-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 09 Apr 2026 21:59:55 +0100 Source: openssh Architecture: source Version: 1:10.2p1-6~bpo13+1 Distribution: trixie-backports Urgency: medium Maintainer: Debian OpenSSH Maintainers <debian-ssh@lists.debian.org> Changed-By: Colin Watson <cjwatson@debian.org> Closes: 747303 989906 1117638 1117720 1117965 1122765 1124970 1128399 1130595 1131206 Changes: openssh (1:10.2p1-6~bpo13+1) trixie-backports; urgency=medium . * Rebuild for trixie-backports. . openssh (1:10.2p1-6) unstable; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). * Do not default to weak GSS-API exchange algorithms (closes: #989906, #1131206; LP: #2144812; thanks, Athos Ribeiro). . openssh (1:10.2p1-5) unstable; urgency=medium . [ Samuel Thibault ] * Do not link against libcrypt on GNU/Hurd (closes: #1128399). . [ Colin Watson ] * Install systemd files directly to /usr and drop dh-sequence-movetousr (closes: #1122765). . openssh (1:10.2p1-4) unstable; urgency=medium . [ Colin Watson ] * Debconf translations: - Simplified and Traditional Chinese (thanks, Yangfl; closes: #1124970). . [ Luca Boccassi ] * openssh-client: use sysusers.d instead of manual scripting. * openssh-client: drop compat postinst not needed since bookworm/noble. * openssh-client: drop versioned dependency on i-s-h, satisfied since trixie/noble. * openssh-client: drop dependency on passwd, add recommends on openssh-server. * Use dh-sequence-installsysusers and drop d/rules override. . [ Christian Göttsche ] * Reorder pam_selinux(7) usage (closes: #747303). . openssh (1:10.2p1-3) unstable; urgency=medium . * Drop "Rules-Requires-Root: no", default as of dpkg-dev 1.22.13. * Drop openssh-server's dependency on lsb-base. * Remove support for direct upgrades from before Debian 12 (bookworm). * Rewrite scp-quoting.patch using argv_assemble, and forward it upstream. . openssh (1:10.2p1-2) unstable; urgency=medium . * ssh-session-cleanup: Update pattern for sshd-session split in 9.8 (closes: #1117965). * Link ssh against ssh-pkcs11.o directly (closes: #1117638, #1117720). Checksums-Sha1: edafe420348da075d84c26ecb8b58186bf5e5568 3623 openssh_10.2p1-6~bpo13+1.dsc 51840fe1ad1654bd557efaba9d462832c7348335 200196 openssh_10.2p1-6~bpo13+1.debian.tar.xz Checksums-Sha256: 58cd50d4c81b6b0d1398a190c592f0711764faa39441250c6a6f8646e7ad7692 3623 openssh_10.2p1-6~bpo13+1.dsc 68ffab3adcf57b0c574058d0cb67c894471a6e2b1808c959871967aded6b1551 200196 openssh_10.2p1-6~bpo13+1.debian.tar.xz Files: e6bdb679823afa0bb51f08b73f0e4eff 3623 net standard openssh_10.2p1-6~bpo13+1.dsc a3fc4bb40279cb91d14ce4e7cef9167e 200196 net standard openssh_10.2p1-6~bpo13+1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAmnYE6MACgkQOTWH2X2G UAuI2A//XE3CD8cQSZdQQ63Ed3ptXRIHbRwA87RpYAfP2sUGYB2mQUTPo//eLRj4 Y83tClj9aYKWMQ0aMf62T4CUZQex97fC6tfyXeU5Oxs6sybET9bdBzfiY485jsVy zajl22ejV0krYq+DAQ+5pYnD7sd/KBA2iS47uPPHy4ivDjgUK4drip3rWn7k6hH+ 4EUo+naffj+2nxsFFiq/MTHAjdQPe+aB/Xwd8Z9+cOytFvNZRf92T1f7jj0d6sxA JDo8YSIX5ciElAFTYUZ1EYhy7DhNpSlC4Ssk05HZWQROwMp0fEixpEJdSfulNISX 6T1ty3VZUj7vdp5YRUqM2KsFNfnAzSQKtiYmB7iURpCUPHxND5bOZfOzUq0r6626 52gu50/AjYrJ60W5MzvSOBdrsLGSih0rD7MTL6NzAE09njWr9Mq+iqNeMeFBwi2j 07nhBZSIPEZ3SE3WMExIqy8ZaEF7d4sudfKiK0PmhdsQ01qEDKjgaMYT1ju6yUnZ CGXDSubqOtqfgE15ioFIr0s+WxYv+rDIinZZbof/qZBquqUtGfmiG6S3PpKb48J/ VCTvkgLrJ80uEAsToIcclkLGTqG5t+Zc4lEwjM9BoRdzxyKPcqfGRVCtFDFFeor2 yveWYAIm16fsj+9/ES0YuAJyB9X+gdpB/LNV4eCar/te1BsANlE= =lWz3 -----END PGP SIGNATURE-----
