-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Jan 2026 17:42:52 +0100
Source: inetutils
Binary: telnet telnetd
Architecture: all
Version: 2:2.4-2+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Guillem Jover <guillem@debian.org>
Description:
 telnet     - transitional dummy package for inetutils-telnet default switch
 telnetd    - transitional dummy package for inetutils-telnetd default switch
Closes: 1126047
Changes:
 inetutils (2:2.4-2+deb12u2) bookworm-security; urgency=high
 .
   * Fix remote authentication bypass in telnetd.
     GNU InetUtils Security Advisory:
     <https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html>
     Fixes CVE-2026-24061. (Closes: #1126047)
Checksums-Sha1:
 3487d24887f797cd2ca8225bcf7cdd4e3408735d 6797 inetutils_2.4-2+deb12u2_all-buildd.buildinfo
 4047fe36c8c8444cb015fdf285fbc0ffbf3b22cb 41184 telnet_0.17+2.4-2+deb12u2_all.deb
 785dc772365e21d2a952b9463f05cf35efe8246f 41256 telnetd_0.17+2.4-2+deb12u2_all.deb
Checksums-Sha256:
 9df2b25d993e1f3776b650673adcd482cf211d94c8485bfbaa84a8c952c6e949 6797 inetutils_2.4-2+deb12u2_all-buildd.buildinfo
 f54e850e8fdf7b3f862fc47012ac8e6128cee8a29928d02203242022cc562257 41184 telnet_0.17+2.4-2+deb12u2_all.deb
 1dc71b008f1460945efb8eb0cdc368c89726a17472f0f584999b58c2c3e10483 41256 telnetd_0.17+2.4-2+deb12u2_all.deb
Files:
 206ebe7cc3efd18e9049f4d1974cb912 6797 net optional inetutils_2.4-2+deb12u2_all-buildd.buildinfo
 e0ce6c4651591412456a41a3724133f5 41184 oldlibs optional telnet_0.17+2.4-2+deb12u2_all.deb
 970d41d3a1445e1f530bd1ec11793eb7 41256 oldlibs optional telnetd_0.17+2.4-2+deb12u2_all.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEErwLLVsiCiGZggzpHJuP6X4A0XeIFAmlxIjYACgkQJuP6X4A0
XeI0ShAAiatkfEAkdO9ck6OGwoZsIpTZ+7EeTlWlhJcgQur0+SpMhKtjnY2QNVlZ
6tT9/gM/1fZ2jjNCBNvNNvBLgFu3FOLQkEHkaBV475ZgE308rMUjkHI+a/kLiEvG
HetpWvbAqYtJk4+LOeOyEOxIPGq8q7c0pWv4iud1OVMO/kDMQWULqfAZS3R6j5++
cnJHDHbxhf9376sVxyu6bbR0M/y9tubu/QF1o6a972SzXGEh6EDySzSvWzLUt4MD
qsOlExzSPxLd+Vs1VgfffDZJFbWK+esHKPd9F8GIo/0NHM3TQN61YDD1zP/Hkucp
DBJRvTpe7NYilJ6ZMSZynX59JC816aTSy9GnkE3kD6xb1ShV8w4DDWNOW9V8coFj
8sDGwGS4cVZxh0N85otsGqlY2U1t0HlV7C78CeAoi1mwpFOZLNVuvHnDuel7ZdEO
SCwy8JVA5jyCDHOlusCVn8bMMY12ILsPitIyYyjMXRP4DKUp64ZyPW1LQAm97XKo
AEq+BOVy1Sz+mGWIfdOktn8wBE8/HLTkfYWHeJdC/y6ojbQoAEJJiQPshuqkA4RJ
YzP3HzoC1PX4iA34xd/oZ3gCaKoGcB7qmwTlDZDaOIyVfFxY61vLh/ZcILXHDyIa
wd8hVIN1L7a+5OFlKzuIIyxMxYu2OXizqVckQ8L2INUQzUTFgLc=
=wVrT
-----END PGP SIGNATURE-----