-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Feb 2026 13:15:29 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: armel Version: 1:10.0p1-7+deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1080350 1117529 1117530 Changes: openssh (1:10.0p1-7+deb13u1) trixie; urgency=medium . * CVE-2025-61984: ssh(1): disallow control characters in usernames passed via the commandline or expanded using %-sequences from the configuration file (closes: #1117529). * CVE-2025-61985: ssh(1): disallow \0 characters in ssh:// URIs (closes: #1117530). * Fix mistracking of MaxStartups process exits in some situations (closes: #1080350). Checksums-Sha1: ba034e2cbde287b5227ed2d4e7290f3c94426c34 3771840 openssh-client-dbgsym_10.0p1-7+deb13u1_armel.deb aeddfc5738a4c56532a37b2c798551f578396593 361564 openssh-client-udeb_10.0p1-7+deb13u1_armel.udeb 01e03e3920a8dfb6c52066256f89ab8ba66924a2 877260 openssh-client_10.0p1-7+deb13u1_armel.deb 3bdb4dc0911b79d733c2a1f5460fab9d9d1a4991 2359484 openssh-server-dbgsym_10.0p1-7+deb13u1_armel.deb 3cdcbf62d7e1202a4a824c7e20e5b49cdb67bff4 454676 openssh-server-udeb_10.0p1-7+deb13u1_armel.udeb db07e9074d7f4449e9fc4785b0a8e0535ba645ac 529296 openssh-server_10.0p1-7+deb13u1_armel.deb 66519449dd9289e9498f2ca58d47b5f8a904a515 169876 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_armel.deb 0d99e057d6e7ba06af628acdd045d9f337333e98 58396 openssh-sftp-server_10.0p1-7+deb13u1_armel.deb 79c063be08b400a8a380d1de4c0c70d65d157443 2915844 openssh-tests-dbgsym_10.0p1-7+deb13u1_armel.deb 1fdd952da81190996351e21ace8bf4acd17833dd 925392 openssh-tests_10.0p1-7+deb13u1_armel.deb 0bbe691673b1fe85a8d3fa066522de8397d25451 18424 openssh_10.0p1-7+deb13u1_armel-buildd.buildinfo 494366cc1532c60b1af58b063c29f20a5f01e7c5 17192 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_armel.deb cfd9af0581a478ce0e07b984086b4f919d9e3323 156044 ssh-askpass-gnome_10.0p1-7+deb13u1_armel.deb Checksums-Sha256: 735c5d1cacfeada514c202d052b415b80a4fa9f063bf79678c4a848251afaa38 3771840 openssh-client-dbgsym_10.0p1-7+deb13u1_armel.deb 7838ad954198046a8f13174371c4072a942604d38b9a65943dc20947c7f2062d 361564 openssh-client-udeb_10.0p1-7+deb13u1_armel.udeb b90f4fd5479b5060e1494c9e261226f71fe1086572f7676cb34bc1416489835f 877260 openssh-client_10.0p1-7+deb13u1_armel.deb e85b50a9bf39d9b403623d73f8509431a5069dcc4ed93424de008ac68acb150d 2359484 openssh-server-dbgsym_10.0p1-7+deb13u1_armel.deb 4e9b9d2b1eda9d5b45a87065d35cef62e7537e1901bbd8bba665d84b4cc64e12 454676 openssh-server-udeb_10.0p1-7+deb13u1_armel.udeb f6c63b1ba8a49ff47add52a46ba07841a5e2d99844cf8f2d161345fd0bae0393 529296 openssh-server_10.0p1-7+deb13u1_armel.deb 4acd958539c348babd3839f55c628fe2fc28754cc0c7b8367c3e8c0c5a69e8c3 169876 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_armel.deb a0dbeec9396462bd591c0acdb1742991495bf1b446d1439b2f206b51a3c4c114 58396 openssh-sftp-server_10.0p1-7+deb13u1_armel.deb 9fe305c54f51171d3e94439d4400dda468afdd44a4fb32e65019f2a8b88dd4c3 2915844 openssh-tests-dbgsym_10.0p1-7+deb13u1_armel.deb e4a4e0d7feb1eafaeb073b610bf72ef3b1b9d55f96352c43b7dd76cc2deb62b0 925392 openssh-tests_10.0p1-7+deb13u1_armel.deb 4faf2b6ccfc7388e345c32834c8cf63a1979352333b7acc7d710f184761fef3e 18424 openssh_10.0p1-7+deb13u1_armel-buildd.buildinfo 50506005ea67fc833dedfd96be6a038216ad6678a786a696706f9a82d3b14bb9 17192 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_armel.deb cb6e3e9082bf1ce4b42ece113dd3a58a21b6d6fd07c9a8368ea4bb7634cb171f 156044 ssh-askpass-gnome_10.0p1-7+deb13u1_armel.deb Files: baf9737b84443dc086239ddc15adae7d 3771840 debug optional openssh-client-dbgsym_10.0p1-7+deb13u1_armel.deb 19df2ce3bdff2166479e946102a6861a 361564 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u1_armel.udeb 3b6ab8d12499006d078f66623d9feb92 877260 net standard openssh-client_10.0p1-7+deb13u1_armel.deb e6b1ff1c9956ec112a10f74d073661ff 2359484 debug optional openssh-server-dbgsym_10.0p1-7+deb13u1_armel.deb 951a7b97f146b34dfcc5b489a95fd415 454676 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u1_armel.udeb 547afb57b39cff8defbc38d3ce53896d 529296 net optional openssh-server_10.0p1-7+deb13u1_armel.deb 80140384da32af617a7b3d7f01d38cfa 169876 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_armel.deb ac6e47a394e81a34bfd36a92d486de3c 58396 net optional openssh-sftp-server_10.0p1-7+deb13u1_armel.deb 2784656904af6ef88fee3da81118b267 2915844 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u1_armel.deb 897bd4dca80c7129689742e1d9993fc2 925392 net optional openssh-tests_10.0p1-7+deb13u1_armel.deb c2bb7b93f9366738e50fb2098ae58ee3 18424 net standard openssh_10.0p1-7+deb13u1_armel-buildd.buildinfo 8175e7996de826357f694e0e1f091dc2 17192 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_armel.deb e813a02620b668c8a7d667ac040007b4 156044 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmmiFckACgkQScpU3dYu lLh7IQ/7BNE7rRIDBwESBMyZfiQ9eh/UqsaOm3ENEYoF2miNmouQPzoHbQSu7IAS 4nVyC4vxIKDI0kVH1owgPnkmBz6iVF/y0YA0dXMgXhz9Ag3NPnSUXywJI5Ix7fb4 A7bYSRxHxF3aFwQiasPDkpNFK8HKNZfYWpFjN8uxtha5aXzB6Tc5NBndYLeBh4td FcLeTDXPDYPi3V4x7ktjQlvMbiiDy+TZyfKK+GJlv0wUIhfGku2NGfdF8kO2scIu CquAQIwfoCVstuEMblkcTmKTIcBHlB22VSUCsSW0TSqrbl6xvjYP+g3O/Bc4lV9m kJxAzF8gct5qUQ3H59MghpgcJNMgjs3LmCvYBmur1tSiqwk2CG7Mk8HClbJkaz/T cMt80QAsqCwRNVNjxA316K0NdlKyGzsVJj+LTWZFYOlLctSTG7O2k83IFERYWTZg 8GhDLLnSXWFCax6UldMgNWhNu9cftoEgNvdqkITaHMs+MyoBHQSyZ++c/nLZCu+C xhbLy2w+eMiU5uk6cYLOSkzCqqctyeGVFd0flE5KIAoQNKAEAuxAxOkFZsx9TC4T 8vyaGyCQhDyYJrCcPdXB+4D2ipquCduw3ET8CNeHi5+WGJoPMPgYc1zR0p+hpSny 0pXb71Ms7rpxFggIfMERfnClIdsoCzxms+MEcbY8nm95ztnSlr4= =i8jQ -----END PGP SIGNATURE-----