-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Feb 2026 13:15:29 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: i386 Version: 1:10.0p1-7+deb13u1 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1080350 1117529 1117530 Changes: openssh (1:10.0p1-7+deb13u1) trixie; urgency=medium . * CVE-2025-61984: ssh(1): disallow control characters in usernames passed via the commandline or expanded using %-sequences from the configuration file (closes: #1117529). * CVE-2025-61985: ssh(1): disallow \0 characters in ssh:// URIs (closes: #1117530). * Fix mistracking of MaxStartups process exits in some situations (closes: #1080350). Checksums-Sha1: 0a241a2801e679e197077a5d17be35e748fa9ec6 3444284 openssh-client-dbgsym_10.0p1-7+deb13u1_i386.deb 75e6f204b4717b03f2189e75e369a79c5aa5cb58 369164 openssh-client-udeb_10.0p1-7+deb13u1_i386.udeb 0bf31cd486d61aecc9d1ca3d86528305e3e57a10 1015120 openssh-client_10.0p1-7+deb13u1_i386.deb 1317a4a75c1d7f39baa40dfd3ae1654f9e608073 2161404 openssh-server-dbgsym_10.0p1-7+deb13u1_i386.deb 6a4df16ee086b88bf3e50f35a45bede0a5a612a3 486004 openssh-server-udeb_10.0p1-7+deb13u1_i386.udeb 9bf6c909033bf6f0e6d1a8f601498e8500e1176d 617060 openssh-server_10.0p1-7+deb13u1_i386.deb 25848f43077285a8c46e650f8b6af6e7a884b25c 143876 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_i386.deb 9ec9a487dbf8b46771b71645c8ff7dcfc22151a3 70068 openssh-sftp-server_10.0p1-7+deb13u1_i386.deb 793af591dc888b592c8811d02681c185d5b76063 2577344 openssh-tests-dbgsym_10.0p1-7+deb13u1_i386.deb 3fabbfd1bade9e1285d8ba1297efb93111de37e1 1012328 openssh-tests_10.0p1-7+deb13u1_i386.deb 23cd266c55cb92c762cfb63a94fe4bd91d1c9012 18509 openssh_10.0p1-7+deb13u1_i386-buildd.buildinfo 41a6b09a5cc1a918c170116f02de0d0be056cc3f 16380 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_i386.deb e7a85d08565ec697fd7f936818f352c5b49d1946 156484 ssh-askpass-gnome_10.0p1-7+deb13u1_i386.deb Checksums-Sha256: 282a27434bde580530d15fdf06f645f9c573c6b0f43ddc77d6ce82805efdf321 3444284 openssh-client-dbgsym_10.0p1-7+deb13u1_i386.deb 7d436f3d65ecaae74d4e43e5b4ea545497eeb87e8eb1089fdb530404fef826b9 369164 openssh-client-udeb_10.0p1-7+deb13u1_i386.udeb e95dcc099c737042f48e33de325a479ab4ce1c520ab7b479c6a78dda14f2da45 1015120 openssh-client_10.0p1-7+deb13u1_i386.deb 128801a0c38e5c105f7f4c7732a20530a95f14e0f2161ae8989b35fba1a66624 2161404 openssh-server-dbgsym_10.0p1-7+deb13u1_i386.deb 2d2c39a2c44018671e565a82af43f152dbf3bdd0ad9117eb424d24c7af855930 486004 openssh-server-udeb_10.0p1-7+deb13u1_i386.udeb d78f05f11c9f43d4702734715ccac3f0cab5b3ba3d4665ddbf544bb40aa7bf72 617060 openssh-server_10.0p1-7+deb13u1_i386.deb 109575054cabbf339dd20c780061e1781102a6d91b3cabc80aebbcb60a46a32a 143876 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_i386.deb 2cee0c4431ed237ebe1617592e89c3818765fe856f0555de4f9a22fbb9a50586 70068 openssh-sftp-server_10.0p1-7+deb13u1_i386.deb 28e0e267f1f69078c5d608a43cb1b800e91893f62060193799c02d77f6a01518 2577344 openssh-tests-dbgsym_10.0p1-7+deb13u1_i386.deb 845e51031dfb4c7ba74d32dca0c13c14293f18bb925b26c9a2622bdd5b2f462c 1012328 openssh-tests_10.0p1-7+deb13u1_i386.deb 463682010b83cdd7cca8f856dea49d8ade57168da0b522e052ea61ca8d0b68db 18509 openssh_10.0p1-7+deb13u1_i386-buildd.buildinfo 34d0bbb615938ccbd523f5ef6c3da001287316abf79171783812190e72b35638 16380 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_i386.deb f67101c8f9009a86b8c30042bfc2a3d99af54201dc35bc717078d61f672558db 156484 ssh-askpass-gnome_10.0p1-7+deb13u1_i386.deb Files: 67c908df4eb5565e53f9872e6e81f3c9 3444284 debug optional openssh-client-dbgsym_10.0p1-7+deb13u1_i386.deb 38156b604ad84901f3e1921eb9ed2582 369164 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u1_i386.udeb c82e4453d9293f2eac41865f72c36138 1015120 net standard openssh-client_10.0p1-7+deb13u1_i386.deb 1f7c3a1e538fa65574c51ae652135c9f 2161404 debug optional openssh-server-dbgsym_10.0p1-7+deb13u1_i386.deb 9ea6110206449789e0d9a1ec92c00b3e 486004 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u1_i386.udeb 3343e7b80c375d1a5fbd48c89380f67f 617060 net optional openssh-server_10.0p1-7+deb13u1_i386.deb 50c0313ee9cec286984db3dbc615d275 143876 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_i386.deb f23179d947ec1f068cc211e208de460a 70068 net optional openssh-sftp-server_10.0p1-7+deb13u1_i386.deb 911a3c633a44515509566e1921a79180 2577344 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u1_i386.deb ced9eaebb5259ae69fcefe5e742f5315 1012328 net optional openssh-tests_10.0p1-7+deb13u1_i386.deb 8d38b97674e69b89ecf393ae1a20283b 18509 net standard openssh_10.0p1-7+deb13u1_i386-buildd.buildinfo 228be3dc7a969775ac26eb8603920bdb 16380 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_i386.deb 047be5326857b98139a4ad17a88943a6 156484 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEaPzFtKPtF0JrKPV5iZlfn74WV6kFAmmiGyEACgkQiZlfn74W V6meSA//fzkP+zt+KxA4Bv5gijSdOei9JozXGIQ6GVkcd8NoIU1midyFr9rBSndF PY8zB4P/TRryJeuLZlLbdOhAnsoPshM1lOmicaFDoLuTf8Wp9CSXd+rSIXuUj1tZ r0npLRh0j2ixdIBpgCwTEMVV69kyIfG98WVmUriaeAHUMQFrazU5wcGNeyDzOmAp EcQJCMWMQbYrO2QXBFWJBmGJWiDfx4aufni4Xs0EhIERD6bHJis++WEtHKFIcNlb MzWaTkGdoHFmfqapey+DLtk6yFA21lSPa8/oHFJOEVHhSh23Z8d3WuYT+vQIqzE/ RYqcm7O2Xj7Uzv+ETyEkOWu0KC1EfiPBRphmqVNaAweZrV2mGjIBY/Ci2YUx0h2K xVWglNdtOfFICjTvWnUmsQC7lr6BiaD6HD96yP7TE4aGqoOsD6pM/T6cjSRdqaWh yHAU9RMsDTwyv0GeFET5xiP8n9GG3k1RC0YCqneLCOG2bShptVY3kcBMWPb4+7YE NjNl77JSrGZWtO+s2Utqv8JxKgGdB7q8KuQaT01p0U3YhHAiKKc+1vmxSRM50X72 DU4P8//ssfXTgKvSEPyI20kASCq1cRWvyAqoHjp8y7Z2t6KKhlgTsBCuuKXn/zzm 99mIWh+P12511iEbAplNRI3olDR7jTPDH3EM2uhKtVZC7i0TPI0= =TWai -----END PGP SIGNATURE-----