-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Feb 2026 13:15:29 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: arm64 Version: 1:10.0p1-7+deb13u1 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1080350 1117529 1117530 Changes: openssh (1:10.0p1-7+deb13u1) trixie; urgency=medium . * CVE-2025-61984: ssh(1): disallow control characters in usernames passed via the commandline or expanded using %-sequences from the configuration file (closes: #1117529). * CVE-2025-61985: ssh(1): disallow \0 characters in ssh:// URIs (closes: #1117530). * Fix mistracking of MaxStartups process exits in some situations (closes: #1080350). Checksums-Sha1: 4b7f7bf7a93a5ab107e7a59ceb0b031f9529b443 4030552 openssh-client-dbgsym_10.0p1-7+deb13u1_arm64.deb 7c344a29c792451a2f543c4a1b2721942c9e8843 351696 openssh-client-udeb_10.0p1-7+deb13u1_arm64.udeb 82c43d7f102d05a95c543d92fc5593bd87d31402 926504 openssh-client_10.0p1-7+deb13u1_arm64.deb 67615985581effef65b340efb8d3f1eeef206a14 2502248 openssh-server-dbgsym_10.0p1-7+deb13u1_arm64.deb 2c7345ac4f80425c79991e1fb087ac2c7f774024 470096 openssh-server-udeb_10.0p1-7+deb13u1_arm64.udeb d3e77e769fba32ed4bfd416ac4d5498de71bc7c5 552152 openssh-server_10.0p1-7+deb13u1_arm64.deb dc559f3edd70d13a172fb9d71fe8803c0df8d483 170312 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_arm64.deb dc4c530311aa345dda8b04e411e666b72bf77cc9 60560 openssh-sftp-server_10.0p1-7+deb13u1_arm64.deb e286633330d48cf8861883523641a81e96732ab6 3110692 openssh-tests-dbgsym_10.0p1-7+deb13u1_arm64.deb 267ed1ebdf2244bf0cb5f0a2b56bb2d574d5900d 996492 openssh-tests_10.0p1-7+deb13u1_arm64.deb 9789aa3f2a806f8b5e02f733d17b644602d6dd51 18562 openssh_10.0p1-7+deb13u1_arm64-buildd.buildinfo 6c1e0614248d28ac15aec930e450fb5bcc232431 17176 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_arm64.deb 62eaffd2b14724a27cc31f75a1f5f6e467024754 156380 ssh-askpass-gnome_10.0p1-7+deb13u1_arm64.deb Checksums-Sha256: b08b3994b7536c878aec1c2a44e4b404eb7fbd80288b117607498256e41dbc2c 4030552 openssh-client-dbgsym_10.0p1-7+deb13u1_arm64.deb 71b74a97c4259fd77762e344ed931e7b3419313cee4d7081fecf1f737eadfa87 351696 openssh-client-udeb_10.0p1-7+deb13u1_arm64.udeb 95a6826574640d1be803accc1cfec4a7470325161e14a7b7c4aed85f5c123259 926504 openssh-client_10.0p1-7+deb13u1_arm64.deb 514e83dad2270894892ce02618540d872696af5a6bf656c2577ed28e78209774 2502248 openssh-server-dbgsym_10.0p1-7+deb13u1_arm64.deb ee308a2d009da992e1e870ccf1b26a10d94e8543f7d7fd0ed459f8afc3576e97 470096 openssh-server-udeb_10.0p1-7+deb13u1_arm64.udeb f174c558befddc5d9dd2306819d5ef8b79383bd3e661c85fd27b46a46c8fdfe0 552152 openssh-server_10.0p1-7+deb13u1_arm64.deb c60ebf7158b599dd1900be16bb14795eaf71d236ea4702eb2c6963c38a5484e1 170312 openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_arm64.deb 91f6507d03cb502af372a07a4c1e971ff160b573b35263fe04e0a8ea7c32cb4b 60560 openssh-sftp-server_10.0p1-7+deb13u1_arm64.deb aa2ce1124b80c96185c49d8f8803cb07f79489e3735f63cad60c986e9b0f1ce0 3110692 openssh-tests-dbgsym_10.0p1-7+deb13u1_arm64.deb f5e69080633a3430cd8a250df01b15d5d6c75e8a6c9d752f193cb658755d8fdb 996492 openssh-tests_10.0p1-7+deb13u1_arm64.deb 22c62cc6aec38cc0c9a7801cac85ac65892fe6f160bf6575b23cfaf966aea1e4 18562 openssh_10.0p1-7+deb13u1_arm64-buildd.buildinfo 0cd009224ce0931e6291e262d17277f4825435a893a8c1a6912e1b530172d7e5 17176 ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_arm64.deb 18ba7159e24004a1c0e2f96eb84c2282bdccc1ad8cd26fe11f53e135e3a674c6 156380 ssh-askpass-gnome_10.0p1-7+deb13u1_arm64.deb Files: ecc3e3f624881b96551ed29a1900f1ed 4030552 debug optional openssh-client-dbgsym_10.0p1-7+deb13u1_arm64.deb 9c54f45f6e82c017fa48e1c45d4d836e 351696 debian-installer optional openssh-client-udeb_10.0p1-7+deb13u1_arm64.udeb 72fd5ca876cd82d242f81b48bbac38b6 926504 net standard openssh-client_10.0p1-7+deb13u1_arm64.deb f7a5b8fe76a781de633ec7480998049f 2502248 debug optional openssh-server-dbgsym_10.0p1-7+deb13u1_arm64.deb 3028c78f41a90c0c6b2f84b5972479ad 470096 debian-installer optional openssh-server-udeb_10.0p1-7+deb13u1_arm64.udeb 4d4decbeac332e05fc1ca3a21a507dcf 552152 net optional openssh-server_10.0p1-7+deb13u1_arm64.deb 5c60fab1998d9b15e7d2d6c2603a8b6f 170312 debug optional openssh-sftp-server-dbgsym_10.0p1-7+deb13u1_arm64.deb 37f5f9b397a3b5d4834b36c7db02afcd 60560 net optional openssh-sftp-server_10.0p1-7+deb13u1_arm64.deb 64031211f67e0c7d949cadba80708d20 3110692 debug optional openssh-tests-dbgsym_10.0p1-7+deb13u1_arm64.deb f179455026cd5264176d2c9c3ffbd6b3 996492 net optional openssh-tests_10.0p1-7+deb13u1_arm64.deb 72ab7438a032df7eafa6bee4353676f9 18562 net standard openssh_10.0p1-7+deb13u1_arm64-buildd.buildinfo 2b6ae70fa393d19cb8271d29d6a40c19 17176 debug optional ssh-askpass-gnome-dbgsym_10.0p1-7+deb13u1_arm64.deb b5a497e4157e8d7c14dd53ec66b08cf5 156380 gnome optional ssh-askpass-gnome_10.0p1-7+deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbIns2iWsAAdAqh2MS/ZIXkV8oLAFAmmiEigACgkQS/ZIXkV8 oLDO6w/+NhUpD7kVcjMbNyV+L6yGgw61c+nYB/WPmWEkW3oZtUhb1+Dq99e2sHpq dyou2akx06l7C+Wl/P+p5QELS4qLEoUtNlsgFIZacZjSs2JJnGfOIrxxM4U3CxzL Pbv8A5R9o8fSV/mpDjo1zw+uUB38G7+kgY42XPOLv2bJWBdYDV13sMgFwEMaSkFJ sUl/lz5SDPy4J/Xnh0xwGqB0tZ7To0YVHdkYUb2OrzCojYYFP7JdHkDXzso8OXTz Q42vpU1TIcNFxQ+Vi6AjnPFuLC/yIGiy4WC7wxpnaeulnMjrI+bPQaGiZ13VB+db C/b75QHDTFFjdDE8ct0xryWH3EQZDcSr54PYUrVsCPjl3qAyERJEY0aUDLguLLvH fa8r434K0HWhsBuBd9UKrQVQtcLzdAXCqhfRZ4i4yAB/1+Bf8QEukKqBiHDtf/5M HNx3dlLqt31tfra3FCYKkXR1q4pxng/xaAVvI4afRfqgpPbxXgnIyapzBEItaS19 p74/t2EOnM93pD9sdzbBe6wH+gVd1xLjGYXpY5ZOe1/rUwmogvWRKojpdr3YfFy6 XVZvfdUXd9p+IokJXFcAKKudXXURjzHOUYHNvf45KiOGkQW4g2035Q6EN3z3Tope bkpEUngOec+5HY3Y2bXlBbbtIYdjIqxuLidU+9ylQMIVeKdH+XM= =zDpv -----END PGP SIGNATURE-----