-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:29:20 +0100 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: riscv64 Version: 1:10.0p1-7+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-01) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1130595 Changes: openssh (1:10.0p1-7+deb13u2) trixie-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: b9324e06ed8d8c01e4d35751812a40e0edb494ee 3876144 openssh-client-dbgsym_10.0p1-7+deb13u2_riscv64.deb 042bb243c2e586696276ecfdff00e47114ac41bc 375436 openssh-client-udeb_10.0p1-7+deb13u2_riscv64.udeb 35243ea40a494f5356f36cf4a44f970d5fb11db5 987472 openssh-client_10.0p1-7+deb13u2_riscv64.deb 2b0a70f7240877cd2520802053e1a954108285a6 2435160 openssh-server-dbgsym_10.0p1-7+deb13u2_riscv64.deb 10f7f1eb3df57d7a5e624b61a4c8913b538c2349 495760 openssh-server-udeb_10.0p1-7+deb13u2_riscv64.udeb 5e1320626f8d95d0362892883731eb37d365567c 603492 openssh-server_10.0p1-7+deb13u2_riscv64.deb 030aff5540334a253603919e45fb20a9ed8b833d 164952 openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_riscv64.deb b373bfec1431106bd8631b5ddab6e08a3c428a7b 65420 openssh-sftp-server_10.0p1-7+deb13u2_riscv64.deb cb6951f0f0ce2e63c2efa92b526364ebd5efd968 2969668 openssh-tests-dbgsym_10.0p1-7+deb13u2_riscv64.deb 6b462945049b7746f8b8ee1434f52f383ebe8a50 1239760 openssh-tests_10.0p1-7+deb13u2_riscv64.deb 9807d8672707cf840c9658061dd9392a72f2e037 18631 openssh_10.0p1-7+deb13u2_riscv64-buildd.buildinfo fc39355014b76c02bdebaeb740bfa809c020f19d 17140 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_riscv64.deb 373d42718d927d22db1776c2b46c6f711cf10318 156160 ssh-askpass-gnome_10.0p1-7+deb13u2_riscv64.deb Checksums-Sha256: 53945380422925bfbdf69d72f47009d87d24a5e3336b88aa4f96faed68e3c44d 3876144 openssh-client-dbgsym_10.0p1-7+deb13u2_riscv64.deb d28d35249314d67fbb7b06f798438ac6b9c52b51d02e7c743998d441aa187961 375436 openssh-client-udeb_10.0p1-7+deb13u2_riscv64.udeb caf43cca0642a10967fa78f5a027bc2953a798407b3b2b63bfb641288bf4a12a 987472 openssh-client_10.0p1-7+deb13u2_riscv64.deb 201d21476317bb2b964fc601843f144f5939eba3c282aef52c6cb7226958ec57 2435160 openssh-server-dbgsym_10.0p1-7+deb13u2_riscv64.deb 5c3aacd65256a76a8c1d293856bedc237d4231eb0c11a0ca53c7d589794875bf 495760 openssh-server-udeb_10.0p1-7+deb13u2_riscv64.udeb da8f673cecb4efa7c050cf0e804ee8681a494c08d395a7e30c80295e12929cc3 603492 openssh-server_10.0p1-7+deb13u2_riscv64.deb 5c434f5b849d0d9b9be9fe37b32d9212d287bab6c15ed9269451b79eabd64857 164952 openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_riscv64.deb 70d39dafc4d8001c05609b18b5b4db9e15ece9de734c1fb2f729af9c75b3d902 65420 openssh-sftp-server_10.0p1-7+deb13u2_riscv64.deb 56a0cce34866e84ec5a14a93129016d9c0f749021dd335a6ba3c6da71d94484a 2969668 openssh-tests-dbgsym_10.0p1-7+deb13u2_riscv64.deb a03d67b82716b2e30b7e2ffc7a53a367c98231d76ffd63e409726141af628f14 1239760 openssh-tests_10.0p1-7+deb13u2_riscv64.deb 5d85716eb6427d2580d93092048434e28adac30ab6df1fab6da8f417d6699fd3 18631 openssh_10.0p1-7+deb13u2_riscv64-buildd.buildinfo 234bc638e88a6ac6c7a7ed75d1769a7d4a5768f02e8b1f51918da8f55518c125 17140 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_riscv64.deb cd94850172adfb294fd10819211099ee0b71806e069b7b237efa71ead8b82641 156160 ssh-askpass-gnome_10.0p1-7+deb13u2_riscv64.deb Files: 7c07428e3282d4aaec1feec02f4f7c83 3876144 debug optional openssh-client-dbgsym_10.0p1-7+deb13u2_riscv64.deb f939ab6f256d5269352effa2083429c8 375436 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u2_riscv64.udeb 979cc780517a7365c19c8eeb60be1c90 987472 net standard openssh-client_10.0p1-7+deb13u2_riscv64.deb 3800e21118b71d0dc9f260a9ebeb196a 2435160 debug optional openssh-server-dbgsym_10.0p1-7+deb13u2_riscv64.deb 23ce52fea4aed4c535854f5c5d209ecd 495760 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u2_riscv64.udeb 0335508bf07d5ce6f4b1d0ccd0996de4 603492 net optional openssh-server_10.0p1-7+deb13u2_riscv64.deb aad9b5ec809f6fe7536a6effcf32e3fb 164952 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u2_riscv64.deb 2cd49f3b562931c1e5ba7075ecb049b2 65420 net optional openssh-sftp-server_10.0p1-7+deb13u2_riscv64.deb 0087af5c10d739f6fef0b6fdd7b5059e 2969668 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u2_riscv64.deb 9da2f819757483f5b7d8ff4489b7b8b0 1239760 net optional openssh-tests_10.0p1-7+deb13u2_riscv64.deb faf9582bec4c9264f6962e8f39543068 18631 net standard openssh_10.0p1-7+deb13u2_riscv64-buildd.buildinfo 5706765a4bf43d60540360c7cd2ccdde 17140 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u2_riscv64.deb 903904ebd41819d224290b09e23549d7 156160 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u2_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3smN1vgomTkXJcrkIhSPlPtgqxkFAmnRsG4ACgkQIhSPlPtg qxmW4A/+JoUoZC3+AKTyFRRKaB+ALn7IGwZI4oBJl6UpYgxDhGjnhTSxPPdh7ved Fim0+rbnJosSOmGGvKQIo3zo2JjXl59/Axp8gJjC2ME/T6Zd7KpUnh+ogbnDkvwz dKDFLc7tONWci48e3fXM5+MZALSD3TG4c0R6H4IMEyqqiADQ4gsq+FM+axiH5VlJ aCB0sS4czLWINLogFOMbwhuK6/nOcUyLw0wud45kX5Euc/8YAG7lrHooW+VYzuH1 Ai976hHQ+mjZasn57GwCJyNN7AwAzMeo6zxOlc4zHyomtPJdJQwfQX75r901gOAh WQTcs03OmUgZsg+I3n1qiww8428wDjsZkoo/4EmlwpmdwRj6FCd7Hc8oS7ct8+S7 grCoBPGmdQyM/spbLDx5shZVCMTxArJPCMKxIh8BofMaaud1MkfUYSozlUSs/T6Z ZaxjrRv62PCm+GmSisPFPlEIpjJwhfMYvyLAXo6bYCsn/i8Hh9lpCPbJVLpFpEqi avhYuRNdU3E3iBzz4Os8QsKlGxwqsi+9V7BKzJ7K+jjS4AuZFeIu5C0fBiNc2Pt8 qQu+miYp67qGwKlE/fHDlOv6lp+FgckAwF+x1ZJOdV6dQB8zUeynzhWhza3I/J2n w5RK2cOQHu2MLvfscMWBZMDQ5PW49L767nQlhiM/xLHgEFzk4ZE= =dZwd -----END PGP SIGNATURE-----