Package: openssh-client Version: 1:9.2p1-2+deb12u3 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
According to OpenSSH's feature list, ext-info-s and ext-info-c were implemented starting with version 7.2 upstream. However, on the Debian port, ssh-audit doesn't report ext-info-c as supported and it only started reporting ext-info-s around 9.8. Is there any particular reason for disabling this? Martin-Éric - -- System Information: Debian Release: 12.7 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-25-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=fi_FI.utf8, LC_CTYPE=fi_FI.utf8 (charmap=UTF-8), LANGUAGE=fi:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages openssh-client depends on: ii adduser 3.134 ii libc6 2.36-9+deb12u8 ii libedit2 3.1-20221030-2 ii libfido2-1 1.12.0-2+b1 ii libgssapi-krb5-2 1.20.1-2+deb12u2 ii libselinux1 3.4-1+b6 ii libssl3 3.0.14-1~deb12u2 ii passwd 1:4.13+dfsg1-1+b1 ii zlib1g 1:1.2.13.dfsg-1 Versions of packages openssh-client recommends: ii xauth 1:1.1.2-1 Versions of packages openssh-client suggests: pn keychain <none> pn libpam-ssh <none> pn monkeysphere <none> pn ssh-askpass <none> - -- no debconf information -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyJACx3qL7GpObXOQrh+Cd8S017YFAmbzpz4ACgkQrh+Cd8S0 17YLaQ/9F41eZhZkZiEZtOoik3ONMFzbk7QC3Y5c6m/3Mc3xfU8qhzEIjzy4fqRm vNbEoFP3XgHA0GIG8JVvBJMn7S6YKSJe8X9/jvF9BiU+aXAXKNJw8NfMza852j7O jlAxAr5nfgelhJH8upWR6wIuUp0zEvvyqp/oBAEGObDT3MDMc0oGWbi6w2ISHNCk Iv26WpRvCE+fs4W8AyP6lbREiXJANNR0FWpWqUaCPoybf8DjF3UqK33Ep9KCqkwd aZFvEKh1f8DnYKKKD2UMOAKQ2B+5lAfdXBIqqUi2lq1oPNOpfffHYc7GXpAWh4Qi Us3XBOCYesBELUgMu0ovBAL6BiDSAmtrL1d/dbiZveUja8UMKinvLr9ENAJ4Tjl5 fp73fv5xBKdsQFodq0ptI0Bej17JtQImhgRBaIP4M8HQjWgKCXOWoU/bi7/CLwHN OUAAkkeSOu8EzPbkP2t9JTQFbzKQ5Ty6z5X/BgcsI+X6iODTVAAuLLr8BaHfApyF wm9XXYfjKvoAHIc6h8zTF2CKocJQ8SkHpwFhkUcSwky4qtBwvl7TK2cX8Jv3V4EP RdX+iyLGCja35Zkx7AxDg9f+ZBkrYmS+BHK584mY3yxsw6/R25D5TvbRsIOa5ZKO m94lgLYxmaW+IEZpSB3WlAfhS1IxzZWiKCjpHWHbCRh5Vx2Md9w= =Tv1c -----END PGP SIGNATURE-----
