Processed: bookworm-pu: package openssh/1:9.2p1-2+deb12u4

[Debian Bug Tracking System]

affects -1 + src:openssh

Bug #1088969 [release.debian.org] bookworm-pu: package openssh/1:9.2p1-2+deb12u4
Added indication that 1088969 affects src:openssh

[Jonathan Wiltshire]

Control: tag -1 confirmed d-i

I have a set of OpenSSH fixes that I think are worth including in the
* Minor security fix to creation of template directories (#1001186,
#1064898)
* The gssapi-keyex authentication method was declared incorrectly and
was thus unusable
(https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2053146)
* The combination of GSS-API key exchange and public key authentication
broke in some situations (#1041521, #1088248)
In addition, although this isn't a regression, I agree with the reporter
of #1088873 that backporting the sntrup761x25519-sha512 alias for that
post-quantum key algorithm is likely to be helpful for configuration
management and interoperability.

Looks fine to me; d-i ack needed for the udeb (CC).

Thanks,

[Debian Bug Tracking System]

Post by Jonathan Wiltshire
tag -1 confirmed d-i

Bug #1088969 [release.debian.org] bookworm-pu: package openssh/1:9.2p1-2+deb12u4
Added tag(s) confirmed and d-i.

[Cyril Brulebois]

Post by Jonathan Wiltshire
Control: tag -1 confirmed d-i

I have a set of OpenSSH fixes that I think are worth including in the
* Minor security fix to creation of template directories (#1001186,
#1064898)
* The gssapi-keyex authentication method was declared incorrectly and
was thus unusable
(https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2053146)
* The combination of GSS-API key exchange and public key authentication
broke in some situations (#1041521, #1088248)
In addition, although this isn't a regression, I agree with the reporter
of #1088873 that backporting the sntrup761x25519-sha512 alias for that
post-quantum key algorithm is likely to be helpful for configuration
management and interoperability.

Looks fine to me; d-i ack needed for the udeb (CC).

No objections, thanks.


Cheers,

[Colin Watson]

Post by Cyril Brulebois

Post by Jonathan Wiltshire

I have a set of OpenSSH fixes that I think are worth including in the
* Minor security fix to creation of template directories (#1001186,
#1064898)
* The gssapi-keyex authentication method was declared incorrectly and
was thus unusable
(https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2053146)
* The combination of GSS-API key exchange and public key authentication
broke in some situations (#1041521, #1088248)
In addition, although this isn't a regression, I agree with the reporter
of #1088873 that backporting the sntrup761x25519-sha512 alias for that
post-quantum key algorithm is likely to be helpful for configuration
management and interoperability.

Looks fine to me; d-i ack needed for the udeb (CC).

No objections, thanks.

Thanks both; uploaded.

[Jonathan Wiltshire]

package release.debian.org
tags 1088969 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: openssh
Version: 9.2p1-2+deb12u4

Explanation: always use internal mkdtemp implementation; fix gssapi-keyex declaration; add ssh-gssapi automated test; don't prefer host-bound public key signatures if there was no initial host key; make sntrup761x25519-sha512 key exchange algorithm available without the @openssh.com suffix too

[Debian Bug Tracking System]

Post by Jonathan Wiltshire
package release.debian.org

Limiting to bugs with field 'package' containing at least one of 'release.debian.org'
Limit currently set to 'package':'release.debian.org'

Post by Jonathan Wiltshire
tags 1088969 = bookworm pending

Bug #1088969 [release.debian.org] bookworm-pu: package openssh/1:9.2p1-2+deb12u4
Added tag(s) pending; removed tag(s) confirmed and d-i.

Post by Jonathan Wiltshire
thanks

Stopping processing here.

Please contact me if you need assistance.

[Debian Bug Tracking System]

Your message dated Sat, 11 Jan 2025 11:03:09 +0000
with message-id <E1tWZGn-009ja6-***@coccia.debian.org>
and subject line Close 1088969
has caused the Debian Bug report #1088969,
regarding bookworm-pu: package openssh/1:9.2p1-2+deb12u4
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ***@bugs.debian.org
immediately.)