Your message dated Sat, 22 Aug 2026 19:02:17 +0000
with message-id <[email protected]>
and subject line Bug#1141274: fixed in openssh-gssapi 1:10.4p1-5
has caused the Debian Bug report #1141274,
regarding ITP: openssh-gssapi -- OpenSSH client and server with GSS-API support
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1141274: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141274
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: wnpp
Severity: wishlist
Owner: Colin Watson <[email protected]>
X-Debbugs-Cc: [email protected]
* Package name : openssh-gssapi
Version : 10.3p1
Upstream Contact: [email protected]
* URL : https://www.openssh.com/
* License : BSD-3-clause
Programming Lang: C
Description : OpenSSH client and server with GSS-API support
As discussed in
https://lists.debian.org/debian-devel/2024/04/msg00044.html and thread,
I've been intending to split out GSS-API support from the main OpenSSH
packaging for some time.
The GSS-API key exchange patch is about 3900 lines that is never likely
to be accepted upstream, and accounts for 68% of our current patch
volume all by itself, much of which is in the particularly
security-critical pre-authentication parts of OpenSSH. We also
configure OpenSSH using the --with-kerberos5 option, which causes
sshd-auth and sshd-session to have significant extra library linkage
that increases their exposure to attack chains. Having all of this
installed only on systems that actually need it will reduce risk for
most Debian users.
I intend to maintain this as part of the SSH team (which admittedly is
pretty much just me right now; if any Debian developers are interested
in helping out, please contact me off-list) alongside the existing
openssh and openssh-ssh1 source packages. Unlike openssh-ssh1 which is
intentionally frozen at an old version, it should generally be possible
to keep openssh-gssapi broadly in sync with openssh.
--
Colin Watson (he/him) [[email protected]]
--- End Message ---
--- Begin Message ---
Source: openssh-gssapi
Source-Version: 1:10.4p1-5
Done: Colin Watson <[email protected]>
We believe that the bug you reported is fixed in the latest version of
openssh-gssapi, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Colin Watson <[email protected]> (supplier of updated openssh-gssapi package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 13 Aug 2026 01:01:49 +0100
Binary: openssh-client-gssapi openssh-client-gssapi-dbgsym
openssh-server-gssapi openssh-server-gssapi-dbgsym
Source: openssh-gssapi
Architecture: amd64 source
Version: 1:10.4p1-5
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenSSH Maintainers <[email protected]>
Changed-By: Colin Watson <[email protected]>
Closes: 1141274
Description:
openssh-client-gssapi - secure shell (SSH) client, with GSS-API support
openssh-server-gssapi - secure shell (SSH) server, with GSS-API key exchange
Changes:
openssh-gssapi (1:10.4p1-5) unstable; urgency=medium
.
* Split out openssh-gssapi source package, in preparation for dropping
GSS-API authentication and key exchange support from the main openssh
source package (closes: #1141274).
Checksums-Sha1:
00c1ae8bab821bcf527cc4fe4ac4272b9c6e44e1 3085 openssh-gssapi_10.4p1-5.dsc
ae8650a71cc52dbbd049519cee276ae6d65c2c4d 2321796
openssh-gssapi_10.4p1.orig.tar.gz
024bbb98d37dc35c31a49144770c6e38bfe53829 833
openssh-gssapi_10.4p1.orig.tar.gz.asc
74c1c9f3df8413d5ab27df64c4f366876115170f 198664
openssh-gssapi_10.4p1-5.debian.tar.xz
5240dba9d3deb356b1859f74bd49d8f514814ee6 4216048
openssh-client-gssapi-dbgsym_10.4p1-5_amd64.deb
ff28e624cc85a14e0bdcaa18a4dba8bac1f6cfee 928484
openssh-client-gssapi_10.4p1-5_amd64.deb
2105f85438e9c49fe993a977ea3fd754178a1997 15682
openssh-gssapi_10.4p1-5_amd64.buildinfo
7abf3b7e137870854852b128065f9fda4f55ea91 3263876
openssh-server-gssapi-dbgsym_10.4p1-5_amd64.deb
ab84bb617e4151156f4e38cc5697ce6639c35d58 835924
openssh-server-gssapi_10.4p1-5_amd64.deb
Checksums-Sha256:
69509bc4d4fb4f3fa13b98de8f427358dc530039c41e246e9b8e3a747f88c034 3085
openssh-gssapi_10.4p1-5.dsc
ef6026dd2aea8d56059638d5d3262902c892ceba9f88395835e0d06d3fb63238 2321796
openssh-gssapi_10.4p1.orig.tar.gz
9206329419c45245913ae42fd290e2ed5b1669df97d9cf0d3e28c06b63035e51 833
openssh-gssapi_10.4p1.orig.tar.gz.asc
00f0d401b7f44d98ead945f72fcc3df94bb88f960a7e4b26b0c4cf9fb79e1085 198664
openssh-gssapi_10.4p1-5.debian.tar.xz
eb707054644798442da194d5581f2ca676846327dff84c8c74ac988c320fd5c0 4216048
openssh-client-gssapi-dbgsym_10.4p1-5_amd64.deb
9eb44b897763ff2d59b44f9a788da2be331daaab5117631a6dcdaf90c8715a52 928484
openssh-client-gssapi_10.4p1-5_amd64.deb
f6187c6a521ec496378f51572892cb869b4774881ffe77c490f70b8a3c2bb8f8 15682
openssh-gssapi_10.4p1-5_amd64.buildinfo
58549ce926f451050e8ef0e7b5db50d0f33bbb94146e99bed145be4bf3b859d6 3263876
openssh-server-gssapi-dbgsym_10.4p1-5_amd64.deb
d050196215a6b80e2869b69b1031483d2fbb864ef6e87548bd6af0d8d871dd76 835924
openssh-server-gssapi_10.4p1-5_amd64.deb
Files:
ab3d17a2037b2942a5e1702ae1a31008 3085 net optional openssh-gssapi_10.4p1-5.dsc
c5fb91ded926b38e8956074cac2cd44f 2321796 net optional
openssh-gssapi_10.4p1.orig.tar.gz
105ff131214dc93a4892488bc80b444a 833 net optional
openssh-gssapi_10.4p1.orig.tar.gz.asc
984ad23caa9f6859423cb5483cd4a010 198664 net optional
openssh-gssapi_10.4p1-5.debian.tar.xz
3114741a897969507016899b48a4f1fc 4216048 debug optional
openssh-client-gssapi-dbgsym_10.4p1-5_amd64.deb
1409858f1bd59d7e5086f8566e92295b 928484 net optional
openssh-client-gssapi_10.4p1-5_amd64.deb
e944ccf75f2f3d3d09424a5bb68c8588 15682 net optional
openssh-gssapi_10.4p1-5_amd64.buildinfo
0211469114deec9b4693ef5b234ebe28 3263876 debug optional
openssh-server-gssapi-dbgsym_10.4p1-5_amd64.deb
3378b9cab0e14e5417b69e28cb470877 835924 net optional
openssh-server-gssapi_10.4p1-5_amd64.deb
-----BEGIN PGP SIGNATURE-----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=hUw7
-----END PGP SIGNATURE-----
pgphBWWaV3eoo.pgp
Description: PGP signature
--- End Message ---
