[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#528322: closed by Filipus Klutiero <chealer@gmail.com> (Re: Bug#528322: Versions?)



reopen 528322
reassign 528322 openssh-server
found 1:5.1p1-5
thanks

DBTS> openssh-server 1:5.1p1-5 does not depend on libk5crypto3.
DBTS> Closing as invalid.

Don't thoughtless close the bug. This event happened on the May 12.
Now I cannot exactly say what version of openssh was. But I exactly
remember that openssh complained the library absent.

Of course, depend-report of 'apt-cache depends' confused me, but this
bug hasn't dreamed to me. :)

Now i have tested removing libk5crypto3, ssh doesn't work without
this library:

home.uvw.ru:[/home/dimka]# export LANG=C
home.uvw.ru:[/home/dimka]# zcat /usr/share/doc/openssh-server/changelog.Debian.gz|dpkg-parsechangelog -l-
Source: openssh
Version: 1:5.1p1-5
Distribution: unstable
Urgency: low
Maintainer: Colin Watson <cjwatson@debian.org>
Date: Wed, 14 Jan 2009 00:34:08 +0000
Closes: 502444
Changes: 
 openssh (1:5.1p1-5) unstable; urgency=low
 .
   * Backport from upstream CVS (Markus Friedl):
     - packet_disconnect() on padding error, too. Should reduce the success
       probability for the CPNI-957037 Plaintext Recovery Attack to 2^-18.
   * Check that /var/run/sshd.pid exists and that the process ID listed there
     corresponds to sshd before running '/etc/init.d/ssh reload' from if-up
     script; SIGHUP is racy if called at boot before sshd has a chance to
     install its signal handler, but fortunately the pid file is written
     after that which lets us avoid the race (closes: #502444).
   * While the above is a valuable sanity-check, it turns out that it doesn't
     really fix the bug (thanks to Kevin Price for testing), so for the
     meantime we'll just use '/etc/init.d/ssh restart', even though it is
     unfortunately heavyweight.
home.uvw.ru:[/home/dimka]# apt-get remove libk5crypto3
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages were automatically installed and are no longer required:
  libkrb5support0
Use 'apt-get autoremove' to remove them.
The following packages will be REMOVED:
  libk5crypto3
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 266kB disk space will be freed.
Do you want to continue [Y/n]? 
(Reading database ... 51926 files and directories currently installed.)
Removing libk5crypto3 ...

home.uvw.ru:[/home/dimka]# invoke-rc.d ssh stop
home.uvw.ru:[/home/dimka]# invoke-rc.d ssh start

************************************************************
***** In this point I have no ssh server :(
************************************************************

home.uvw.ru:[/home/dimka]# /usr/sbin/sshd -\?
/usr/sbin/sshd: error while loading shared libraries: libk5crypto.so.3: cannot open shared object file: No such file or directory
home.uvw.ru:[/home/dimka]# apt-get install libk5crypto3
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Suggested packages:
  krb5-doc krb5-user
The following NEW packages will be installed:
  libk5crypto3
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0B/104kB of archives.
After this operation, 266kB of additional disk space will be used.
Selecting previously deselected package libk5crypto3.
(Reading database ... 51920 files and directories currently installed.)
Unpacking libk5crypto3 (from .../libk5crypto3_1.7dfsg~beta3-1_i386.deb) ...
Setting up libk5crypto3 (1.7dfsg~beta3-1) ...
home.uvw.ru:[/home/dimka]# /usr/sbin/sshd -\?
sshd: illegal option -- ?
OpenSSH_5.1p1 Debian-5, OpenSSL 0.9.8g 19 Oct 2007
usage: sshd [-46DdeiqTt] [-b bits] [-C connection_spec] [-f config_file]
            [-g login_grace_time] [-h host_key_file] [-k key_gen_time]
            [-o option] [-p port] [-u len]


So, it is a bug in openssh-server. I'll reopen and reassign.


--
... mpd is off

. ''`.                               Dmitry E. Oboukhov
: :’  :   email: unera@debian.org jabber://UNera@uvw.ru
`. `~’              GPGKey: 1024D / F8E26537 2006-11-21
  `- 1B23 D4F8 8EC0 D902 0555  E438 AB8C 00CF F8E2 6537

Attachment: signature.asc
Description: Digital signature


Reply to: