Bug#1130595: openssh: CVE-2026-3497

Salvatore Bonaccorso <[email protected]> Fri, 3 Apr 2026 10:50:34 +0200

Newsgroups	gmane.linux.debian.devel.ssh
Message-ID	<ac9_WgltL2bNNPt1__2126.34997894696$1775206406$gmane$org@eldamar.lan>

Hi Moritz,

On Sun, Mar 29, 2026 at 06:46:37PM +0000, Moritz MÃ¼hlenhoff wrote:
> On Sun, Mar 29, 2026 at 08:31:48PM +0200, Salvatore Bonaccorso wrote:
> > They look good, thank you (Unfortunately I do not have a setup to test
> > the speciic case). After finalizing the changelog, please do upload to
> > security-master (the one for trixie needs to be build with -sa).
> 
> I can test kerberised SSH on Bookworm and most certainly also on Trixie,
> I'll report back tomorrow.

Were you able to test the kerberized SSH setup? As the debdiff looked
okay to me i would otherwise say Colin can upload already to
security-master and we can do further tests before a DSA release.

Regards,
Salvatore