Bug#1080350: update in trixie

Thomas Braun <[email protected]> Sun, 22 Feb 2026 21:11:07 +0100

Newsgroups	gmane.linux.debian.devel.ssh
Message-ID	<ac7cb2db84e4bdf7937b686d5c0df79e22ebc95e.camel__16805.5529984244$1771792403$gmane$org@byte-physics.de>

I would also like to see this fixed in trixie. Especially because tools
like ssh-audit suggest to set PerSourceMaxStartups to 1 to "protect"
against dheat DoS attacks.

Is that severe enough for stable-proposed-updates and then a point
release? IMHO yes. Especially because this was working in bookworm and
is now broken in trixie.

[1]:
https://github.com/jtesta/ssh-audit/blob/4f9a630de4292663bd50fff4dfa347c53316ca37/src/ssh_audit/hardening_guides.py#L67