-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 14 Feb 2025 13:06:51 +0000 Source: openssh Architecture: source Version: 1:9.2p1-2+deb12u5 Distribution: bookworm-security Urgency: medium Maintainer: Debian OpenSSH Maintainers <debian-ssh@lists.debian.org> Changed-By: Colin Watson <cjwatson@debian.org> Changes: openssh (1:9.2p1-2+deb12u5) bookworm-security; urgency=medium . * CVE-2025-26465: Fix MitM in verify_host_key_callback. * Fix incorrect return values on a number of error paths. Checksums-Sha1: 3fa1546490847a7970b087bd13fda968a4230b59 3258 openssh_9.2p1-2+deb12u5.dsc 3b172b8e971773a7018bbf3231f6589ae539ca4b 1852380 openssh_9.2p1.orig.tar.gz 057ac5ac6e2fa0a26a105b085822a09f1a068683 833 openssh_9.2p1.orig.tar.gz.asc 6793675ce2ffaec621127bbb8987d1c6b5ece55d 196012 openssh_9.2p1-2+deb12u5.debian.tar.xz 1fe1a5f158448525c0ca0c1bc2de548d38755d13 7334 openssh_9.2p1-2+deb12u5_source.buildinfo Checksums-Sha256: 0c25da4bb4351013d20a2850b3902c22565addfeb56386466d32c2e5f36b543e 3258 openssh_9.2p1-2+deb12u5.dsc 3f66dbf1655fb45f50e1c56da62ab01218c228807b21338d634ebcdf9d71cf46 1852380 openssh_9.2p1.orig.tar.gz 7acc8e9502040972aeecb785fa3b6bb00c069cc01fbd7c214f8f7867033a6dbb 833 openssh_9.2p1.orig.tar.gz.asc bbfadaa8e1e39bbeb9276ec8eb9fc5db795aa30a7f42e2153b52f388bf02d883 196012 openssh_9.2p1-2+deb12u5.debian.tar.xz c59a9680441cb8be79aa43a366267b1d3c1a873ef17ea787e46ce6bde973a32b 7334 openssh_9.2p1-2+deb12u5_source.buildinfo Files: 4598828e248aa58052ed6ae9509ca9f2 3258 net standard openssh_9.2p1-2+deb12u5.dsc f78b2acac4bb299629a8c58ddc3fac63 1852380 net standard openssh_9.2p1.orig.tar.gz 4b8baeab4dd1ff732a02e94c227cf788 833 net standard openssh_9.2p1.orig.tar.gz.asc 5b7453ca259106ec2cfe413482f51ed2 196012 net standard openssh_9.2p1-2+deb12u5.debian.tar.xz 0e50df58c719c2777de0ad29ac1c04a7 7334 net standard openssh_9.2p1-2+deb12u5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAmevTLkACgkQOTWH2X2G UAs+zQ//ZLBphleGcUT0LYxaRIu+k0MgRIVDzCjdooQX7z3gTZK0Pq4rk5h/NrIn 6FkOd3gZimdXHsAmvn8WH3RgUs/n6v0A89qA1x2j8AdTmyz4/cAAW/O+1qsZP3T6 5vBKlgGRim2/3+IVVk2ed7/LMsrQyoVYEp0Y0qE84LrZM47+MW1hy+QVgpo+E0ha cKR1fY/290B9ogLIzUuU8I6rkEQO5SE8TdB+lWUvC3ympzby4F3TLGz6s/nGgb1a DpY7bTKWBC0GU4XW4W+3EhHoBUxw9DUpp8soQXkInnQdddt6x5yWKxJqA6LV0+Ig MA9wJlUgK0gadKWd4vXwhHXz3O2G8iIBdcc3bDSUVWWC0UklePJoDuXXAT7plc8L /ssyZagInQPzFWaStpGVq683FwMqMkNQVO+IXuVUCifIGQOvBm2rnuc4ztz8HC9a MJfPq2MCcKvYWLyj3msZibvkC1FpFs0HP4p/VsdP48NDhQWA8i7hgbnHQRWHJUfq CRMCBnKaKjKzX1ndf+CyWEOJA0IFYLTz2CbAgpmXvKr1WIKbbUFCrQ6tw0rCzLob 8cujkl1idfJckjbejd0D01GHtJJNRNQBH8+49DBo5Uq2Mx8t9KwL6rUe5RepJzgT nc8aYj3dPII29dC5Purk8P/lVITjvcw8WWLXOo3I/ye+mNEQDfk= =Av7u -----END PGP SIGNATURE-----