-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Feb 2026 13:15:29 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: riscv64 Version: 1:10.0p1-7+deb13u1 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-02) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1080350 1117529 1117530 Changes: openssh (1:10.0p1-7+deb13u1) trixie; urgency=medium . * CVE-2025-61984: ssh(1): disallow control characters in usernames passed via the commandline or expanded using %-sequences from the configuration file (closes: #1117529). * CVE-2025-61985: ssh(1): disallow \0 characters in ssh:// URIs (closes: #1117530). * Fix mistracking of MaxStartups process exits in some situations (closes: #1080350). Checksums-Sha1: f9a598cda36020a87eb5a7ae78d8d3eb7a91f087 3876476 openssh-client-dbgsym_10.0p1-7+deb13u1_riscv64.deb fabf77a6968b282786ef77b041131181e92ea2e6 375880 openssh-client-udeb_10.0p1-7+deb13u1_riscv64.udeb d187c4c290a1534333a74f532bebf363b5309422 986452 openssh-client_10.0p1-7+deb13u1_riscv64.deb 7f3bb4fa80e1e3773d6bf34171118896f5903862 2433272 openssh-server-dbgsym_10.0p1-7+deb13u1_riscv64.deb 513b58fff7cef35c1bfaca68b21b2dcb3c4e6b7b 496016 openssh-server-udeb_10.0p1-7+deb13u1_riscv64.udeb ad9810da6effc15e333fdf99fc902409272e9340 604140 openssh-server_10.0p1-7+deb13u1_riscv64.deb 0ccbb310e9dae0c8e3e61bcb75a31087e985624e 164948 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_riscv64.deb a75b6233659ba2a3bc2bf8097a4d95077da5c101 65400 openssh-sftp-server_10.0p1-7+deb13u1_riscv64.deb b16563d47e4a9080664e69ba1d86d604e3dbd2a8 2967788 openssh-tests-dbgsym_10.0p1-7+deb13u1_riscv64.deb bf05e2cc0426443a2f4f49fde3e98cbe2ff00f16 1238624 openssh-tests_10.0p1-7+deb13u1_riscv64.deb 2acc2269d4db01e848ed21804262613a046a75a6 18605 openssh_10.0p1-7+deb13u1_riscv64-buildd.buildinfo 6035570dd88b6c35908f796df7d255d2df1cc56a 17140 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_riscv64.deb a6c70459681e7e5bb42e8c50d56a61375d263623 156016 ssh-askpass-gnome_10.0p1-7+deb13u1_riscv64.deb Checksums-Sha256: 2b4342d3aab5a4f9590d6fec4b06b6f0aac93f08d364385fb4148f7bc9b2cfa5 3876476 openssh-client-dbgsym_10.0p1-7+deb13u1_riscv64.deb ba8cff37a3bd6743a810a46ad8ab209faa90c9a7f3dc02db4899093cd378771d 375880 openssh-client-udeb_10.0p1-7+deb13u1_riscv64.udeb aa50859d8b80763ef8fd508e54fbb6551b4b8a35367560751645723af7a45202 986452 openssh-client_10.0p1-7+deb13u1_riscv64.deb f5ebea814a3274c1ff59b2008586888731902e9e71b351df5078cc7c4eb0505f 2433272 openssh-server-dbgsym_10.0p1-7+deb13u1_riscv64.deb d54cce9256f3ac66da680a3c4b65f216d340b1ba8f57dda39555f70eb6b18baa 496016 openssh-server-udeb_10.0p1-7+deb13u1_riscv64.udeb 873c4c207e9640f2a407a678cfe023b44cc476911b6d7f8526d0076d880c917c 604140 openssh-server_10.0p1-7+deb13u1_riscv64.deb e2fe1d7084bbd8a34fe07fe5bca96079dbffde79cdbff02c6dbb9d8f6c5427dc 164948 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_riscv64.deb 1e7ce1b1ef5fabf2ff1877b36545003c2853bbbb65a0579cbc41f06ca8f8b00e 65400 openssh-sftp-server_10.0p1-7+deb13u1_riscv64.deb 78ec11bc72eefea09396e0f0c31910bcb0b1d0792fb5c02e01130068ec0ed2df 2967788 openssh-tests-dbgsym_10.0p1-7+deb13u1_riscv64.deb 43c6c8cc468f7874e8f0ca143d802f7df66ddb3d5809f261fbf6a15187bacf1e 1238624 openssh-tests_10.0p1-7+deb13u1_riscv64.deb a23dafd42d9addd6b13a5cc54777c4a9aeaac51876f5ca000267c6b258bbcbeb 18605 openssh_10.0p1-7+deb13u1_riscv64-buildd.buildinfo 042cc33af2e31dd013b93155ec132d4679937c3cf7aa101d2027c6a2ec1a10a6 17140 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_riscv64.deb 0b1f2835d1d0ba5f40821c4971aed60afeb2d2ad4768dfd8575f8e309b2af7e5 156016 ssh-askpass-gnome_10.0p1-7+deb13u1_riscv64.deb Files: 207cb17a3869087557386f1c78385b95 3876476 debug optional openssh-client-dbgsym_10.0p1-7+deb13u1_riscv64.deb 4110b28aebfb4c30a240b355b5b3efe2 375880 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u1_riscv64.udeb 12677a0cba4a80153bcc8ae582b41418 986452 net standard openssh-client_10.0p1-7+deb13u1_riscv64.deb 2c51365d80513e08c044344064e76f3e 2433272 debug optional openssh-server-dbgsym_10.0p1-7+deb13u1_riscv64.deb 6b11ed22fbf39650992f9b89e57c8e37 496016 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u1_riscv64.udeb 917aba957e5b356f032f6d3a4898e865 604140 net optional openssh-server_10.0p1-7+deb13u1_riscv64.deb 0edf88cf25c124654bdc0c67a4bdf7ce 164948 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_riscv64.deb d422055ac19f72adf5cfefee75c3d57f 65400 net optional openssh-sftp-server_10.0p1-7+deb13u1_riscv64.deb 34ed9e2c912fbd2162b23bdbe23d55fb 2967788 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u1_riscv64.deb d0be18da3c66d9e16e114574a02cbb4e 1238624 net optional openssh-tests_10.0p1-7+deb13u1_riscv64.deb 9dbb6b17416e43ce09db38c51827871d 18605 net standard openssh_10.0p1-7+deb13u1_riscv64-buildd.buildinfo 0359f20e77418948d2e4674ffbfe7617 17140 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_riscv64.deb 4955d1761921285b8902db91d6cabddd 156016 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEER+evXFzNzDWbUDPF7SlJcp2g6OIFAmmiRPIACgkQ7SlJcp2g 6OK+fg//ea7ZBIRbgr8UH0827FZqWUY0pwM6gbFka9Q435HEIY4xT1HvldUfl+AU gKCKGmHjArJI1R11lhkeCrcAF1JsKCQGEiopPnjjse/t6i4ex98S0gWBm8zwvVSf vOhf0Lc/meEcIgd6tqzdg7RKDjio2ZYrAK8sv8O/+2QGTCoYpQbAt8b41jktX8VK ucpBJTMaIAH6XiewACe3ruB+YPEpCNPB2f9DPK9noM87fM6qxI8kYfW8Ch+woABM gK1wwtLx04tKXdIvqrRPe0z1Tf6eNU/3O/2qJYzAorkv+cQXEdQ6lqpuqjU49viv bAZvlIXJwIoIAMCA9XSu32y30PiGMogOC0CXA+1wT/sxIv9xMdM8SL+0y4RFi8Es V+IyrjaHd86MFsgFXs5bDj/KrHL4fVAZL8DnQ2tmyB9x8PGlNq2K66XBtHVc3M5w hP17w7cuy1SiwK6jWKRS2+4axeCt+hAzi/vQdvTf3vMkMeRRllgybEZ/G6nSfyn+ zYIK7f/7dOSjgWcEvavGRx8YKoVgt8bc61aBVZ+4Ly7/L5BwfHn3GvrfRxDgRvy0 Nr5WI29sDhC4lMQh0AOAf6GpGXtNeBO6tEL6bpJ0CXOxZnz3blrUqgNaOnOTII4+ jUttFp/Q6ZwfKbxk4Uh83Kw31O55sBYkddHgk+DzvxLJEVtytmw= =A/Jy -----END PGP SIGNATURE-----