-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Feb 2026 13:15:29 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: armhf Version: 1:10.0p1-7+deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1080350 1117529 1117530 Changes: openssh (1:10.0p1-7+deb13u1) trixie; urgency=medium . * CVE-2025-61984: ssh(1): disallow control characters in usernames passed via the commandline or expanded using %-sequences from the configuration file (closes: #1117529). * CVE-2025-61985: ssh(1): disallow \0 characters in ssh:// URIs (closes: #1117530). * Fix mistracking of MaxStartups process exits in some situations (closes: #1080350). Checksums-Sha1: 91059ccbbeaf3ba1ab3721de10b93ef6f5a531dd 3845676 openssh-client-dbgsym_10.0p1-7+deb13u1_armhf.deb e60eb3092bc9cb6b373e6890493251e9be408005 359604 openssh-client-udeb_10.0p1-7+deb13u1_armhf.udeb dda75ad02ef352a57d7b48880fb983692ff49ad3 895932 openssh-client_10.0p1-7+deb13u1_armhf.deb 8ba4edb63f33a095909b43fef59aec594ca84e51 2405916 openssh-server-dbgsym_10.0p1-7+deb13u1_armhf.deb d65f32d154f37a8b74e091d4d669ef62f6ad4987 458140 openssh-server-udeb_10.0p1-7+deb13u1_armhf.udeb 70357c2fc260479eedb4d9345425522b7e6fb46b 536944 openssh-server_10.0p1-7+deb13u1_armhf.deb 4d32fe91f8fa47610e18cbf2a52a00e472eff0d4 172360 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_armhf.deb 61a3c146eaae18a82ef0798b676aa3a5ea96f55b 58244 openssh-sftp-server_10.0p1-7+deb13u1_armhf.deb cf5c4ed7453a4c67bddb2c2a5c48785906d6d90d 2974292 openssh-tests-dbgsym_10.0p1-7+deb13u1_armhf.deb 19545fd28709f8410475c5e28d30d4c3084fe93d 939772 openssh-tests_10.0p1-7+deb13u1_armhf.deb de4719dc913bb080f0955cd064e9955f5f902a56 18438 openssh_10.0p1-7+deb13u1_armhf-buildd.buildinfo 7afc9ad4891dea0e2f50734eead38c81f8dca3cc 17252 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_armhf.deb 3232d9adea8125501cebb27a28d9d1e11741c00d 155984 ssh-askpass-gnome_10.0p1-7+deb13u1_armhf.deb Checksums-Sha256: 4ebd6c4d99b37751e348d54a1cd98373f447e39218e0db058e4535f7250ea685 3845676 openssh-client-dbgsym_10.0p1-7+deb13u1_armhf.deb e1458125cab8f70d7e39ef3be42ea4c7ed3bc4693b6e673416a16bcc1ff07145 359604 openssh-client-udeb_10.0p1-7+deb13u1_armhf.udeb 28e995992cae2742f38d1dc075cfdf3a9598de9669f4eb0a16289e97ce382780 895932 openssh-client_10.0p1-7+deb13u1_armhf.deb f6170e9739ba79324da73926235fa3f8f4359fe0f46d1ba084779cb06eff8558 2405916 openssh-server-dbgsym_10.0p1-7+deb13u1_armhf.deb 2dabb6841334b3858d4ea99726c31d4c132d39795f6083ec6743d603030c64f0 458140 openssh-server-udeb_10.0p1-7+deb13u1_armhf.udeb e253ce5fa8d651dae9847c6bd0db9686c88bc8c22160ae8dec7a51572d2697f6 536944 openssh-server_10.0p1-7+deb13u1_armhf.deb 149d700fa7bcf9848004f5677ec20e70b6cc9cbf852100f47509719e5d5c5182 172360 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_armhf.deb 5a42106d1eaa627ee61e4423f9a013226931acfc9e63db2645ea73590f79cb80 58244 openssh-sftp-server_10.0p1-7+deb13u1_armhf.deb 78f107ad9aa6caaa00c2f540ef7d33c8d7093b386383c068e1c927d767d370b7 2974292 openssh-tests-dbgsym_10.0p1-7+deb13u1_armhf.deb 22390ce318db537d898ce0577ee1837ee8a847a2750c4a3d25d09934c0e8420e 939772 openssh-tests_10.0p1-7+deb13u1_armhf.deb 216d4501ee32e2fd8726f07da46b8d11ddf80addf31b1624467c641ebc1811ab 18438 openssh_10.0p1-7+deb13u1_armhf-buildd.buildinfo a9ebbc0ac9cbf0061a31ea11f2f8e502ac76d276cd8fafd7dcdca914c792ee18 17252 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_armhf.deb 344c6d5043ade6accc5d711faf1f89b5cd06d211d52038c2320f0c9a322dccd7 155984 ssh-askpass-gnome_10.0p1-7+deb13u1_armhf.deb Files: 06bee0b78515ccafbe1c4bd582008e19 3845676 debug optional openssh-client-dbgsym_10.0p1-7+deb13u1_armhf.deb 8161ab3cf2617f3f256c5504405c4dff 359604 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u1_armhf.udeb 862fc691701c8ec50434bdb851d877c0 895932 net standard openssh-client_10.0p1-7+deb13u1_armhf.deb 1d505be8570d53386555a28fe182f1c0 2405916 debug optional openssh-server-dbgsym_10.0p1-7+deb13u1_armhf.deb 41cecd7fd0449e310139c6e4a7b7df8b 458140 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u1_armhf.udeb c57bb24fcebc23f45bea3284f315b03a 536944 net optional openssh-server_10.0p1-7+deb13u1_armhf.deb 267edcc2d872aa99ffa051b3d006f61e 172360 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_armhf.deb 4b7931327c436274e1fdbaec5adc246c 58244 net optional openssh-sftp-server_10.0p1-7+deb13u1_armhf.deb 1007852c46024a5d6bd5d830ecbb0f7a 2974292 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u1_armhf.deb 42e5e5f554af76d9449839408453bafe 939772 net optional openssh-tests_10.0p1-7+deb13u1_armhf.deb 06448eec404b48760c8320f70743431f 18438 net standard openssh_10.0p1-7+deb13u1_armhf-buildd.buildinfo 62f6b22d73bb7246470f4828ed24bf16 17252 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_armhf.deb aea04961cc90fd7aea24e2068da614c2 155984 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEiIG3Q3DxwDgRKKeyLRECdjCZQkcFAmmiF9gACgkQLRECdjCZ Qke3Wg/8DBoOgkPK39GzTrsFrYX6ujszYDVk91bVxaxmFwd62wmZ4lSj+FzwZkhq WkOceA3QFK1UqZKhW5s1b2oD15+CdFW/3uWXMqQ+9WlCNnmcOIxWuAfG8joawjCc 4VtvjhRAo3Y95DYjB6iIsGSA7WQBIx62t2awt1KKqx0csKeKcGbPFKe6hyJQntBL bok3KsoLfB69cpPP4cu1bvrGaxHs5HAnGWNcmGKObFrREMZcuIpUmc2l+ARouDtg z0w6X592eiGl30HQtSfhLCkSZSTQKNwlo1E8j+cQt08hLZo+z3NN9U8U9XpYNvMd CI7BtMNOKe0zGE2NcKCmVUztcny+b3qaLmWpyZqMi8msXO0tgMjcyqe7hgemq4FC X4aBS5y1MoKM3za4T8gY4Ak06RnJ6WpImslYhkRVnWY5Le9PjDWUWylhma4hmjXW mTpd7LUGQ8Xa6AALtEDC2BegcZ2PobFcNWwylF8c5vOfyIxqqgCm9vOcJvj2roHB gvTR+fD0k9vz/0cdpVm1VyPUoa3aF/MvyFW6DzP3TksYCbv+4wQM3qzVAQIqhi9o i8WJnvqW9YDpiCZIaAvJBj3mrd07CykD6PftmEN8u7zNfI9IKd9EMyxkd+UAb9/K 40/ji0DstrDSLFDatIF3LgDB2vjHcr8rONZ3+FS4SpAJWyKRycI= =u+8T -----END PGP SIGNATURE-----