found 777549 openssh/1:6.7p1-3
thank you

Hello!

It looks to me like this issue also exists in the latest version, on sid.

I checked this by grabbing openssh_6.7p1.orig.tar.gz and openssh_6.7p1-3.debian.tar.xz off of packages.debian.org, and then applying gssapi.patch to the source.

I see that the GSSAPI key-exchange algorithms are added to the head of the proposal in sshconnect2.c lines 170-188. Then, on lines 222-223, the client checks to see if any key-exchange algorithms were specified as options; if they were, the existing contents of the proposal get blown away.

I was wondering if the block of code from lines 170-188 could be merged into the "#ifdef GSSAPI" block that exists at lines 227-236. Those lines appear after the key-exchange algorithms proposal gets potentially blown away, so I think it would be safe to change at that point.

I'm sorry that I'm unable to build and test right now, but I don't have any hardware (physical or virtual) that I can test on. If that changes, I'll let you know!

~ Karl


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to