-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 14 Feb 2025 13:06:51 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: armel Version: 1:9.2p1-2+deb12u5 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Changes: openssh (1:9.2p1-2+deb12u5) bookworm-security; urgency=medium . * CVE-2025-26465: Fix MitM in verify_host_key_callback. * Fix incorrect return values on a number of error paths. Checksums-Sha1: b670e583253de55c9dcf49e87413d2805efa533f 3462396 openssh-client-dbgsym_9.2p1-2+deb12u5_armel.deb 31cecf7e1ba372e5efe006b6586aaf140873fe1e 339256 openssh-client-udeb_9.2p1-2+deb12u5_armel.udeb f88a554acb9a9244ac3a50dac5bbc4b561b83c25 862676 openssh-client_9.2p1-2+deb12u5_armel.deb 3773e5103ad3da8fe4a97b6bb96639868a208751 920744 openssh-server-dbgsym_9.2p1-2+deb12u5_armel.deb 4a02f47bfbe64a01200cd7a3c74ab2132b653f5d 350504 openssh-server-udeb_9.2p1-2+deb12u5_armel.udeb 7d06abd0c23cc6a44895e1efc716fbad0fcc26ad 401572 openssh-server_9.2p1-2+deb12u5_armel.deb dd67681d6e969594429406ef63e8c56d752507fa 164472 openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_armel.deb b916150cbdf7457b1bd024f0446307f31574ea8c 57116 openssh-sftp-server_9.2p1-2+deb12u5_armel.deb e9f6488aaccd02f2d1f742ea48dec5e81f85221c 2714804 openssh-tests-dbgsym_9.2p1-2+deb12u5_armel.deb f3151be6eec0ac4574cc2b8451caa2a18aef7c4e 926348 openssh-tests_9.2p1-2+deb12u5_armel.deb 05ddf4ddbdf5a2273475288f84c362d9de0bcb17 18424 openssh_9.2p1-2+deb12u5_armel-buildd.buildinfo c8b682025b47d0d0053716baf0ddededea861b4d 16864 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_armel.deb 6d57268e5782403c2a073ecaecd9a51af52e45ef 187404 ssh-askpass-gnome_9.2p1-2+deb12u5_armel.deb Checksums-Sha256: 7085ac27886a4eff423835be9284834b182ff51b623cb84068c9a2bde1e4ed62 3462396 openssh-client-dbgsym_9.2p1-2+deb12u5_armel.deb 22b13f95f3be8e02e9e216fb3b58787179dc010c7d2cd6c2547107b130794583 339256 openssh-client-udeb_9.2p1-2+deb12u5_armel.udeb 864ec4d3f42b542781ef23722e0e976a73f1c4acdce82f9253b0d8a295419dd1 862676 openssh-client_9.2p1-2+deb12u5_armel.deb 5ca66765968332dd36c71bb92a34f8f47d54cdd7da65868a195489713040e123 920744 openssh-server-dbgsym_9.2p1-2+deb12u5_armel.deb 5e3f965566f9ed5a0ba569d3af11e8f35c6c1197f2f6c6b14540eb32d9caac6e 350504 openssh-server-udeb_9.2p1-2+deb12u5_armel.udeb 2cde36bad7b1b4e2a4f6146b543eeabc6c0fba996838fbc4a81e9734337743b8 401572 openssh-server_9.2p1-2+deb12u5_armel.deb 2e990864a816f61a1b7eb241f830b7c323a3609f161b53057733ba9fbd76724b 164472 openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_armel.deb c03efca62021e269743ee85ac9f541ed9290080bfe7faf19cf3645db16ff0b42 57116 openssh-sftp-server_9.2p1-2+deb12u5_armel.deb 7634a0d95b82c256ca1ec1604fc1e32e449928d9822471f4d39ebc5eb4bb53f5 2714804 openssh-tests-dbgsym_9.2p1-2+deb12u5_armel.deb b46139c97422ba81d757b7d94859fd0bcaafee04b09a0598600aa73d16de69a6 926348 openssh-tests_9.2p1-2+deb12u5_armel.deb 8db8c644b6bd2177232db37fc8af5a77685b1223ec448adbd293a3afd06f5e53 18424 openssh_9.2p1-2+deb12u5_armel-buildd.buildinfo 248f046c19e085e6ccf03cbd2c72d7c527b26afc1ee601121c8676c7ce75fe7f 16864 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_armel.deb 2922ac556c9a200baf08accb021dd7be98654f17f1032eb1689f3ed30783db36 187404 ssh-askpass-gnome_9.2p1-2+deb12u5_armel.deb Files: 57922293509d44dcb4b6b8682cdcd151 3462396 debug optional openssh-client-dbgsym_9.2p1-2+deb12u5_armel.deb 588e49eba819db240200ee05acd05c66 339256 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u5_armel.udeb 848f1ebd8f99279685511b49eba90bad 862676 net standard openssh-client_9.2p1-2+deb12u5_armel.deb 61c8eb9b0ec7700ba9545650bf76d438 920744 debug optional openssh-server-dbgsym_9.2p1-2+deb12u5_armel.deb f5b840f1f3bb6900b6b7e0fec2c2b0d0 350504 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u5_armel.udeb e3fcfd79aebbff5499c10cf68bf4955c 401572 net optional openssh-server_9.2p1-2+deb12u5_armel.deb 01d1429bbcc00ab3588ebd6586a25378 164472 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_armel.deb 3ee75e51f2a9ed60db9b5386e8fb1266 57116 net optional openssh-sftp-server_9.2p1-2+deb12u5_armel.deb c7b339dd8d377c26d7b14ee8e8195abc 2714804 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u5_armel.deb e7c1a101d25acc77eddf2e49be3f44fb 926348 net optional openssh-tests_9.2p1-2+deb12u5_armel.deb 39815da615351dcbd89f906721ada95c 18424 net standard openssh_9.2p1-2+deb12u5_armel-buildd.buildinfo 96f3e2d652915a6d3e83b43d5965fad6 16864 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_armel.deb 8845b684dd3f6ff039c746878e23397c 187404 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u5_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKAzExpjGvTI78ZO8LARVyvnD3xkFAmevVZYACgkQLARVyvnD 3xkxMQ/7BGKw4eZ+wqC1fj4HNmLvSXDXYCc/y9GP9JT/19Lvf/voPkcZ+lw9NS78 BEdKGq3SwejlDLfnd0ugi5vSRFcPibYpYMgyXIR5lMq7KvhQVB3WgZpOvd3fw75Q GXRGMgYQiKrK8QrT0EdPseytJgZkgMWqo8LPlXcDuFJk+p4ftKY8D5msIFkG4w8u 81pNtyUDqW9Qgh+0g2pZN6pukVu03awwcvM6VNys48daJ1+tJKh5sIVztBim1Wwn tUfD3vovNg1kUzdXZwcuDDKh5BhhYCtc1fiJBVVrxz8VCa1/rW5EAT4fk2HNFczq 91OvZWFspydndFP+KK4WYB8SBuZ9M29FvoWHfFOe62kXfQx20dBHDp3f8zfTE6SO i59G0xAuLe1LNdUiKffICDwjnCYeD7FgBPJkfJzzP3NOAu0tmbT6liT0On8ZMm81 pYKguefnvWR6Hu0cL3fasKzTSOzDZ8M4m+ErOyQJtsGjYcJ9lLzHo5CCY1nr7//X fua4ev+blaMlzNzd6/4OwCcz439Q+SgpXfU5jTKSmHCEDD/QuEzODy73wvpQdmQw 1vk3MmIXIfIkWQt0ALaGJVh1mY/msvNMZm3MZUHjp+ThdGn53CQcazDpvy+MrzXl LSp042w+dIyzedPY/z+5PUXcMhnVcrCmR9cT4B//PJ1MkAOTqI8= =UNWq -----END PGP SIGNATURE-----