* Package name    : openssh-gssapi
  Version         : 10.3p1
  Upstream Contact: openssh-unix-dev@mindrot.org
* URL             : https://www.openssh.com/
* License         : BSD-3-clause
  Programming Lang: C
  Description     : OpenSSH client and server with GSS-API support

As discussed in
https://lists.debian.org/debian-devel/2024/04/msg00044.html and thread,
I've been intending to split out GSS-API support from the main OpenSSH
packaging for some time.

The GSS-API key exchange patch is about 3900 lines that is never likely
to be accepted upstream, and accounts for 68% of our current patch
volume all by itself, much of which is in the particularly
security-critical pre-authentication parts of OpenSSH.  We also
configure OpenSSH using the --with-kerberos5 option, which causes
sshd-auth and sshd-session to have significant extra library linkage
that increases their exposure to attack chains.  Having all of this
installed only on systems that actually need it will reduce risk for
most Debian users.

I intend to maintain this as part of the SSH team (which admittedly is
pretty much just me right now; if any Debian developers are interested
in helping out, please contact me off-list) alongside the existing
openssh and openssh-ssh1 source packages.  Unlike openssh-ssh1 which is
intentionally frozen at an old version, it should generally be possible
to keep openssh-gssapi broadly in sync with openssh.

Hello,

Bug #1141274 in openssh-gssapi reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/ssh-team/openssh-gssapi/-/commit/626b027fcd22b8aa6713c2f65cb8842bddfe8b0e
------------------------------------------------------------------------
Split out openssh-gssapi source package

This will continue to provide GSS-API authentication and key exchange
support after it has been dropped from the main openssh source package,
which will happen soon.

https://lists.debian.org/debian-devel/2024/04/msg00044.html

Closes: #1141274
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1141274

Hello,

Bug #1141274 in openssh-gssapi reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/ssh-team/openssh-gssapi/-/commit/626b027fcd22b8aa6713c2f65cb8842bddfe8b0e
------------------------------------------------------------------------
Split out openssh-gssapi source package

This will continue to provide GSS-API authentication and key exchange
support after it has been dropped from the main openssh source package,
which will happen soon.

https://lists.debian.org/debian-devel/2024/04/msg00044.html

Closes: #1141274
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1141274

We believe that the bug you reported is fixed in the latest version of
openssh-gssapi, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1141274@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Colin Watson <cjwatson@debian.org> (supplier of updated openssh-gssapi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 13 Aug 2026 01:01:49 +0100
Binary: openssh-client-gssapi openssh-client-gssapi-dbgsym openssh-server-gssapi openssh-server-gssapi-dbgsym
Source: openssh-gssapi
Architecture: amd64 source
Version: 1:10.4p1-5
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenSSH Maintainers <debian-ssh@lists.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Closes: 1141274
Description:
 openssh-client-gssapi - secure shell (SSH) client, with GSS-API support
 openssh-server-gssapi - secure shell (SSH) server, with GSS-API key exchange
Changes:
 openssh-gssapi (1:10.4p1-5) unstable; urgency=medium
 .
   * Split out openssh-gssapi source package, in preparation for dropping
     GSS-API authentication and key exchange support from the main openssh
     source package (closes: #1141274).
Checksums-Sha1:
 00c1ae8bab821bcf527cc4fe4ac4272b9c6e44e1 3085 openssh-gssapi_10.4p1-5.dsc
 ae8650a71cc52dbbd049519cee276ae6d65c2c4d 2321796 openssh-gssapi_10.4p1.orig.tar.gz
 024bbb98d37dc35c31a49144770c6e38bfe53829 833 openssh-gssapi_10.4p1.orig.tar.gz.asc
 74c1c9f3df8413d5ab27df64c4f366876115170f 198664 openssh-gssapi_10.4p1-5.debian.tar.xz
 5240dba9d3deb356b1859f74bd49d8f514814ee6 4216048 openssh-client-gssapi-dbgsym_10.4p1-5_amd64.deb
 ff28e624cc85a14e0bdcaa18a4dba8bac1f6cfee 928484 openssh-client-gssapi_10.4p1-5_amd64.deb
 2105f85438e9c49fe993a977ea3fd754178a1997 15682 openssh-gssapi_10.4p1-5_amd64.buildinfo
 7abf3b7e137870854852b128065f9fda4f55ea91 3263876 openssh-server-gssapi-dbgsym_10.4p1-5_amd64.deb
 ab84bb617e4151156f4e38cc5697ce6639c35d58 835924 openssh-server-gssapi_10.4p1-5_amd64.deb
Checksums-Sha256:
 69509bc4d4fb4f3fa13b98de8f427358dc530039c41e246e9b8e3a747f88c034 3085 openssh-gssapi_10.4p1-5.dsc
 ef6026dd2aea8d56059638d5d3262902c892ceba9f88395835e0d06d3fb63238 2321796 openssh-gssapi_10.4p1.orig.tar.gz
 9206329419c45245913ae42fd290e2ed5b1669df97d9cf0d3e28c06b63035e51 833 openssh-gssapi_10.4p1.orig.tar.gz.asc
 00f0d401b7f44d98ead945f72fcc3df94bb88f960a7e4b26b0c4cf9fb79e1085 198664 openssh-gssapi_10.4p1-5.debian.tar.xz
 eb707054644798442da194d5581f2ca676846327dff84c8c74ac988c320fd5c0 4216048 openssh-client-gssapi-dbgsym_10.4p1-5_amd64.deb
 9eb44b897763ff2d59b44f9a788da2be331daaab5117631a6dcdaf90c8715a52 928484 openssh-client-gssapi_10.4p1-5_amd64.deb
 f6187c6a521ec496378f51572892cb869b4774881ffe77c490f70b8a3c2bb8f8 15682 openssh-gssapi_10.4p1-5_amd64.buildinfo
 58549ce926f451050e8ef0e7b5db50d0f33bbb94146e99bed145be4bf3b859d6 3263876 openssh-server-gssapi-dbgsym_10.4p1-5_amd64.deb
 d050196215a6b80e2869b69b1031483d2fbb864ef6e87548bd6af0d8d871dd76 835924 openssh-server-gssapi_10.4p1-5_amd64.deb
Files:
 ab3d17a2037b2942a5e1702ae1a31008 3085 net optional openssh-gssapi_10.4p1-5.dsc
 c5fb91ded926b38e8956074cac2cd44f 2321796 net optional openssh-gssapi_10.4p1.orig.tar.gz
 105ff131214dc93a4892488bc80b444a 833 net optional openssh-gssapi_10.4p1.orig.tar.gz.asc
 984ad23caa9f6859423cb5483cd4a010 198664 net optional openssh-gssapi_10.4p1-5.debian.tar.xz
 3114741a897969507016899b48a4f1fc 4216048 debug optional openssh-client-gssapi-dbgsym_10.4p1-5_amd64.deb
 1409858f1bd59d7e5086f8566e92295b 928484 net optional openssh-client-gssapi_10.4p1-5_amd64.deb
 e944ccf75f2f3d3d09424a5bb68c8588 15682 net optional openssh-gssapi_10.4p1-5_amd64.buildinfo
 0211469114deec9b4693ef5b234ebe28 3263876 debug optional openssh-server-gssapi-dbgsym_10.4p1-5_amd64.deb
 3378b9cab0e14e5417b69e28cb470877 835924 net optional openssh-server-gssapi_10.4p1-5_amd64.deb
-----BEGIN PGP SIGNATURE-----
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=hUw7
-----END PGP SIGNATURE-----