[Deepin Integration]~[v25-Release] fix(openssh): CVE-2026-35387/35388/35414 security fixes (backport) by deepin-ci-robot@deepin-community/openssh by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
openssh	1:9.9p2-0deepin8

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4149/testing/ ./

Changelog | 更新信息

openssh (1:9.9p2-0deepin8) unstable; urgency=medium

• Security fixes:
  • d/p/0039-upstream-CVE-2026-35388-mux-askpass.patch
    Add missing ControlMaster ask/autoask check for proxy mode multiplexing
    Fixes: CVE-2026-35388
  • d/p/0040-upstream-CVE-2026-35387-35414-ecdsa-principals.patch
    Correctly match ECDSA signature algorithms against algorithm allowlists;
    fix authorized_keys principals option matching with comma characters
    Fixes: CVE-2026-35387, CVE-2026-35414

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#4149