-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:33:31 +0100 Source: openssh Architecture: source Version: 1:9.2p1-2+deb12u9 Distribution: bookworm-security Urgency: medium Maintainer: Debian OpenSSH Maintainers <debian-ssh@lists.debian.org> Changed-By: Colin Watson <cjwatson@debian.org> Closes: 1130595 Changes: openssh (1:9.2p1-2+deb12u9) bookworm-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: 18c03958ebfe19f97081e3d7032a2f94eed9d967 3327 openssh_9.2p1-2+deb12u9.dsc caf2493e668c10cadf96e5ba44fd7faf4142b10c 199480 openssh_9.2p1-2+deb12u9.debian.tar.xz 1359cfc5dae687f451a696860385ce8b524af5e3 15322 openssh_9.2p1-2+deb12u9_source.buildinfo Checksums-Sha256: d0fa1ecc55cdfc7d82db05d9cedc52ec96d0641c2cd2b283446df5d73e09534e 3327 openssh_9.2p1-2+deb12u9.dsc bdb378833a7754fcfe23da26c3e3ec2ab27dd5b25f31c9adce400b6811f2a22b 199480 openssh_9.2p1-2+deb12u9.debian.tar.xz ca8ec5204df41c684d2cc7ff8d2d4c1dcaf54eac1d10f40ff32e4b3d318e2df3 15322 openssh_9.2p1-2+deb12u9_source.buildinfo Files: 8b306a39707d52835d3ea184ce105c8c 3327 net standard openssh_9.2p1-2+deb12u9.dsc c477b8a2341caa645e0e214d6c3a72be 199480 net standard openssh_9.2p1-2+deb12u9.debian.tar.xz 84b39fe3e0b6ecda113d99c8547db2e3 15322 net standard openssh_9.2p1-2+deb12u9_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAmnRn+kACgkQOTWH2X2G UAtzDQ//a8nFu+LOz3fhQmznbfOJ6Oju61PTZeGKpkWNDMzSYaBZ9JW44j0baCl1 9E0dV80ZSbyXtXTzZqtCRa5hLacbVlr+4kthIdTBhQHYceNY869vyT3RKl+zcdGE mLg6SQE3pZCj4tP6ilUTCvS0VhWG1yZUHpfKYBN4OCuSk8rVqZDHKYmBj9Ekmeaj jL32oLBSROZ1ZoRqGlUX5q2eU3ysaaR0pQb9aCMUm0lG5vRrSlQ81htUXJ9iVI5s mMsYcAaJ7+wyS14b0ETrosf2YpEc770yf9gXhQd1MvnP8g4Bj/6BkKsQ3nibtyjK 99ZfVE8DUoqLcChrmz/IybJqQ2reRFK2zhvmO4+iJp9/4oi6pXYlst5VfDmJ2/TF H1zMVRAL/3eJhHHSQSMSdKDB6fgPNcuRTOFqHjp7WLZAf5YC9LNB00Zjnaw19Cr9 FFIwa4B4tzb0FdXCvl0K8Wphqs2oHpIYpOjc3bWfLAvYJjOULgRbQrxVr7pZk/Tt ahZ4W92h87QXQ1FideEJMU+CLA+gCDo4WCuZ/9LH1vkwVFGaiTh56i67PqtTCUJT IrXT2YKqMQOz2iTuvdIV1RR2hk/eZUmD8frvzVW1THhe1nIYKj6mrH/MZ7xECait xj1GIVd45MY74GHqge2Eq9Ys7Il7/CXPNG2BAbwwmdDu2f5/TaY= =k1YO -----END PGP SIGNATURE-----