Package: openssh-client-ssh1
Version: 1:7.5p1-16
Severity: grave
X-Debbugs-Cc: acct.deb...@tmcl.it

Any attempt to use ssh1 fails with:

"OpenSSL version mismatch. Built against 30100050, you have 30200020"

It looks like the cause is an runtime check of the OpenSSL version, which
requires that major and minor version are the same as those OpenSSH was
compiled against. This was appropriate for OpenSSL 1, but not for OpenSSL 3,
for which only checking the major version is enough to guarantee binary
compatibility.

This was fixed upstream in recent OpenSSH versions [1]. Could you please
backport it to ssh1?

Thanks,
Tommaso

[1] https://bugzilla.mindrot.org/show_bug.cgi?id=3548


-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.7.9-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssh-client-ssh1 depends on:
ii  libc6        2.37-18
ii  libselinux1  3.5-2+b2
ii  libssl3t64   3.2.1-3
ii  zlib1g       1:1.3.dfsg-3.1

openssh-client-ssh1 recommends no packages.

openssh-client-ssh1 suggests no packages.

-- no debconf information

Reply via email to