-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:29:20 +0100 Source: openssh Binary: openssh-client-gssapi openssh-server-gssapi ssh Architecture: all Version: 1:10.0p1-7+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Colin Watson Description: openssh-client-gssapi - secure shell (SSH) client, with GSS-API support openssh-server-gssapi - secure shell (SSH) server, with GSS-API key exchange ssh - secure shell client and server (metapackage) Closes: 1130595 Changes: openssh (1:10.0p1-7+deb13u2) trixie-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: 173ce0da6803b8c6001a567c78a99cc742bf00af 143608 openssh-client-gssapi_10.0p1-7+deb13u2_all.deb f244dd79de55314ebf91b977c667917c7035c670 143604 openssh-server-gssapi_10.0p1-7+deb13u2_all.deb ad5e9cc47d3ca619f2fdd4fe31457722d4cd2584 15669 openssh_10.0p1-7+deb13u2_all-buildd.buildinfo 69f723c505ff41651faf91fd003ff8492dfe88c5 143220 ssh_10.0p1-7+deb13u2_all.deb Checksums-Sha256: 30f930c4e75b01199c4f21886d82be0254c91b50cd3b21fa0fb45087c3d26b33 143608 openssh-client-gssapi_10.0p1-7+deb13u2_all.deb 5a82a95f0909840534b5a63a5aac05367f4a27bbefbd27eddbd33a6aa8c1e911 143604 openssh-server-gssapi_10.0p1-7+deb13u2_all.deb 08b94e91a2149c45eb587f32720f4dcc2d4d087dd76501a245488ed4f5ff9e52 15669 openssh_10.0p1-7+deb13u2_all-buildd.buildinfo 64a9bea361077ba92c150e5887030c2fa0413b937fb198ee2302d8eeec42169f 143220 ssh_10.0p1-7+deb13u2_all.deb Files: 6d8a14862f2cb22bc59b0f20ba99b446 143608 net optional openssh-client-gssapi_10.0p1-7+deb13u2_all.deb 68789f08bad89c4b714040b2b33c91d2 143604 net optional openssh-server-gssapi_10.0p1-7+deb13u2_all.deb ca4afc877baf2d791f39467c29f90e33 15669 net standard openssh_10.0p1-7+deb13u2_all-buildd.buildinfo c48316249d4c141865d02ac681192a71 143220 net optional ssh_10.0p1-7+deb13u2_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmnRpcoACgkQmgPNRvTf /zfQLRAAvg2O1kJ9dbfuvCchFC34cDl8rwTbn3OEVQ5SWtWIFmURpKskitxckEVk U0xv3ToPJpOJ3Bbd4V/yD9y1d57DS8ecVERfRLLqqtRDxwlX0UcH+RZ1M1wncej0 JFt7CAzmi5jBUg7KSNYgyoVBXHv2n6NHa6CmvWE5UMvqIHyIn0pB26d+Xx/8LRwd pkfJQ+pgp5JGIX9e9qcgGwsZXMyp5Xj8kn+Eh7d/tlvNSe8x+6V3D6g/nrp3PPXX SNBSu/jkFcOpGMo0hj191u0LTle/Key71SZQU6tv7WgM7kLBNeDfN9Gi/rFPoBB7 3GtFBGpFI1vBmHTNT6MGw5oXRJW71UxMFh8U5Vd65GOwpoakmofijdWaDbxVx/91 czmoRo3E9FDAtKMO5Md0yPJH5Xx82fA+1lShftCtnzpmjvFeCCESjHHLMcsM2LQ9 NwN5emSnmVZzQXf6HqVuiVnsGsp9D4MmkpVoWE38A9uqoOP760Wz0rewyH7vWQoa Cd8p4yf5WQ7CO036V6KmGhSVvgqxRO6zMafds/ipC4LaRKlD0NuyCiFVldIidsAR JW9SItuwb/L7FY08VfpeaxsA7YHAd5lqapCpUudKLSLFPoFLKeKKKMDPeF4wPEPp oD+7/Uoik7eToMRkdFJF3YKKDuq+NzqL6A98LQY1c6vl/Dy9nDU= =G3Up -----END PGP SIGNATURE-----