Package: libssh-4
Version: 0.9.3-2
Severity: important
Tags: upstream

Dear Maintainer,

   * What led up to the situation?
    I have a custom ssh_config [1] that defines a not default ssh port.
When using tmate. Tmate cannot connect to ssh.tmate.io because libssh
version 9 I think doesn't parse correctly the ssh_config, it tries to use
the non default port instead of the port defined for *.io. In [2] I explain
how to reproduce the problem.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
     Comment the ssh port option in ~/.ssh/config
     Downgrade libssh to last stable version

   * What was the outcome of this action?
      Tmate worked

   * What outcome did you expect instead?
      That tmate using libssh-4 V9 worked



-- System Information:
Debian Release: 10.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.2.0-3-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages libssh-4 depends on:
ii  libc6             2.28-10
ii  libgssapi-krb5-2  1.17-3
ii  libssl1.1         1.1.1d-0+deb10u2
ii  zlib1g            1:1.2.11.dfsg-1

libssh-4 recommends no packages.

libssh-4 suggests no packages.

-- no debconf information

[1] example ~/.ssh/config

Host *.io
    Port 22

Host ssh.tmate.io
    Port 22

Host *
    Port 1111

[2] How to reproduce using docker so you don't pollute your machine.

# docker run --rm -ti debian:buster-slim bash # this will get you in a
container
# cd
# cat - >> /etc/apt/sources.list << END
> deb-src http://deb.debian.org/debian buster main
> deb-src http://security.debian.org/debian-security buster/updates main
> deb-src http://deb.debian.org/debian buster-updates main
> END
# apt-get update
# apt-get install -y git wget
# apt-get build-dep -y tmate
# mkdir ~/.ssh
# cat - > ~/.ssh/config << END
> Host ssh.tmate.io
>    Port 22
>
> Host *
>    Port 1111
> END
# git clone https://github.com/tmate-io/tmate.git
# cd tmate/
# git checkout 2.4.0
# ./autogen.sh
# ./configure --enable-debug
# make
# ./tmate -F # This works
To connect to the session locally, run: tmate -S /tmp/tmate-0/oSLG0w attach
Connecting to ssh.tmate.io...
web session read only: https://tmate.io/t/ro-8B3p4kSE5Qz7U58Dmze4Meg5Q
ssh session read only: ssh ro-8b3p4kse5qz7u58dmze4me...@lon1.tmate.io
web session: https://tmate.io/t/fzT2NfyY673DQ4PvsdMwLpSdE
ssh session: ssh fzt2nfyy673dq4pvsdmwlp...@lon1.tmate.io
# ldd ./tmate | grep libssh
   libssh.so.4 => /usr/lib/x86_64-linux-gnu/libssh.so.4 (0x00007f8779e00000)
# dpkg -l | grep libssh-4
ii  libssh-4:amd64                   0.8.7-1                     amd64
   tiny C SSH library (OpenSSL flavor)
# apt-get purge -y libssh-4
# wget "
http://ftp.us.debian.org/debian/pool/main/libs/libssh/libssh-4_0.9.3-2_amd64.deb
"
# dpkg -i libssh-4_0.9.3-2_amd64.deb
# ./tmate -F # this doesn't work
./tmate -F
To connect to the session locally, run: tmate -S /tmp/tmate-0/OpKj7B attach
Connecting to ssh.tmate.io...
Error connecting: Connection refused
Reconnecting...
Connecting to ssh.tmate.io...
Error connecting: Connection refused
Reconnecting...

-- 

Cheers

Alejandro Brito Monedero
Responsable: ALEA SOLUCIONES, S.L.; Dirección: Av de la Albufera, 321, 5ª
planta, 28031, Madrid; Teléfono: +34 91 187 9000; E-Mail:
r...@alea-soluciones.com

En ALEA SOLUCIONES, S.L. tratamos su dirección de correo electrónico, así
como el resto de la información y datos personales que nos facilite, con la
finalidad de llevar a cabo la gestión y el archivo de las comunicaciones y
sus adjuntos por motivos de seguridad, la inclusión de los datos en la
agenda de contactos y el envío de comunicaciones profesiones por vía
electrónica. Los datos proporcionados se conservarán mientras se mantenga
la relación comercial. Los datos no se cederán a terceros salvo en los
casos en que exista una obligación legal. Usted tiene derecho a obtener
confirmación sobre si en ALEA SOLUCIONES, S.L. estamos tratando sus datos
personales por tanto tiene derecho a acceder a sus datos personales,
rectificar los datos inexactos o solicitar su supresión cuando los datos ya
no sean necesarios. Asimismo, podrá oponerse al tratamiento de sus datos,
solicitar la limitación al tratamiento y la portabilidad de sus datos.  Si
considera que sus datos personales no han sido tratados conforme a la
normativa, puede contactar con r...@alea-soluciones.com. Igualmente podrá
presentar una reclamación ante la Agencia Española de Protección de Datos,
especialmente cuando no haya obtenido la satisfacción en el ejercicio de
sus derechos, a través de la sede electrónica en www.aepd.es.

-- o --

Controller: ALEA SOLUCIONES, S.L.; Address: Av de la Albufera, 321, 5th
Floor, 28031, Madrid; telephone: +34 91 187 9000; e-mail:
r...@alea-soluciones.com

At ALEA SOLUCIONES, S.L. we manage your e-mail address and all other
personal data provided, for the handling and storage of your communications
and attachments for security, the inclusion of data in a contacts database
and sending professional or commercial information via e-mail. The data
provided will be stored for the duration of the commercial relationship.
Data will not be disclosed to third parties except where there is a legal
obligation to do so. You have the right to obtain confirmation from ALEA
SOLUCIONES, S.L. that we are handling your personal data and therefore have
the right to access your data and rectify any inaccuracies or request the
suppression of data that is no longer required. Furthermore, you have the
right to oppose the handling of your data, request limitations to data
management and data portability. If you consider that your personal data
has not be managed in accordance with applicable legal regulations, you may
contact r...@alea-soluciones.com. Additionally, if you are dissatisfied
with the exercise of your rights, you have the right to file a claim with
the Spanish Data Protection Agency, through their website: www.aepd.es.

Reply via email to