Hi Seyeong,

Yeap, I checked the latest upstream master branch and confirmed the same
behavior in auth-options.c. When untrusted=1, sshauthopt_serialise() was
unconditionally serializing "true" for force_command even if the option
was NULL.

I submitted the upstream pull request with the fix here:
https://github.com/openssh/openssh-portable/pull/712

The PR ensures "true" and "yes" are only serialized when the
corresponding field in sshauthopt is actually non-NULL.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2166842

Title:
  sshd: fatal "monitor_child_preauth: unexpected authentication from
  102" breaks root public-key login with PermitRootLogin=forced-
  commands-only + UsePAM=yes (regression in 1:9.6p1-3ubuntu13.18)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2166842/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to