Package: openssh-client
Version: 1:10.0p2-7
Severity: normal

OpenSSH 10.0p2 in Debian Trixie hangs indefinitely on TCP connect()
to any remote host. nc(1) and curl(1) to the same IP:port work
instantly, confirming this is not a network or firewall issue.

Steps to reproduce:
1. ssh -V  ->  OpenSSH_10.0p2 Debian-7+deb13u2, OpenSSL 3.5.5
2. ssh -vT [email protected]
3. Hangs at: "Connecting to ssh.github.com [140.82.121.35] port 443."
4. Must Ctrl-C after ~30-60s. No error message, just timeout.

Expected result: SSH handshake begins immediately (as with nc/curl).
Actual result: connect() syscall never returns; connection stalls.

Evidence:
- nc -vz github.com 22      ->  open (instant)
- nc -vz ssh.github.com 443 ->  open (instant)
- curl -I https://github.com ->  HTTP/2 200 (instant)
- strace -e trace=network ssh -vT [email protected] shows:
  socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 3
  connect(3, {sa_family=AF_INET, sin_port=htons(443),
          sin_addr=inet_addr("140.82.121.35")}, 16)  <-- hangs here

Environment:
- Fresh Debian 13 (Trixie) install, kernel 6.12.88+deb13-amd64
- No local firewall: iptables/nftables empty, no proxy env vars
- No AppArmor denials in dmesg

Workaround:
Adding "ProxyCommand nc -q 0 %h %p" to ~/.ssh/config completely
bypasses the bug, confirming the issue is specifically in OpenSSH's
direct socket creation/connect path, not in the network layer.

Reply via email to