-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 16 Apr 2026 17:19:42 +0100 Source: openssh Architecture: source Version: 1:8.4p1-5+deb11u6 Distribution: bullseye-security Urgency: medium Maintainer: Debian OpenSSH Maintainers <debian-ssh@lists.debian.org> Changed-By: Colin Watson <cjwatson@debian.org> Closes: 1130595 Changes: openssh (1:8.4p1-5+deb11u6) bullseye-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). * Don't install unnecessary *.lo files in openssh-tests. * Pass on compiler/linker flags when building debian/keygen-test. Checksums-Sha1: 6671571d5e39c7764c9f2a7431e02e98803ab224 3339 openssh_8.4p1-5+deb11u6.dsc cc8a02b228f777053f58392769f87c79b3be9c11 188332 openssh_8.4p1-5+deb11u6.debian.tar.xz Checksums-Sha256: 22e8618e9c336cbff69aa50f33596f4f253fcb50311e58545acb01f675cf403e 3339 openssh_8.4p1-5+deb11u6.dsc b4870c3a5dda5901b987a5ceae673fbe0896bbae5ef1932ca7684ce23e861abb 188332 openssh_8.4p1-5+deb11u6.debian.tar.xz Files: 4734d2ec62a4d9d8fcbf13c40e1f3c4a 3339 net standard openssh_8.4p1-5+deb11u6.dsc 18acd8ecf40182d5fd5fbe2252bd3e72 188332 net standard openssh_8.4p1-5+deb11u6.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAmnhDJ8ACgkQOTWH2X2G UAtVwA/+KYtuzGCAEXWCELd0+ypHADox34eXaE2i7zQ7JBN+Gt7NaTda/OJWkpuE 4mnWO8gHdtdFmIai4Lr8UhTgrRQ3cPeo58xwDxkVFhrIrQyofRP1HTU/5AMabBv1 ZTzrd9CWVNkEzJ+83jegeUT//AswipVI4StTv8EeNMbS6ejQLSzUOmuxzBOFmOBg TMEMt2Fut+Ow0/EdYeCl3Ap7rtxGrEX3BwFzh2/YgKfSuxUzMVEB5mHDQZPcuRxO 3LNiSUxxlHTSLMgY921XFIWSsFO/ATiayP0X8j/keOyG3mo7UJtZQu97LVtCsYQK RPZ55Tjqb3CsJl1eIXpstORM0hEAOS9rFU2ozlyw6E3aAZ/CFTf7wEanX8z0aiH1 aIHpEaNMZfNpezIQ6XfUS09a0UuWXes/krVzdJe7g87vzv8JhjY3fOEev7bJFGXZ PzDQeUD0D4mbKqSCa/il9BPnoWFBDSlBuMPT7uzzuspMUadJ/cX6aNAUHR5QhCSV 3tIOHmY5kSvbxYmI0dmkte+8rjWfmus9Ns5ZCGlP27tj8lZKd3N4XTotRnAwAlBI NiCwttVDgVmcpUAeHYk5s+Ab4FfxlNMP6TPAs8oD63qDMEyjTbhuVLsNUAtAmf8b 6AeEp/IW8jxjbEuagccnPpO51rIROnEboXKkhtiOXWD+/WEeBd8= =Anvw -----END PGP SIGNATURE-----
