[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#75008: marked as done (ssh2: -i is always relative to $HOME/.ssh2)



Your message dated Sun, 16 Dec 2001 20:53:21 +0100
with message-id <E16FhLd-0001Gw-00@pandora.debian.org>
and subject line Bug#75008: fixed in ssh2 2.0.13-7
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 18 Oct 2000 01:42:52 +0000
>From bcwhite@precidia.com Tue Oct 17 20:42:52 2000
Return-path: <bcwhite@precidia.com>
Received: from mx1.magmacom.com [::ffff:206.191.0.217] 
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 13liFn-0001LQ-00; Tue, 17 Oct 2000 20:42:52 -0500
Received: from mail6.magma.ca (mail6 [206.191.0.248])
	by mx1.magmacom.com (8.9.3/8.9.3) with ESMTP id VAA16125
	for <submit@bugs.debian.org>; Tue, 17 Oct 2000 21:42:50 -0400 (EDT)
Received: from gatekeeper.precidia.com (gatekeeper.precidia.com [209.217.122.127])
	by mail6.magma.ca (8.9.3/8.9.3) with ESMTP id VAA11318
	for <submit@bugs.debian.org>; Tue, 17 Oct 2000 21:42:49 -0400 (EDT)
Received: from tolkien.ott.precidia.com [10.0.1.2] (mail)
	by gatekeeper.precidia.com with esmtp (Exim 3.12 #1 (Debian))
	id 13lfR0-0004QX-00; Tue, 17 Oct 2000 18:42:14 -0400
Received: from (precidia.com) [10.0.2.82] 
	by tolkien.ott.precidia.com with esmtp (Exim 3.12 #1 (Debian))
	id 13lfQy-0001ne-00; Tue, 17 Oct 2000 18:42:12 -0400
Message-ID: <39ECD5B6.14690C1E@precidia.com>
Date: Tue, 17 Oct 2000 18:41:58 -0400
From: Brian White <bcwhite@precidia.com>
Organization: Precidia Technologies  http://www.precidia.com/
X-Mailer: Mozilla 4.7 [en] (Win98; I)
X-Accept-Language: en
MIME-Version: 1.0
To: Debian Bugs <submit@bugs.debian.org>
Subject: ssh2: -i is always relative to $HOME/.ssh2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Delivered-To: submit@bugs.debian.org

Package: ssh2
Version: 2.0.13-5.1

When using the "-i" option to ssh, it always assume the path is relative
to the ~/.ssh2 directory even if the parameter begins with a slash.  There
is no security advantage to this and it makes its use difficult under
some circumstances.

>From strace:

[pid  6826] execve("/usr/local/sbin/ssh", ["ssh", "-l", "uucp", "-i", "/var/spool/uucp/.ssh2/id_dsa_
102"..., "tolkien", "rsync", "--server", ".", "/tmp/"], [/* 32 vars */]) = -1 ENOENT (No such file o
r directory)
[...]
[pid  6826] open("/root/.ssh2//var/spool/uucp/.ssh2/id_dsa_1024_a", O_RDONLY) = -1 ENOENT (No such f
ile or directory)

                                          Brian
                                 ( bcwhite@precidia.com )

-------------------------------------------------------------------------------
 It's the weak who are cruel. Gentleness can only be expected from the strong.

---------------------------------------
Received: (at 75008-close) by bugs.debian.org; 16 Dec 2001 20:08:41 +0000
>From troup@pandora.debian.org Sun Dec 16 14:08:41 2001
Return-path: <troup@pandora.debian.org>
Received: from pandora.debian.org [132.229.137.249] (mail)
	by master.debian.org with esmtp (Exim 3.12 1 (Debian))
	id 16FhaT-0000I0-00; Sun, 16 Dec 2001 14:08:41 -0600
Received: from troup by pandora.debian.org with local (Exim 3.12 1 (Debian))
	id 16FhLd-0001Gw-00; Sun, 16 Dec 2001 20:53:21 +0100
From: Colin Watson <cjwatson@debian.org>
To: 75008-close@bugs.debian.org
X-Katie: $Revision: 1.67 $
Subject: Bug#75008: fixed in ssh2 2.0.13-7
Message-Id: <E16FhLd-0001Gw-00@pandora.debian.org>
Sender: James Troup <troup@pandora.debian.org>
Date: Sun, 16 Dec 2001 20:53:21 +0100
Delivered-To: 75008-close@bugs.debian.org

We believe that the bug you reported is fixed in the latest version of
ssh2, which has been installed in the Debian FTP archive:

ssh2_2.0.13-7.diff.gz
  to pool/non-US/non-free/s/ssh2/ssh2_2.0.13-7.diff.gz
ssh2_2.0.13-7.dsc
  to pool/non-US/non-free/s/ssh2/ssh2_2.0.13-7.dsc
ssh2_2.0.13-7_i386.deb
  to pool/non-US/non-free/s/ssh2/ssh2_2.0.13-7_i386.deb
ssh2_2.0.13-7_sparc.deb
  to pool/non-US/non-free/s/ssh2/ssh2_2.0.13-7_sparc.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 75008@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Colin Watson <cjwatson@debian.org> (supplier of updated ssh2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 15 Dec 2001 12:43:25 +0000
Source: ssh2
Binary: ssh2
Architecture: source i386 sparc
Version: 2.0.13-7
Distribution: unstable
Urgency: low
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Colin Watson <cjwatson@debian.org>
Description: 
 ssh2       - a secure replacement for rlogin, rsh, and rcp
Closes: 38895 38921 51993 58855 60912 75008
Changes: 
 ssh2 (2.0.13-7) unstable; urgency=low
 .
   * QA upload.
   * debian/rules: Configure Sshd1Path correctly (closes: #58855).
   * debian/init: Find port from /etc/ssh2/sshd2_config (closes: #60912).
   * apps/ssh/sshunixuserfiles.c: Treat absolute paths given to -i as
     absolute rather than relative to $HOME/.ssh2 (closes: #75008).
   * debian/postinst: Restart ssh2 rather than starting it, in case it was
     configured differently when the prerm tried to stop it (closes: #51993).
   * debian/postinst: Use alternatives in order to co-operate better with
     ssh-nonfree (closes: #38895, #38921).
Files: 
 891e722c754bd2c8542d26765c4eb383 650 non-US/non-free optional ssh2_2.0.13-7.dsc
 95579867c3a4f90d839ebd4f18ca2cee 50270 non-US/non-free optional ssh2_2.0.13-7.diff.gz
 b0f319fc1250a103bbc05164341dca59 983530 non-US/non-free optional ssh2_2.0.13-7_i386.deb
 a229de90c1a8c718bd516a70a5d8ca23 1072558 non-US/non-free optional ssh2_2.0.13-7_sparc.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8G05T9t0zAhD6TNERAiMZAJ4smMsgDGUVcUEn4SVsbJ7J7J9kgQCcDcaZ
xxhQBqQ5y/xnx5xwGe8nDpY=
=nQw/
-----END PGP SIGNATURE-----



Reply to: