-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Feb 2026 13:15:29 +0000
Source: openssh
Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym
Architecture: amd64
Version: 1:10.0p1-7+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Description:
 openssh-client - secure shell (SSH) client, for secure access to remote machines
 openssh-client-udeb - secure shell client for the Debian installer (udeb)
 openssh-server - secure shell (SSH) server, for secure access from remote machines
 openssh-server-udeb - secure shell server for the Debian installer (udeb)
 openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot
 openssh-tests - OpenSSH regression tests
 ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad
Closes: 1080350 1117529 1117530
Changes:
 openssh (1:10.0p1-7+deb13u1) trixie; urgency=medium
 .
   * CVE-2025-61984: ssh(1): disallow control characters in usernames passed
     via the commandline or expanded using %-sequences from the configuration
     file (closes: #1117529).
   * CVE-2025-61985: ssh(1): disallow \0 characters in ssh:// URIs (closes:
     #1117530).
   * Fix mistracking of MaxStartups process exits in some situations (closes:
     #1080350).
Checksums-Sha1:
 ba33ce0a0b407b000eee2b4a1be72e5ce2b19c7d 4059168 openssh-client-dbgsym_10.0p1-7+deb13u1_amd64.deb
 0f08029da37ed788008a47d4d2c58e8c3bf1ef7d 392076 openssh-client-udeb_10.0p1-7+deb13u1_amd64.udeb
 c839519368db3b079486b98dd2cf7ac43f50e8cd 985640 openssh-client_10.0p1-7+deb13u1_amd64.deb
 8fd90d4fe0cf327834ea08eac48412a2a263e3e1 2517432 openssh-server-dbgsym_10.0p1-7+deb13u1_amd64.deb
 3b9d2c8caec72569903c9e9252337426e809a2f5 507152 openssh-server-udeb_10.0p1-7+deb13u1_amd64.udeb
 8eba088c49c26f3d376c0498feb7c6b3f3983c8b 601912 openssh-server_10.0p1-7+deb13u1_amd64.deb
 ab3bae5fb087ca4955cfd1160d69d9ed37ba42a6 168928 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_amd64.deb
 e04b32d81a502f248255955d70244c294ffdd9ed 65328 openssh-sftp-server_10.0p1-7+deb13u1_amd64.deb
 d8409daa142c9a54d6475ab1ce992a217690d786 3120064 openssh-tests-dbgsym_10.0p1-7+deb13u1_amd64.deb
 9c10c80059bff5b971bac4181fda33447c2c0e95 1032264 openssh-tests_10.0p1-7+deb13u1_amd64.deb
 dba53330d862cb38a291fc32a52f242a5a694d59 18635 openssh_10.0p1-7+deb13u1_amd64-buildd.buildinfo
 6a9b6d7176d292b0fb90757eef00e387be9629cb 17280 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_amd64.deb
 635c8dbc445204f444e37c94d4030ce28d204f1d 156464 ssh-askpass-gnome_10.0p1-7+deb13u1_amd64.deb
Checksums-Sha256:
 7aa57efdbaa9b90082c2762f2e829f4b9cc20107ea68777dc4b7653566e4efe9 4059168 openssh-client-dbgsym_10.0p1-7+deb13u1_amd64.deb
 efe36a4fbf5fe8a60aecc04282a5021ad2b2ba1224adc3e9769293028caa5cd6 392076 openssh-client-udeb_10.0p1-7+deb13u1_amd64.udeb
 16d61bcceb4ad8c7c1b4957f7a9796f47c974f7ea9da553d60b6d6b4c84982e4 985640 openssh-client_10.0p1-7+deb13u1_amd64.deb
 3bffa4439140bcb301b651b021262a96ebc3068a8fa48b61e9051f5a43f834b3 2517432 openssh-server-dbgsym_10.0p1-7+deb13u1_amd64.deb
 747499887336e57d01d221404716a8e78d7c989b8969c1301044a74a4fae3ddc 507152 openssh-server-udeb_10.0p1-7+deb13u1_amd64.udeb
 77c3add401cb337ffd5f637b1a4f3ed80310bd2c6ece55719798afaf136e76b5 601912 openssh-server_10.0p1-7+deb13u1_amd64.deb
 9369f2928389a118c0d0bec3b7ad1c6dec9060c9bf871062bde50b5f2cb8898e 168928 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_amd64.deb
 0a58a4b1beb5df638e37d8ca3b6a18b80a29d08f4c4d463573ce0628de0eae16 65328 openssh-sftp-server_10.0p1-7+deb13u1_amd64.deb
 258af95b094370b4887a286eb9bb3f137cc6c7bf1839f646fd54257b7ac09022 3120064 openssh-tests-dbgsym_10.0p1-7+deb13u1_amd64.deb
 c79893dbc35848c021bf971b0a535f714e081785b5fa6e1682ec771b06aee713 1032264 openssh-tests_10.0p1-7+deb13u1_amd64.deb
 23c22a0c372979289df8b9a447054592a9a2f8484d9a875b2ad2b28ac1a85ff9 18635 openssh_10.0p1-7+deb13u1_amd64-buildd.buildinfo
 3b753e23026016d1d453080fa0dccb41832cd3f04cfe4d4751c0b2558a93952e 17280 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_amd64.deb
 ea940543c4556ec7db6288970dcdfa2ee87328999554655295e6761ba4995590 156464 ssh-askpass-gnome_10.0p1-7+deb13u1_amd64.deb
Files:
 e3c7f39b5f4b17973ff52d4fa4050728 4059168 debug optional openssh-client-dbgsym_10.0p1-7+deb13u1_amd64.deb
 73a6f0100f069c8c581d6c416b5209e6 392076 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u1_amd64.udeb
 7773b0b2eb5a02a7d514aadb02b909e7 985640 net standard openssh-client_10.0p1-7+deb13u1_amd64.deb
 b5723699199cfb14e18bb12f4da33f6c 2517432 debug optional openssh-server-dbgsym_10.0p1-7+deb13u1_amd64.deb
 3453b46ffdabd8171e50327adf2d64df 507152 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u1_amd64.udeb
 be530e1948065765b8a2acbfb297f480 601912 net optional openssh-server_10.0p1-7+deb13u1_amd64.deb
 e527935f69bc92a21ec89cfe640f241d 168928 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_amd64.deb
 0ce28777f786d4fe8f73f4bcee9ab45e 65328 net optional openssh-sftp-server_10.0p1-7+deb13u1_amd64.deb
 6f7f58ca8cf3be76ef3e555903f78582 3120064 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u1_amd64.deb
 61c103b764c9b807e30e341a2fcb8d31 1032264 net optional openssh-tests_10.0p1-7+deb13u1_amd64.deb
 65e36c5db8cd8fb0bd28a4673a2406e3 18635 net standard openssh_10.0p1-7+deb13u1_amd64-buildd.buildinfo
 f1b41cfab670ab3d1693fca60a33e8ed 17280 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_amd64.deb
 0af707424623f366dc4ef428e52eeb41 156464 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=4Fmj
-----END PGP SIGNATURE-----