From nobody Mon Jul 27 03:50:14 2026 X-Original-To: ports-bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4h7l3q5679z6mSwP for ; Mon, 27 Jul 2026 03:50:15 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4h7l3q2WcWz3jkH for ; Mon, 27 Jul 2026 03:50:15 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785124215; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=qxi0sBiNyr0bvq92H6wsY5ZGO1wZdBz88Qt1j495vCU=; b=ijh9858dJYjAbs5dm9W3w5AIE4iYJqCiv/9+V27tIB/XPN5EUOP4zq9Zje47KV+o/Fag0k EtqoOxXl4pnhBsYIrDH2HGOYPyHAU3WuG4LmOHeDHXWip/4CyvZ4jS6azXLb/aC+8xo2Lr H7J9QTRIcnQDlfH+3lAxTSgmdhJz20kPyl1XFiPKuiuW/cQWKiKfc3tugIwmN+IPHmZ8uG nzK2uPaeDsOhO8e02Q/o1G/mPQf5+6Lq7UCeqB6B6gDMORBh9CTLZI+Y1Imiz+5dTSt4Eo mLkApcJF6TAEBSyQfU4FHaZsWhJoyedRF3Iv/oLRt55CAaKRLY4dql57FDXZjA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785124215; a=rsa-sha256; cv=none; b=RGzFm02RHm76X/c7jpLaKAx0MABMBry7XRqIGTj7VY1XlQFniYSnq6X9on6RE89HLY48JQ 73uLv6kPnqmFfJhiIYS5TwSnEkZOFP9+Tx4Lgg4g+sMBlKvDrvWQdYYAv3xMeCdUOmBGIf 6twM7azr/IexcFyyZFfrcYdoDRYHgBhudHp4he7uZ6ywK/kMV8GMRHWdadFq+xeOjT6nOR K8ElegudGblfCXHdSuqoNcC+p+LqSnGwIMbi5FzNPNFEiPlPn5GllUQiLVfTglfbvDBMON lXEfPEOVj3C/4Q8iPUx0DnJTjKsav3U+3PP8+nIUstX18O+e8t1iYCtJaHf5iQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785124215; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=qxi0sBiNyr0bvq92H6wsY5ZGO1wZdBz88Qt1j495vCU=; b=tcwwBtkrtBmI/W5JVHlAH9Bgiksbk6JIpOSY/z7Ej1yeijgznL3svUBrPi0mvTZssW6MC7 kcja5Ml/YftOGoT2MKSHDXZxkMmhDahPWiXjX4NVyXoEs/31GqwM1seUVEgBHJlhQCDg3r ReENdZbdacQY/ZEKI/Zm3K+0bAIO77MIWcV3l7wRF9zPf1CJ6+g8CHvNkJOaQRP01hrEpU PdSrx1OVOi4ZmIVQnJSAFTpMAyw3Mgwl1bB1KSN303orjnueLQc2jar6bV9nlfbcwpl5CG 4rqWZ5T/2ZaJy4FwKhw30ldeRGtr6Pnv/m3gQQhe6UuLCwLf8D5B9+Vjil/RPg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4h7l3q1H2xzs72 for ; Mon, 27 Jul 2026 03:50:15 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 66R3oFL5049021 for ; Mon, 27 Jul 2026 03:50:15 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 66R3oFXM049020 for ports-bugs@FreeBSD.org; Mon, 27 Jul 2026 03:50:15 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 297078] security/openssh-portable: key exchange crash Date: Mon, 27 Jul 2026 03:50:14 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: wollman@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bdrewery@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter flagtypes.name attachments.mimetype attachments.created Message-ID: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Ports bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-ports-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-ports-bugs@freebsd.org Sender: owner-freebsd-ports-bugs@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297078 Bug ID: 297078 Summary: security/openssh-portable: key exchange crash Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: bdrewery@FreeBSD.org Reporter: wollman@FreeBSD.org Assignee: bdrewery@FreeBSD.org Flags: maintainer-feedback?(bdrewery@FreeBSD.org) Attachment #273207 text/plain mime type: Created attachment 273207 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D273207&action= =3Dedit build log from 10.4 The 10.4 update causes an immediate server-side connection close for me (I'= ve reverted to 10.3 and it works fine) whether or not GSSAPIKeyExchange is enabled. Verbose session attempt from an un-upgraded client: debug1: OpenSSH_10.3p1, OpenSSL 3.0.21 9 Jun 2026 debug3: Running on FreeBSD 14.4-RELEASE-p7 FreeBSD 14.4-RELEASE-p7 #39 releng/14.4-n273746-3827644480bd-dirty: Tue Jun 30 21:15:51 EDT 2026=20=20= =20=20 [redacted] amd64 debug3: Started with: ssh -vvv [redacted] debug1: Reading configuration data /home/wollman/.ssh/config debug3: kex names ok: [diffie-hellman-group1-sha1] debug3: kex names ok: [diffie-hellman-group1-sha1] debug3: kex names ok: [diffie-hellman-group14-sha1] debug1: /home/wollman/.ssh/config line 133: Applying options for * debug1: Reading configuration data /usr/local/etc/ssh/ssh_config debug1: /usr/local/etc/ssh/ssh_config line 29: Applying options for * debug1: /usr/local/etc/ssh/ssh_config line 31: Deprecated option "useroamin= g" debug2: resolve_addr: could not resolve name [redacted] as address: Name do= es not resolve debug2: resolve_canonicalize: host [redacted] not found in any suffix debug1: hostname canonicalisation enabled, will re-parse configuration debug1: re-parsing configuration debug1: Reading configuration data /home/wollman/.ssh/config debug2: add_identity_file: ignoring duplicate key ~/.ssh/id_noncsail debug2: add_identity_file: ignoring duplicate key ~/.ssh/id_switches debug3: kex names ok: [diffie-hellman-group1-sha1] debug3: kex names ok: [diffie-hellman-group1-sha1] debug3: kex names ok: [diffie-hellman-group14-sha1] debug1: /home/wollman/.ssh/config line 133: Applying options for * debug1: Reading configuration data /usr/local/etc/ssh/ssh_config debug1: /usr/local/etc/ssh/ssh_config line 29: Applying options for * debug1: /usr/local/etc/ssh/ssh_config line 31: Deprecated option "useroamin= g" debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/home/wollman/.ssh/known_hosts' debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/home/wollman/.ssh/known_hosts2' debug2: resolving "[redacted]" port 22 debug3: resolve_host: lookup [redacted]:22 debug3: channel_clear_timeouts: clearing debug3: ssh_connect_direct: entering debug1: Connecting to [redacted] [IPv6 address redacted] port 22. debug3: set_sock_tos: set socket 3 IPV6_TCLASS 0xb8 debug1: Connection established. debug1: loaded pubkey from /home/wollman/.ssh/id_noncsail: ED25519 SHA256:Dos69vwonn714PV3klae4UeiWo+urbumj+lBzOInFYA debug1: identity file /home/wollman/.ssh/id_noncsail type 2 debug1: no identity pubkey loaded from /home/wollman/.ssh/id_noncsail debug1: loaded pubkey from /home/wollman/.ssh/id_switches: RSA SHA256:c2hKwTB8XO9kD7j9rmbb4xNsp8THt72DPJk/b3qxYlI debug1: identity file /home/wollman/.ssh/id_switches type 0 debug1: no identity pubkey loaded from /home/wollman/.ssh/id_switches debug1: Local version string SSH-2.0-OpenSSH_10.3 kex_exchange_identification: Connection closed by remote host Connection closed by [IPv6 address redacted] port 22 --=20 You are receiving this mail because: You are the assignee for the bug.=