openssh_9.9p2-1_source.changes ACCEPTED into unstable

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 18 Feb 2025 10:13:10 +0000
Source: openssh
Architecture: source
Version: 1:9.9p2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenSSH Maintainers <[email protected]>
Changed-By: Colin Watson <[email protected]>
Changes:
 openssh (1:9.9p2-1) unstable; urgency=medium
 .
   * New upstream release:
     - CVE-2025-26465: ssh(1) in OpenSSH versions 6.8p1 to 9.9p1 (inclusive)
       contained a logic error that allowed an on-path attacker (a.k.a MITM)
       to impersonate any server when the VerifyHostKeyDNS option is enabled.
       This option is off by default.
     - CVE-2025-26466: sshd(8) in OpenSSH versions 9.5p1 to 9.9p1 (inclusive)
       is vulnerable to a memory/CPU denial-of-service related to the
       handling of SSH2_MSG_PING packets. This condition may be mitigated
       using the existing PerSourcePenalties feature.
     - ssh(1), sshd(8): fix regression in Match directive that caused
       failures when predicates and their arguments were separated by '='
       characters instead of whitespace (bz3739).
     - sshd(8): fix the "Match invalid-user" predicate, which was matching
       incorrectly in the initial pass of config evaluation.
Checksums-Sha1:
 0f18c28bad78b7c3bbe9895d14caf2f6433130c6 3465 openssh_9.9p2-1.dsc
 edefe960645780dee78059c444d4261667ad3056 1944499 openssh_9.9p2.orig.tar.gz
 efc8596f61d278094b2de1ffcd73636a054147e0 833 openssh_9.9p2.orig.tar.gz.asc
 e807842b2950b038d81eef92303269e088be393e 195692 openssh_9.9p2-1.debian.tar.xz
Checksums-Sha256:
 0111130a2fcfb11ef7d522135fbd762e86da8f06063f1fe7e642a64128f999b0 3465 openssh_9.9p2-1.dsc
 91aadb603e08cc285eddf965e1199d02585fa94d994d6cae5b41e1721e215673 1944499 openssh_9.9p2.orig.tar.gz
 17daea197718ef7907db917983547dbece321ac8beb1f2c215b45a93c485f5c2 833 openssh_9.9p2.orig.tar.gz.asc
 cf84d45cbd4517fa38a1fd9c5ceac2db0280d41d8850fd65841a5421d415570c 195692 openssh_9.9p2-1.debian.tar.xz
Files:
 e28431f2347fb0fcb37b5368f6106b0a 3465 net standard openssh_9.9p2-1.dsc
 f617b95fe278bfea8d004589c7a68a85 1944499 net standard openssh_9.9p2.orig.tar.gz
 485a711a9a9e547b132297037f5be77d 833 net standard openssh_9.9p2.orig.tar.gz.asc
 5b325962ceb37111cfe50549dcac7523 195692 net standard openssh_9.9p2-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAme0XVwACgkQOTWH2X2G
UAtKiQ//eXionyNpAhSE0O7hCA+KAlWGDLLPiSGAgFnRBAgXd1o6KL4HZo+G5r/C
qkuRscm0elfQMoI/JXliKRPdJI3eRJ2bkJs/FGFCb87ylALSJYQ+QIwweV2n7VI/
E1T8B6Od+eFCoLOij0W9nee0ZsJNyc+pQ/CfoMjFuesHl7ExWfOyTyt9iXTo/71p
woXGtHnibx4L64v7YoitXCbinCuMuqy8o7EHuQxBMXMqojedol+fLtFIDpsgGNtj
zwLnZK30AXyLYLy02lkmp1BFt43shZmKvMAHyd/8NpKhG+7YSmc7q8PJ9niMNhAB
2utJ8XhhI/kxvMhNnnNHrGQchLnkonsDnIS06pKFcyRV4vhe8F/YXrtKSo2AtAAe
pwa4vnbd+9bZwttIrvybpNxvhdWna523+8niMWai63BHHzLZ9q6vZAdbqVO8/Y2E
eC8aZCvr5rnLfCyq4/ezfDhnsEf7aDVoe8FPIFGfPI5ZLOLB8RuzQBc4EbLPGLOs
gRmSc3XBfBaP1G3+8bqYi2LgTBLRfWGwOSxCRYAqDereW2f/JIM8YkLh2V2Kgf6E
YPOCLS0AcSa2UlDj6IW5B15svyqS0WeRa44JawXxNgJf/b7q+2ZGWCPB4CyBnD9t
K+ScMem5mX8BED5NwV40aYj5doDp1QOCZEGwI92ROxcv+xo0neU=
=LcJs
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCZ7RiXgAKCRCb9qggYcy5
IURnAP4ngyJdvsUIjjxYRc7UaxtTow7FFukKEyoj1ye84p5P8wD/dmHmRMRJlt/F
6zwS+QOM1V52g8RTa0qH5+d4soNcUgE=
=LFhu
-----END PGP SIGNATURE-----