.deb 89292f1c7d287312644eeb2d129a57c0 143880 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_i386.deb 69103c2e8cfc8462b3e56b12ab1c1374 70048 net optional openssh-sftp-server_10.0p1-7+deb13u2_i386.deb a38fe42b206355e9b9e18f007da8cde4 2579372 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u2_i386.deb f419d46a8708e56fbb39c5ef25991385 1012556 net optional openssh-tests_10.0p1-7+deb13u2_i386.deb 84d36f26af5177f0d403368b0013bf8f 18535 net standard openssh_10.0p1-7+deb13u2_i386-buildd.buildinfo 9575d624ae9f800967343173573df553 16380 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_i386.deb b9534597b7efbec67a9690678c059977 156648 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u2_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmnRp9wACgkQYg9P9sm2 dfE+KQ//bpR7DRKvavMMi5uyTZkzlDz1ZYbiiZm2QvBsKvosjcTgZq7crJheiWuR Y8NdOnMyCtcXcXjm2K1jRKhzZMABCXtIiDQsh52Cx9aSZy2ddeIe/d6sVYe7hOKq hv5Iyt5+0eAJz5FmGobJnMH+U/j4lDtXXgb9KL/dIfU9Rhos99I07MF/0kFHt3AR xkeHh/3o+IE2zCWRPUjspiZpj6vTbonui8fKsaer9EQ7MR9p5sFYqW0ATk285OER suXiWThu8STXLq0zOD5vW/K/iGuov2tVsDYbH4PvibVErQbghRfbaRCukGGEoisD M+jiQNn0aVYd1YbHItU4x9pGP+xADXSr/iTmKCuM7IUGqnAgzsi9Q0iraKBfxZeb 6kXBdUj6blD5skHjk2T36IR3Uu/JBGqdhBopKkQAHx6pc3v1nyWc7cG1bWEld6L0 hK8E/Daag/BUxPXUo6477PUtVKF4oK4L8PkJM502JQhdffJp01LRNFGqMs4ZZp3h jp9ZpHNkHXEZZ+PKAUtE0rdOJToubduWrX8/J2d1mAaocV33tohX7Q4iBwDJqnUR XRXEnSi77GjRCcBl67AjlJoPF9SIT4k0eiv/okTjl85LHeU29oOc8m3DdXoKOGbW P2NVeqAh3rJW1yznVmMGvVve2SyLKzZekWvSRhnl/fywerahYkM= =moy0 -----END PGP SIGNATURE-----