Date: Mon, 27 Jul 2026 03:50:14 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 297078] security/openssh-portable: key exchange crash Message-ID: <bug-297078-7788@https.bugs.freebsd.org/bugzilla/>
index | next in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297078 Bug ID: 297078 Summary: security/openssh-portable: key exchange crash Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: bdrewery@FreeBSD.org Reporter: wollman@FreeBSD.org Assignee: bdrewery@FreeBSD.org Flags: maintainer-feedback?(bdrewery@FreeBSD.org) Attachment #273207 text/plain mime type: Created attachment 273207 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=273207&action=edit build log from 10.4 The 10.4 update causes an immediate server-side connection close for me (I've reverted to 10.3 and it works fine) whether or not GSSAPIKeyExchange is enabled. Verbose session attempt from an un-upgraded client: debug1: OpenSSH_10.3p1, OpenSSL 3.0.21 9 Jun 2026 debug3: Running on FreeBSD 14.4-RELEASE-p7 FreeBSD 14.4-RELEASE-p7 #39 releng/14.4-n273746-3827644480bd-dirty: Tue Jun 30 21:15:51 EDT 2026 [redacted] amd64 debug3: Started with: ssh -vvv [redacted] debug1: Reading configuration data /home/wollman/.ssh/config debug3: kex names ok: [diffie-hellman-group1-sha1] debug3: kex names ok: [diffie-hellman-group1-sha1] debug3: kex names ok: [diffie-hellman-group14-sha1] debug1: /home/wollman/.ssh/config line 133: Applying options for * debug1: Reading configuration data /usr/local/etc/ssh/ssh_config debug1: /usr/local/etc/ssh/ssh_config line 29: Applying options for * debug1: /usr/local/etc/ssh/ssh_config line 31: Deprecated option "useroaming" debug2: resolve_addr: could not resolve name [redacted] as address: Name does not resolve debug2: resolve_canonicalize: host [redacted] not found in any suffix debug1: hostname canonicalisation enabled, will re-parse configuration debug1: re-parsing configuration debug1: Reading configuration data /home/wollman/.ssh/config debug2: add_identity_file: ignoring duplicate key ~/.ssh/id_noncsail debug2: add_identity_file: ignoring duplicate key ~/.ssh/id_switches debug3: kex names ok: [diffie-hellman-group1-sha1] debug3: kex names ok: [diffie-hellman-group1-sha1] debug3: kex names ok: [diffie-hellman-group14-sha1] debug1: /home/wollman/.ssh/config line 133: Applying options for * debug1: Reading configuration data /usr/local/etc/ssh/ssh_config debug1: /usr/local/etc/ssh/ssh_config line 29: Applying options for * debug1: /usr/local/etc/ssh/ssh_config line 31: Deprecated option "useroaming" debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/home/wollman/.ssh/known_hosts' debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/home/wollman/.ssh/known_hosts2' debug2: resolving "[redacted]" port 22 debug3: resolve_host: lookup [redacted]:22 debug3: channel_clear_timeouts: clearing debug3: ssh_connect_direct: entering debug1: Connecting to [redacted] [IPv6 address redacted] port 22. debug3: set_sock_tos: set socket 3 IPV6_TCLASS 0xb8 debug1: Connection established. debug1: loaded pubkey from /home/wollman/.ssh/id_noncsail: ED25519 SHA256:Dos69vwonn714PV3klae4UeiWo+urbumj+lBzOInFYA debug1: identity file /home/wollman/.ssh/id_noncsail type 2 debug1: no identity pubkey loaded from /home/wollman/.ssh/id_noncsail debug1: loaded pubkey from /home/wollman/.ssh/id_switches: RSA SHA256:c2hKwTB8XO9kD7j9rmbb4xNsp8THt72DPJk/b3qxYlI debug1: identity file /home/wollman/.ssh/id_switches type 0 debug1: no identity pubkey loaded from /home/wollman/.ssh/id_switches debug1: Local version string SSH-2.0-OpenSSH_10.3 kex_exchange_identification: Connection closed by remote host Connection closed by [IPv6 address redacted] port 22 -- You are receiving this mail because: You are the assignee for the bug.home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-297078-7788>