-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Feb 2026 13:16:06 +0000 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: amd64 Version: 1:9.2p1-2+deb12u8 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1117529 1117530 Changes: openssh (1:9.2p1-2+deb12u8) bookworm; urgency=medium . * CVE-2025-61984: ssh(1): disallow control characters in usernames passed via the commandline (closes: #1117529). * CVE-2025-61985: ssh(1): disallow \0 characters in ssh:// URIs (closes: #1117530). Checksums-Sha1: 2d9e5d1e328dea608d7ea69a01cdf0cccd08a484 3814504 openssh-client-dbgsym_9.2p1-2+deb12u8_amd64.deb 4fddc13368998eaa5e2c14d7fb9a9fb702db5192 378128 openssh-client-udeb_9.2p1-2+deb12u8_amd64.udeb 529c36c6009153196fb734606ba72655905bfee6 991920 openssh-client_9.2p1-2+deb12u8_amd64.deb 37ae5696a115918c92b8b3aa530cbb15eaa29caf 941356 openssh-server-dbgsym_9.2p1-2+deb12u8_amd64.deb a5d9fb4395192dd55754e783cfa8db5ee2cb655b 394428 openssh-server-udeb_9.2p1-2+deb12u8_amd64.udeb c0540c7e8c3f2748c81686141caf2585bd7aa6a5 456600 openssh-server_9.2p1-2+deb12u8_amd64.deb c473a8a0cc32321e72f6f3cfaaaf62a40b87c1d2 165560 openssh-sftp-server-dbgsym_9.2p1-2+deb12u8_amd64.deb d541875fd1f10c0fa41108f3f704e46db66ffab3 65920 openssh-sftp-server_9.2p1-2+deb12u8_amd64.deb 461b321f484675e2d1023050667bb830de2ad71d 2968256 openssh-tests-dbgsym_9.2p1-2+deb12u8_amd64.deb f5deb6be7f5320bb1a9618af43a22d7708916bcc 1050272 openssh-tests_9.2p1-2+deb12u8_amd64.deb b48e9b74fd1385b9cf57b69bbab85a647d59e5aa 18833 openssh_9.2p1-2+deb12u8_amd64-buildd.buildinfo 9bc60407d39387b327e98394072352efcfeaa184 16996 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u8_amd64.deb 63da6e05d37d848900a542a26e24e94c329841f0 188168 ssh-askpass-gnome_9.2p1-2+deb12u8_amd64.deb Checksums-Sha256: 9bac2749cc38c6c55f4449e862588951bd9950f02eaa4335b25850783b98e5b5 3814504 openssh-client-dbgsym_9.2p1-2+deb12u8_amd64.deb 73124135870d3e5f40c3145440a07fbd2ede35e27800a92de46f44acdb83bddc 378128 openssh-client-udeb_9.2p1-2+deb12u8_amd64.udeb 10765738d6d82f65890898fbdd7835b63408a01e0e437fc046c683a7fad2a033 991920 openssh-client_9.2p1-2+deb12u8_amd64.deb af5f5b0bcb131b9faee399819f4191b8f86d5d06456c74284f883f778a8e31f1 941356 openssh-server-dbgsym_9.2p1-2+deb12u8_amd64.deb 0f36b234d7918c33c10fcfed77eaaf9be21b1ce9f442511410f6c57a6463c403 394428 openssh-server-udeb_9.2p1-2+deb12u8_amd64.udeb 18882cf79f445737338aaf10e31406ad7cd7f23277bb58d469627af0c3cbe770 456600 openssh-server_9.2p1-2+deb12u8_amd64.deb 83065ba1ab416d533547d9e1190e71cddb7cd161b828846ddf631117bb3990d6 165560 openssh-sftp-server-dbgsym_9.2p1-2+deb12u8_amd64.deb 740f22a818166a8d9eb300b6959498fb48f546834529f67e38d7229503fd870d 65920 openssh-sftp-server_9.2p1-2+deb12u8_amd64.deb 7de1126d8076a6f789406542f63e2fc7b34f324d0c0c216bceeb871b6a04656f 2968256 openssh-tests-dbgsym_9.2p1-2+deb12u8_amd64.deb 8bec2e12fd4fb9f3816fd1920a411278531f84d8fceaff1ec73084f210500d19 1050272 openssh-tests_9.2p1-2+deb12u8_amd64.deb bdb972f5725289506682b1239e1a437d9ab6b72b59a31c75532f40c09f2fe8d5 18833 openssh_9.2p1-2+deb12u8_amd64-buildd.buildinfo 2900239b2e0c6a006671d344517acb4f7b6f119f597c47510d5f8491650a7111 16996 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u8_amd64.deb 7b527988ce85a221162a37f7333eaa473e64d296d274899a91ada94799509bb9 188168 ssh-askpass-gnome_9.2p1-2+deb12u8_amd64.deb Files: 206a01dc9d7e778368bfeb0db72a3143 3814504 debug optional openssh-client-dbgsym_9.2p1-2+deb12u8_amd64.deb 86fd0b07afe560c25c32ba760b1a8ae0 378128 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u8_amd64.udeb 4ab8feb7f722ad00339c35d61575123c 991920 net standard openssh-client_9.2p1-2+deb12u8_amd64.deb 2d236ff2fafdd1b4e7b56f474c09ca61 941356 debug optional openssh-server-dbgsym_9.2p1-2+deb12u8_amd64.deb 2e4ca2c58fdb2cf1e9a82165e22a3150 394428 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u8_amd64.udeb e8064898cad240df726d206cb9192f97 456600 net optional openssh-server_9.2p1-2+deb12u8_amd64.deb 46351ca3bbaf12256c55fd3ff9fc6ce1 165560 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u8_amd64.deb e86d080390aeb93abea4676de3c753aa 65920 net optional openssh-sftp-server_9.2p1-2+deb12u8_amd64.deb 148a2017144c18f3d5a5d76728134867 2968256 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u8_amd64.deb db6a99d5bce6d65027bb45d2845bad1a 1050272 net optional openssh-tests_9.2p1-2+deb12u8_amd64.deb ef2c2431ae1ddfa34c7271ae91f05878 18833 net standard openssh_9.2p1-2+deb12u8_amd64-buildd.buildinfo 4c4d0f19f21c917579731c3cd51226f5 16996 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u8_amd64.deb 1b474ecd83bffa154117a195e988be27 188168 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u8_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmmjK4sACgkQfUw6/tXb AmP/YA//ZNpXZ60HCg6I5aoNCaKb/H1V1cd+Cz9LnQH0PeBv5CjOC9tRi3xD/a8K YqdRljiZm/bm3+9reKeowqMurIwwPhKBiZTFNTQVDAmIYzPjG0fyp6tbS+OmgmRG dT/wYIp7ffph12KdY8ggJXylqVqV/DY6U0dv+Jghd3HRhO7xDiK/IOpuPMgW2iKN orluguidxA7t2w+IsTD6LgHExrBc2oaNQAzS7c8yQKMTEjgJCxGi89xpVHkrlSHa VTDqWX4AOd74nOLrY8PDmsXPLm5/AzLdKq3DVEQxGtTc1E63dm6Yr9j8dUEZ3I3y zhPyDoUpiR08Z24NK/niqr/JMe36Ged+O1X3NkrZPvgET8mCT+EqxnB0EV/AdJ44 +osKP+jz1jPaHLZtLboR3pv/vaxTImI7+NBpia1gdETELi9KQnQmgqFuFT18xqaw 5yw7vMVXMBWAeVgeOqxyFVNG5NFBhY4Ow//tNBtfLaGeBPbB0GeSntLl52zyxGhj DGWVQdJuP4otGP/zDTfPuYBY2Bo2cJ6dhF4roje+NAO9Oqg55h/P7mVd5iepVbyU +CibAUx9KByKWRUbUAczlSEA4kXv5VqrdSfuuWwbYxj4jjvLxN42eDMBSeCyo4VU Bojl8LLDB5I3VFuP05j0F+DzOUCASR/wnrcNx3YZVilekQYAdRs= =gbFT -----END PGP SIGNATURE-----