-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 14 Feb 2025 13:06:51 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: i386 Version: 1:9.2p1-2+deb12u5 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Changes: openssh (1:9.2p1-2+deb12u5) bookworm-security; urgency=medium . * CVE-2025-26465: Fix MitM in verify_host_key_callback. * Fix incorrect return values on a number of error paths. Checksums-Sha1: 79dbc07e09b741147470627775495c914a1b2f04 3161388 openssh-client-dbgsym_9.2p1-2+deb12u5_i386.deb 206fe5549f83ca5806242c65bc30bfe4b494fcb8 354568 openssh-client-udeb_9.2p1-2+deb12u5_i386.udeb 345b36c05653391156140d9234010ab0940d9f3c 1008852 openssh-client_9.2p1-2+deb12u5_i386.deb 70fab46d71bf2b7d62de6dfb73cb9faa2853373b 780844 openssh-server-dbgsym_9.2p1-2+deb12u5_i386.deb b6afaef689d62ba467760d930f264226b36646c5 370224 openssh-server-udeb_9.2p1-2+deb12u5_i386.udeb dd55dd60542f8218424499d0f61a006a7c8be4f0 465084 openssh-server_9.2p1-2+deb12u5_i386.deb 7559d1c6c6bcbf2ef0f2039b126e30500763a81f 140432 openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_i386.deb 41a77c0dfd64e1b0c3605118601d96fc159a900f 70024 openssh-sftp-server_9.2p1-2+deb12u5_i386.deb 1d999ee2ca6e4511b596a2feac6332f741ea4428 2384480 openssh-tests-dbgsym_9.2p1-2+deb12u5_i386.deb 7694bd7ab4bd1d84d7b1238c14cf6f487fb561e3 1022980 openssh-tests_9.2p1-2+deb12u5_i386.deb 7de9c807533f5f0146c3317e17bfbc3767f8c972 18527 openssh_9.2p1-2+deb12u5_i386-buildd.buildinfo 65e4c96e3fb26aead7d2ee172f70ca59110f2e90 16092 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_i386.deb 93436f78de1e56344177956681c67d3d7d44d6eb 188064 ssh-askpass-gnome_9.2p1-2+deb12u5_i386.deb Checksums-Sha256: 6d167d0f68b63ddc0bb0211f30f47be55473478d31693f7b749becbd83ec5ad8 3161388 openssh-client-dbgsym_9.2p1-2+deb12u5_i386.deb 74e0d1ba640f97f20ec909482eb61ddeb38de5ed69db489b69e4830a470655c3 354568 openssh-client-udeb_9.2p1-2+deb12u5_i386.udeb ac800600c6d580f9a69a601e2eae5a13ba610cb7baf947ad57d16dfb4cba26e4 1008852 openssh-client_9.2p1-2+deb12u5_i386.deb f4a7a65cf8dc27d7030cd88c07b78963f7ef0ca816f3afae6289e27d82f9132e 780844 openssh-server-dbgsym_9.2p1-2+deb12u5_i386.deb c0ce3f9300c098308f6453cd50cf77fb83a20848ae540b549deacde10ee96ed3 370224 openssh-server-udeb_9.2p1-2+deb12u5_i386.udeb 2ea00c02a4409f1d6cb911607d942343d93e7c886c53aa092ffdc82383859d9f 465084 openssh-server_9.2p1-2+deb12u5_i386.deb b27d59a5752269e5661cee5d6f57a3343b32c0214e778efb57570ebc4402b66a 140432 openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_i386.deb c15e403b8246125c49e1d5ba1b312c3f841143e8a690a294773798f5345e940b 70024 openssh-sftp-server_9.2p1-2+deb12u5_i386.deb e4107a7fa69aff459f243b7206e549afbb61bde3ff07a5342d16dde2a91d273a 2384480 openssh-tests-dbgsym_9.2p1-2+deb12u5_i386.deb f9d9229e5dc3d138e79b9b945941968580bf48c6d9e63c724c1f09f48d7f3e32 1022980 openssh-tests_9.2p1-2+deb12u5_i386.deb e245fd36d0b6afab4b4f1699de4b5c34519e66acc7dea3250cd26055026347af 18527 openssh_9.2p1-2+deb12u5_i386-buildd.buildinfo e7dbc862da7791f8e06d096a30a6bd7cbbb706e0c30f81effc5c96d35a3b941d 16092 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_i386.deb 7a7cc0a715d538bf4fecb407cccd8c7d62c35c1b68e83cc10cbdeef764bcade3 188064 ssh-askpass-gnome_9.2p1-2+deb12u5_i386.deb Files: 79fde1427acca42364a982e01337f381 3161388 debug optional openssh-client-dbgsym_9.2p1-2+deb12u5_i386.deb 07c473605de9d5a5a7485093ee4c0561 354568 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u5_i386.udeb ca1af334e93ac942ad90e112803429eb 1008852 net standard openssh-client_9.2p1-2+deb12u5_i386.deb 9df2ad7a43b677303fdc11d362a67485 780844 debug optional openssh-server-dbgsym_9.2p1-2+deb12u5_i386.deb 0a67171e9633ff44fced72e86120a395 370224 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u5_i386.udeb f422033f05eae8af722af4f42d144fae 465084 net optional openssh-server_9.2p1-2+deb12u5_i386.deb aa94440e6f49e7324cfb45146c1ac4d7 140432 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_i386.deb ec6c518a10e892b21a713de358a0227f 70024 net optional openssh-sftp-server_9.2p1-2+deb12u5_i386.deb 30b624d2fbb751ee39a4a9d36da4bc98 2384480 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u5_i386.deb 16aafb2ef27e92e0af366cf402c4a24d 1022980 net optional openssh-tests_9.2p1-2+deb12u5_i386.deb d2f0ac4b585c2faae0ba75aee06df10b 18527 net standard openssh_9.2p1-2+deb12u5_i386-buildd.buildinfo bbcdf0cfd0e986bced3f2c39c2327ab8 16092 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_i386.deb efa7f01a1c2feb0df90da369454c6069 188064 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u5_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGBeuno8wiDXCewDuqqLQG5ksqMMFAmevVMUACgkQqqLQG5ks qMObphAAsFWCBWk7meQXcm5y1a6qLc0Ej7nrZzYeFLrItzCpHoAU/2YKzZJG3n4E SMO2uaUBo3OaUeX0MjtOiqf//c3jnEhPXYg7gkN7yxkZ3M6Qi2AM/M1l3Nvx8/1Q +ZCZI3bQ+gYlzIuX4ESdWk/+gjIWzv+HZZknYO+eEHLonwjGZ4SdEUZ7vDXErobW /KoR+EF6f4BpFOZib/utrn5C9pJMCDXRIhkXymggjlSfqMREsvWLDybNXI0oE2dK 4NzGCVRr7O3/nuO9DCCKJvOzFo79qFB/7X7JYgIJz917qQkyav/h8/D1Hb90y6vc Ni0uerVgf594UMvKDMYFZPiiJFz5dIc8aROMFiJz2LEkAIBbmiIF6NkuCA9EGRRH C7McZAxh72ovz13YFSYXm5BCA2wNYXk0YPfYVwgunP0/2SSoM2UN0ZDEhrlKZ/5/ U/3w4SuOkkib+NDlIgCHCNXNMI519D52LLTtY22jf7mKuy3HYbQeP9QZ3H0VB33j E4Q2cA9ACBj2WgCC95iuu30hIVaeDqxP4nME3zoG4AWSvkkeZ5twyrcwRhGwfJ7t M6hw5iY4if813OUJmcgFetybWdDT5S5rbVvxfbi5sHk4rdssgpTJnHkiUgKeeKEo DPVLciKv2AxDncRPZTmyWnlnf5X++ki9/VSBLKrKrKBZpUh8pG4= =vdJV -----END PGP SIGNATURE-----