-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 14 Feb 2025 13:06:51 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: amd64 Version: 1:9.2p1-2+deb12u5 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Changes: openssh (1:9.2p1-2+deb12u5) bookworm-security; urgency=medium . * CVE-2025-26465: Fix MitM in verify_host_key_callback. * Fix incorrect return values on a number of error paths. Checksums-Sha1: db47c39f3ec39ddadc858d043c57969e586b831e 3813460 openssh-client-dbgsym_9.2p1-2+deb12u5_amd64.deb 6d024c683c330959911357a196afe5b56ccfff96 378568 openssh-client-udeb_9.2p1-2+deb12u5_amd64.udeb ac16385987f2a8579b97a4dc5501439ec0310c3e 991216 openssh-client_9.2p1-2+deb12u5_amd64.deb 7b6a30b2ba8f8e0061200f7d6bec855547c92b2e 941120 openssh-server-dbgsym_9.2p1-2+deb12u5_amd64.deb e1ddbc7a03dc892f7aa354092ea6b17683e4aea4 394712 openssh-server-udeb_9.2p1-2+deb12u5_amd64.udeb a1f9eb479062cf9ea1bebb1b62c2fd1ef1be069a 456564 openssh-server_9.2p1-2+deb12u5_amd64.deb 2bb7e5ddd4dcf5bf01d1ce0b662a673173f5b3b5 165424 openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_amd64.deb dee044c4c551550cebbf03ad252ce06312b5ce33 65840 openssh-sftp-server_9.2p1-2+deb12u5_amd64.deb d8198d7b95e893ac591581fc7ec6923b6ca751c2 2964368 openssh-tests-dbgsym_9.2p1-2+deb12u5_amd64.deb fe9bf1526375c716fe690562760c7a113d65917e 1047688 openssh-tests_9.2p1-2+deb12u5_amd64.deb 9227395ae3f5e85a67654a1cebe587b92e1267c1 18614 openssh_9.2p1-2+deb12u5_amd64-buildd.buildinfo 818cd48cdaa32bec960c11d26183cf136e84fe9d 16992 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_amd64.deb b8ba354523a8da1c048211f0ac91755388e992f6 187956 ssh-askpass-gnome_9.2p1-2+deb12u5_amd64.deb Checksums-Sha256: a8faafc9664f3da55c0c8d5ee92480d7a32c217220645b1b3f9ecee276f4b6ca 3813460 openssh-client-dbgsym_9.2p1-2+deb12u5_amd64.deb b50097bf8b45b728efec599e98001ea8387702f0054c0ca1a8be5386aa351b82 378568 openssh-client-udeb_9.2p1-2+deb12u5_amd64.udeb 3be286e86edc4c40a5941671f8bf685664050bdecf41e6dff50cbb430b952953 991216 openssh-client_9.2p1-2+deb12u5_amd64.deb 0aa755015d1aebd91f2d33a676f278546134c7ab49c8ff3ed541eee5d6eb99fc 941120 openssh-server-dbgsym_9.2p1-2+deb12u5_amd64.deb ca132426a29c91e98742c414e43dfc1b4d88bc293aa1ae6efe6243f3c2824bc4 394712 openssh-server-udeb_9.2p1-2+deb12u5_amd64.udeb c01207db226f83b6a1c8041826a4934166ec87d92a0957a9560b37cbd953fb06 456564 openssh-server_9.2p1-2+deb12u5_amd64.deb 73b201f269830e2a39f618e008e1aad2ce297e8a36f2e332b076966436df443b 165424 openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_amd64.deb 8d9b3e6be5d80be562a30bf6122771d6a02335c2e7e4be97e1571c6d4ecf2cf6 65840 openssh-sftp-server_9.2p1-2+deb12u5_amd64.deb 973e98d96f6dc4342065109a1b72ca89df751f2200909ed90c2fe274392bb1ee 2964368 openssh-tests-dbgsym_9.2p1-2+deb12u5_amd64.deb 787718130f06354663cc85f860fb180cbb04444b6918978595bd7a2b94fed81a 1047688 openssh-tests_9.2p1-2+deb12u5_amd64.deb 30af5c1906d1e2b743282af5fd4733513f5f8dfceb58d020cf4cb0f38f1e9755 18614 openssh_9.2p1-2+deb12u5_amd64-buildd.buildinfo 094259b8c48e7729702c04fcad3a6a802ef73068d29ad529180dd602ed61bf9b 16992 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_amd64.deb 2fabe598f9ef4dca8655bc06a06d853edb9de67e2896547500aad4f314bdd6c2 187956 ssh-askpass-gnome_9.2p1-2+deb12u5_amd64.deb Files: c09d39231c0ccda9d9205f1db635c7b9 3813460 debug optional openssh-client-dbgsym_9.2p1-2+deb12u5_amd64.deb 4a3705fa0153f5252579d42ba962dff1 378568 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u5_amd64.udeb d406f1a8cc39afb782839de17ca8ac28 991216 net standard openssh-client_9.2p1-2+deb12u5_amd64.deb 3f5e20f566e1b3e26f3c414d96102c04 941120 debug optional openssh-server-dbgsym_9.2p1-2+deb12u5_amd64.deb aa07d5b17c408dfb5efd83e42d439657 394712 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u5_amd64.udeb 3dd625e5e190f24ded6ff5cf135274b3 456564 net optional openssh-server_9.2p1-2+deb12u5_amd64.deb cdf7c8450cc641961633f16e65d6c6da 165424 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u5_amd64.deb 7ddf19875e24c80ad643ba492937ddc5 65840 net optional openssh-sftp-server_9.2p1-2+deb12u5_amd64.deb 65963815619c445c5da3490d0edaa756 2964368 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u5_amd64.deb 03c9de3ba58ca73d30b4ff1562d4a586 1047688 net optional openssh-tests_9.2p1-2+deb12u5_amd64.deb 2da9e209dd5d0f55df10773e2b52e622 18614 net standard openssh_9.2p1-2+deb12u5_amd64-buildd.buildinfo b1ea973432bb4aa6e510d52a08cfbc09 16992 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u5_amd64.deb 191cfbe72059c53e50f4e9af56bddb68 187956 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Unr4QHS5Yi4rr9Q3KGKEAtjIVgFAmevVCIACgkQ3KGKEAtj IViqQA/8CmcsqW3cQdjKFEFkiKNklavxjF8DZ7s5bEpakt4dOE9fNHjI50qY2CZd CwI8cUP/rj6dmBlo0XJUcS6tzUUReVH/Y4rUvAk/luoMWQx61/CQ9ewTsDuaQo1u X4vfXZNqHPd+5/i49vIn6B8RO+f4Pwdf37HJbksVCVneugtoiHcMrGlrYp85jh91 hx/ctV0IJPlC2NYhRUhX3xc9d80n7tYwCKRNL7G/+Mw04zfZV8GR+JX6YRX5ATew qiHlDa9YXM3Jk7BjkTNsZKSzd5GP2q/mccVNSZaiWQYDKb5BiN4sxmAVhxQjzTA6 Zv1HUjyr+63IYxxbcLfVUAeyiKIrLrIxzwgnHR8mR9mR1hsUjT5E7KI/m32CZmgl k5KhbwdEzv19kKCQ1Ne+ybi7Sk53LGjmMfdSVYPeF9NtQfVI8uF7aVlwZSUeAzR2 M4GsHAfbF9yS6C9DQILi7IgvHIPnkCfp1MtfgIsPZDrrpUxPK6eAC8GQZodzNuSU Jw3y+AfJ9P47F9ZPdnsXFOt6vi/zMTP2dgudsgt/NAeAQO6piLaJDeUW1XXXd40S /sQQi9MKyI40rrb4+JkQ0KbUfWLeypxeB1KvSEx/MBULGSaeiIPaWVuVhmC0eWGb CsLewW8nELegTTht9AwMQwhn6VjAnKXC63t9WhU1ygPY9D3hYgQ= =dkPE -----END PGP SIGNATURE-----