-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:33:31 +0100 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: amd64 Version: 1:9.2p1-2+deb12u9 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1130595 Changes: openssh (1:9.2p1-2+deb12u9) bookworm-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: 868095398f64595b9ba8ebb3d0e09b544617f4c5 3817444 openssh-client-dbgsym_9.2p1-2+deb12u9_amd64.deb fdb7a9e4547cd618e6fadcdaecbd611537c19f9a 377624 openssh-client-udeb_9.2p1-2+deb12u9_amd64.udeb 307f3b08c4cee380e36d6d925422628af34f3023 992788 openssh-client_9.2p1-2+deb12u9_amd64.deb 7f3d3b81077e06d905f08b59afb0cc0d171581a1 941672 openssh-server-dbgsym_9.2p1-2+deb12u9_amd64.deb a21cbd6f8915bc645eec723932b687a9952ec612 394056 openssh-server-udeb_9.2p1-2+deb12u9_amd64.udeb af3d07ade4972171d9c847d66a6c84f41f946968 456764 openssh-server_9.2p1-2+deb12u9_amd64.deb 3369f1d98e05f8aa1f51d4a18f69a4c13ac5b404 165548 openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_amd64.deb 61b5e268ddb24b692bc8231e66c51ce84cda4f17 65896 openssh-sftp-server_9.2p1-2+deb12u9_amd64.deb 02787f1d5ba635e1bb56fb832c8c1dc2dadc112e 2968192 openssh-tests-dbgsym_9.2p1-2+deb12u9_amd64.deb c498441c3692d6cadc5579e73dd50771462cc6e5 1049672 openssh-tests_9.2p1-2+deb12u9_amd64.deb cf536891affe3af321398b17da6fbadbc5143090 18833 openssh_9.2p1-2+deb12u9_amd64-buildd.buildinfo 94c5b074c0617818faeeeb0ed24c2ea0c3799071 17000 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_amd64.deb 9e653bb9fc7b34a93ebbb3f9bb77efb4ad22a436 188284 ssh-askpass-gnome_9.2p1-2+deb12u9_amd64.deb Checksums-Sha256: 94257470e04a8c99888846feeb7792d16281ac889b95cd136972a4ffac5ef9d9 3817444 openssh-client-dbgsym_9.2p1-2+deb12u9_amd64.deb 3f59b368edda30677c06ddd8049df288500cc6b88be725cf5f96bfac016b2af4 377624 openssh-client-udeb_9.2p1-2+deb12u9_amd64.udeb 3159b10a9416169926edcdf4daddf16ac71fb56bc4a952d2a73754cc6741c053 992788 openssh-client_9.2p1-2+deb12u9_amd64.deb 434ac6245c26b5d33e10b68d1c154056c322025f1d92db27173c7cad74098ff6 941672 openssh-server-dbgsym_9.2p1-2+deb12u9_amd64.deb fc81b12925dd82b8e1f40f51da224e6894af646045b95473d0d7ba6d2f09a9ba 394056 openssh-server-udeb_9.2p1-2+deb12u9_amd64.udeb 8f1fa0257ca7a8c592e4da21e72994713e690347d6ef22126dea27f6dae23f20 456764 openssh-server_9.2p1-2+deb12u9_amd64.deb 31e7cc7f2c75cb9d711e4ff50df7cdcb454958e6f8243d742fbb2f1140333ef1 165548 openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_amd64.deb cb62fef0f66e3b08908b4b2826852b99b8169bc0dd0348182c191c4e4a4cef9d 65896 openssh-sftp-server_9.2p1-2+deb12u9_amd64.deb 01277a6622c6a003e99a100b0ac6af4a140fb56bb1b1cdb7ad21d612e896230a 2968192 openssh-tests-dbgsym_9.2p1-2+deb12u9_amd64.deb b7ca1dad964bda78eb2cff8dc8c60cfc033320f89cb560ccfb1103b348256395 1049672 openssh-tests_9.2p1-2+deb12u9_amd64.deb 9bcbd909f329a586a78000a0633bbe967db8b55493ce3cb43ad357370b62d0a7 18833 openssh_9.2p1-2+deb12u9_amd64-buildd.buildinfo e83e8cfb2e91df468e748c05195c204fea41ef114678b70247e7689ec9f9ef4a 17000 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_amd64.deb df68e0805a2803daa29b3c24ef3f800aa80eb3426fcc05aa00e4bcb4d45d1264 188284 ssh-askpass-gnome_9.2p1-2+deb12u9_amd64.deb Files: 5fadb1204d920e62c4f23f48a7a82abb 3817444 debug optional openssh-client-dbgsym_9.2p1-2+deb12u9_amd64.deb 91d3a5e77beab0f54acdb612c1b261f5 377624 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u9_amd64.udeb 662333aa6906b671f6af82545be1902e 992788 net standard openssh-client_9.2p1-2+deb12u9_amd64.deb 0a891b4b3226ed5a88509552ef4cc0bb 941672 debug optional openssh-server-dbgsym_9.2p1-2+deb12u9_amd64.deb c469c5972b79c03e9998e426c0a41c08 394056 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u9_amd64.udeb 39833e82a6e1ac36e3fc172773079db1 456764 net optional openssh-server_9.2p1-2+deb12u9_amd64.deb f08fdf8064d8e8feefb4e860034132c7 165548 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_amd64.deb 0eb94589b29a87cb3ef90995cafaf3b9 65896 net optional openssh-sftp-server_9.2p1-2+deb12u9_amd64.deb b2273d85c41a369e65836bf760040f95 2968192 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u9_amd64.deb 2ebf716d1c596929bf4368c606b16b48 1049672 net optional openssh-tests_9.2p1-2+deb12u9_amd64.deb 9ebd9bb12fac963d98cc51ce15251c89 18833 net standard openssh_9.2p1-2+deb12u9_amd64-buildd.buildinfo 2ec5913754d47f28c3e129e659f547ba 17000 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_amd64.deb 48ec622635bbb514fff06a8c6a6d2d86 188284 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u9_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmnRpoMACgkQbheoBegw XLIedQ//b1NAwiu3xqW3uT/ronbTaw4EGu9iHkSkdoxScqj7CdYuZFn+bwmr5Uia /mq/4ijg/+4+54bXwv/tsG6HM6q+gkg4gqQxyxvg3Oe66BOdjwU/SDL/0/mG3jvu F48D+zol/4XACjDkuw6zDboJ8FKOaRoK2Ih1N/+d0jER8BxVEFekwyYShLKa1Zvt lLSr4bbYL6h/GK627zkcHxeK2TAxdIumwObdbNkh10aErJZg/gK22gc+MUPryAeP Pij3Rr5Y3xuPn27pnA9RNYb6q/bmT0yjW2Ur3A3gG2dB72H86DGlZwfrSQFKLtkM IOo9Jf4fGRjY5Xoi0hr47NrT0joEcFiE+HYLttZe1xw2VEVK/o2oaQLRndli0a9+ AfkBN4xNH/xDM3lS4qDaWk0jKtakCp6YUCFwa4Fbw2E9J3HvN1Ny1099yKa3KhWl m6YDccmiioegEVOjaOvIlyaBSnWv82RDTL6NzX47E1HRtDEYDNx7VYJHJbASZ4fi SRUPS3fAkigpyNVaW7im+0vbyCxZbQoAPvmLNe6cCYyy1mrPXbNDgYoeQIzFVJCK A42lqi7qMYJr74C3oE9XaOXlG1TT2/UVi95zBZQ9oHZqs7n8hLJu5BT7xhQ/x1As RaJje3ESTo3zAQkbcdewGfKeCuzIQieH1t5PsQTVJ5tjG3fzxcI= =bbrT -----END PGP SIGNATURE-----