-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 14 Feb 2025 13:06:51 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: arm64 Version: 1:9.2p1-2+deb12u5 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Changes: openssh (1:9.2p1-2+deb12u5) bookworm-security; urgency=medium . * CVE-2025-26465: Fix MitM in verify_host_key_callback. * Fix incorrect return values on a number of error paths. Checksums-Sha1: b94fea5ab2aa8973afa3cb383afdf401cfdb86af 3785112 openssh-client-dbgsym_9.2p1-2+deb12u5_arm64.deb 79db5a6101015d89657eb7f7e2fc165f390ab338 342608 openssh-client-udeb_9.2p1-2+deb12u5_arm64.udeb 4953dfb2bdc68f5d20367cf9e2bba46227627ca2 935272 openssh-client_9.2p1-2+deb12u5_arm64.deb 31b0e8a2cbb8dff15c5d67fe854d146f3e919c20 941528 openssh-server-dbgsym_9.2p1-2+deb12u5_arm64.deb cfe0995eeb8801ddfed1cc58a8c16295308169ef 358260 openssh-server-udeb_9.2p1-2+deb12u5_arm64.udeb 33cf306c9a6ab718b31420b3ad792ccd18ba1e16 413028 openssh-server_9.2p1-2+deb12u5_arm64.deb e2d7c672910911920429896006427dced960bd36 166516 openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_arm64.deb 5f4e69ca0c4726124f1bf75d076a7ab45b24cb29 60704 openssh-sftp-server_9.2p1-2+deb12u5_arm64.deb 82218f9802c58ca550ded66d22722b4aa8f4efb4 2956480 openssh-tests-dbgsym_9.2p1-2+deb12u5_arm64.deb 8c05e5a3188598a9197969fe85b804fb3bf66185 1018088 openssh-tests_9.2p1-2+deb12u5_arm64.deb 1fe4e0e7e14869861f43fa4481b7e9dd4a9590f3 18553 openssh_9.2p1-2+deb12u5_arm64-buildd.buildinfo fa625a7f018f75958f63421188aebc3e1a007c94 16996 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_arm64.deb e0ecc6515562e4d0726979e5907064d1c891d34e 187780 ssh-askpass-gnome_9.2p1-2+deb12u5_arm64.deb Checksums-Sha256: 263a440e6040bfdf617f30948c3c42bd37c2ff404fb58caeea653e336ac95f32 3785112 openssh-client-dbgsym_9.2p1-2+deb12u5_arm64.deb 7359d80406629241328983e98a44804dfea74f5d844223643cc7d72da5ffb3c9 342608 openssh-client-udeb_9.2p1-2+deb12u5_arm64.udeb b2de857eaf924663e21c6f0d8bfca00fb288719dc88c15d87a9d72b1a82cd6cd 935272 openssh-client_9.2p1-2+deb12u5_arm64.deb b7bd84432f045e2f9f12f3df8d232f3c136c71e86fb480646b981df571fbb6a6 941528 openssh-server-dbgsym_9.2p1-2+deb12u5_arm64.deb 11a615093d3151c55e62c5a8805e58c4c1c82ee18a61d3ef2e44363c88a90fb5 358260 openssh-server-udeb_9.2p1-2+deb12u5_arm64.udeb 219f0bd3c3b5f379c48aa566935d8a24bfe33dcfd2c152ace338d5772fb2c6a8 413028 openssh-server_9.2p1-2+deb12u5_arm64.deb 64c37e68f43fc0766904bbdfc44f3ba68b227fe897777773b255e685e88ba471 166516 openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_arm64.deb f069e25184f5bbee89de793bcc4a7ae95072b23f32b57a459b7de632942b5a35 60704 openssh-sftp-server_9.2p1-2+deb12u5_arm64.deb 05651f23281402a236a5e7200f5fa33d3cb78bc9ba569a5fa3cb5af0039ebae2 2956480 openssh-tests-dbgsym_9.2p1-2+deb12u5_arm64.deb 6170b3d900753a93b2609a6fa20d52a877bf6f86ce7334a2b72235a0c1444fd7 1018088 openssh-tests_9.2p1-2+deb12u5_arm64.deb 735e59630e86eb87fc4aaa64c34b4e3068512cca4c0b5741ab29b7bb6dcc9251 18553 openssh_9.2p1-2+deb12u5_arm64-buildd.buildinfo a370f001f9fece61a90fb4727a892004c495000e6c51e6a0e65047416d41d7a7 16996 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_arm64.deb b6446329ed078fe3ec8fa309a50566dd36ca153a300320eb03d1bad2c7e23d9a 187780 ssh-askpass-gnome_9.2p1-2+deb12u5_arm64.deb Files: dd2042d54a91ef7284d88423966d4299 3785112 debug optional openssh-client-dbgsym_9.2p1-2+deb12u5_arm64.deb d0b309ebbe9564b6699d845715b90c39 342608 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u5_arm64.udeb d9a21cf075e0d569c0e66429100bd6ad 935272 net standard openssh-client_9.2p1-2+deb12u5_arm64.deb ac55fcada2c3cc9f226a6df6818e8ed9 941528 debug optional openssh-server-dbgsym_9.2p1-2+deb12u5_arm64.deb a85ae3e0c6598beb91956450b0635e7a 358260 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u5_arm64.udeb 85f473e51bdebdd7ad8d103139281e0a 413028 net optional openssh-server_9.2p1-2+deb12u5_arm64.deb 0fe08de948f26d879707cca62fe81abf 166516 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_arm64.deb 5d57d3947d1bc61bcf1c2908a5cb3ec9 60704 net optional openssh-sftp-server_9.2p1-2+deb12u5_arm64.deb 73d07b5e17b587d22839525ff250d759 2956480 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u5_arm64.deb f687928db5631ebd3a60ed63a9cb56eb 1018088 net optional openssh-tests_9.2p1-2+deb12u5_arm64.deb 073e9af1829c303a94740d1f62cd7189 18553 net standard openssh_9.2p1-2+deb12u5_arm64-buildd.buildinfo ba6ecadb88ab6a42f37148c2fe8de215 16996 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_arm64.deb 6347b8d8308c4bbd25ffcc0101d151cb 187780 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u5_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9C4sZYDxwNo9XoUDaRWK3AIe28EFAmevV74ACgkQaRWK3AIe 28ERiw/8DEY6lIBMOo6oxiCoHmyfiAqYDFyOIP7RiX+NPRpt5ZieSr5dTqk6tuQW N4cj75ZK6p0ekJi3ygeMDISP/sq59EHp1aKe31SsjlmDvjWt/+aD33Wwp7Mcn5JS 7ududaLz5So/jd1K4vjlBu45YrcHEpoAZ7ZHUwg4jv+JI8uMYFBcHFG51F/F1iGv Bz8Wf/UHENODPvtIdI54NJ4ghuUrfB49ypo0EoGibUIyjIHvQOuPvTzUGXKg3raO LXakp64m3+5YHmX9gC/mJqzOfTjCNiKEfL5rsZqF0MXF3ZudPp/1g1sAhofFiS7g Ryh8Ec0aw/r3Pb9VymYVtb0v4hT59euoDJVMwWhb51QTENcnx5EiH7C1mU5ltf4o V0bp2DoNa0W4DRfVf++ouA6/54MHWJmo95fHCXiQsDY0CmZ5TyKA/MNHYpt9v2A1 HexK6MffvT+BYhdJ7BdFJQRVYornOv8nrld5vftINYCydY2rd9ngKmrIGyGGS6lE 17amFZPnKecO4CGhBd0AQmXNDFYD4R6NXk/eM3fgiQsa7d97kQRp6wBU5lx4zAoy I64OL1lFAoqSVXAR9HVKDcFr2uHUpw1EiduUQyITd2NpahBB60xe3DQCLClDk72F KGPSxaCVvnDY87YU5pyB2GkXKO8vlbSvILEuq+ULQco0or67UrQ= =RLRs -----END PGP SIGNATURE-----