-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Feb 2026 13:16:06 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: arm64 Version: 1:9.2p1-2+deb12u8 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1117529 1117530 Changes: openssh (1:9.2p1-2+deb12u8) bookworm; urgency=medium . * CVE-2025-61984: ssh(1): disallow control characters in usernames passed via the commandline (closes: #1117529). * CVE-2025-61985: ssh(1): disallow \0 characters in ssh:// URIs (closes: #1117530). Checksums-Sha1: 506d96d64180b31bf035fac5fa00985bc8eb0b1c 3785336 openssh-client-dbgsym_9.2p1-2+deb12u8_arm64.deb b78edffc4c817e6aa5a383855bbaaf40edfaaf48 336744 openssh-client-udeb_9.2p1-2+deb12u8_arm64.udeb a2e0b4a28c3921940aad3e08b371934063d63ee4 934108 openssh-client_9.2p1-2+deb12u8_arm64.deb 24ca93e48f42c76c58734c8e1472bc36ebff38c4 943764 openssh-server-dbgsym_9.2p1-2+deb12u8_arm64.deb 96a37cc8c498962c27ad4bada64c18c5a0fb95b4 352544 openssh-server-udeb_9.2p1-2+deb12u8_arm64.udeb d98a132ea1401b161496475670572d39984258a0 411548 openssh-server_9.2p1-2+deb12u8_arm64.deb f68c5633efdc28e2f4a0d6e9dbf895e5665a1629 166836 openssh-sftp-server-dbgsym_9.2p1-2+deb12u8_arm64.deb 1fde9cd90d4f6cda186156a97d0bc3f99c041215 60260 openssh-sftp-server_9.2p1-2+deb12u8_arm64.deb af994f32cfaa4823a7e0b7ac2bbcfbd1405c1bef 2961532 openssh-tests-dbgsym_9.2p1-2+deb12u8_arm64.deb 8fca5a18c94c279cce52a73bc02fac1ca9c87cfe 1017428 openssh-tests_9.2p1-2+deb12u8_arm64.deb 2f172d89b8d88283f1dadad1e49bcf897500611d 18772 openssh_9.2p1-2+deb12u8_arm64-buildd.buildinfo 186d08b62898b71f8654bf699ed2e915b94d1ee8 16992 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u8_arm64.deb 95009b558709e78ec215edd54b4fc8a63660f612 188024 ssh-askpass-gnome_9.2p1-2+deb12u8_arm64.deb Checksums-Sha256: ccae6725f33d5825f604eb5c27cf34b3a9b5d30248241269397f067fa81f5456 3785336 openssh-client-dbgsym_9.2p1-2+deb12u8_arm64.deb ab72e27953cd4b668e3004ea915052af4a83ed4e9c1e5eda97ea5714003c7f98 336744 openssh-client-udeb_9.2p1-2+deb12u8_arm64.udeb af6477ab55a106e2745d054a4007c908e953a5a8ad9a5507523323b7bb624ef3 934108 openssh-client_9.2p1-2+deb12u8_arm64.deb 910e2e5fee6657c05ea3dcb5b14a29bfcef245c679e39ab75ecac1572d5596ba 943764 openssh-server-dbgsym_9.2p1-2+deb12u8_arm64.deb b4566d3d729e0c7de2bd0af403c04a63264b6ae43d9cc574c27cd80695896c58 352544 openssh-server-udeb_9.2p1-2+deb12u8_arm64.udeb ad82fce50bec31b3b138a17d4d00e9408cbbc99d4d12f3e5ce425f349774e877 411548 openssh-server_9.2p1-2+deb12u8_arm64.deb b322de36cd673fb2a927f7d3d6428362be9ee695dc4b8e8ed886f90322603f35 166836 openssh-sftp-server-dbgsym_9.2p1-2+deb12u8_arm64.deb a84505b796e128d841e8102a5d3afc736769ad7031b8aff58c352096b83b54bc 60260 openssh-sftp-server_9.2p1-2+deb12u8_arm64.deb 85a12adce204440eb54e132eb14f235c8398826f7b530f3fcab53f69359dd890 2961532 openssh-tests-dbgsym_9.2p1-2+deb12u8_arm64.deb 45410818177e9dd65d5fca95d7baa764f66e20293e37b9c9acb3d68c9b376380 1017428 openssh-tests_9.2p1-2+deb12u8_arm64.deb b7bf190356bf3ddaad4ac905ea2604cd516b7e21a599f56a6467efe8ab307be6 18772 openssh_9.2p1-2+deb12u8_arm64-buildd.buildinfo 86e3dc232c47a4c9305ec9a325f0109d9f34b2e21a7e7f937003be73b60f0362 16992 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u8_arm64.deb aada684d745fe8b6d148dafec597676f0806d3edd798a482bb695e94a1c2272c 188024 ssh-askpass-gnome_9.2p1-2+deb12u8_arm64.deb Files: a3c08b094850df88928f68801f1cbc91 3785336 debug optional openssh-client-dbgsym_9.2p1-2+deb12u8_arm64.deb 3dc7ceeb7d68e89ac793414794f795ed 336744 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u8_arm64.udeb 70bf71209ca142bd31f1c03fe9a566cb 934108 net standard openssh-client_9.2p1-2+deb12u8_arm64.deb 5035007fe839388b213032c946582528 943764 debug optional openssh-server-dbgsym_9.2p1-2+deb12u8_arm64.deb 08c518415b77917dcf29dde9076166ee 352544 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u8_arm64.udeb 518c8c6cc1f83d13b3c6dd536f8889d8 411548 net optional openssh-server_9.2p1-2+deb12u8_arm64.deb f19026d9af4ceecf8f07db137fb1a111 166836 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u8_arm64.deb 79eeee7ef9116cc84d2a1fbccfe7e56b 60260 net optional openssh-sftp-server_9.2p1-2+deb12u8_arm64.deb dd6a189df75319816f6cb8446368f4c4 2961532 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u8_arm64.deb cd643954915b149a59355935feabad86 1017428 net optional openssh-tests_9.2p1-2+deb12u8_arm64.deb ee9b2da8bb991ad74718f3b351e2fe85 18772 net standard openssh_9.2p1-2+deb12u8_arm64-buildd.buildinfo 9e839bfe945485d99a3be15a22a151ba 16992 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u8_arm64.deb 7da3540f18a521788fc3b3c7a415eeaa 188024 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u8_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmmjKyYACgkQCr/D/stJ kDxWqQ//T5GzWBPYcmLhL+nECraJg0gXLCz/AErGhU1qlYSTK6XNKSs+upV3a5PF 3ekPpPmTqEoqq9aaylKlYsiA5IIbrz3GHaF/NF6sTjD/PjLZhqVBr9fuvuuYZ+hn JwzsCxn7RUhCCbYgvQ8q3hH5SkH/p9TFUd3SRUqKgAR7rNfx/spc7CQCs8JMOkWR oaA2DEwDSZ2NYErCFuZ8r8FHugg7gSufKWPvecj7279GqCM5nV5RwEaTTHOT7iBG iw4ProA3q4/I9oVoOumfRGlYzEKG9eajeocom5fI95urIhdavfkq5AuODcZ7p+ay IjtDsND/lReBtwKEvsjjwL4y9HIvFfDv5wZ0DlEP6ct6zvsJjFX4XKZY16o5pLuo ay5S6JdX8GJ7pOls2d6X/cJbyHwt8Nh5/AThHgpLy/3xrstBBzd2oi5XOmItoTI3 e6umFoPfw56u7S3p7hjw6cz8wJRRX36jKTWI62o7SnfoP2InYXu2zlvu9zXQg+Oe KFlepXHNu99Bj1YCrMi1ItuLhhsWATNa3BG+d2az+Uaz9CfRBk22Y/ro/wF9YWXT 5R4WNcMdrKRbRqVh5HIAReFTV9q4ncS+vrdmS8B30GweFTUbo+2bTU3AZh3u0kWr N+f8Wk2ik73hl+PTnGefH/R9EWLshCFeNNIIGJfw4fVV6T5vGjs= =R6Wf -----END PGP SIGNATURE-----