[Bug 1792231] Re: openssh-client: 'DISPLAY "(null)" invalid; disabling X11 forwarding'

 Christian Ehrhardt  1792231 at bugs.launchpad.net
Thu Sep 13 13:31:05 UTC 2018


Broken since security update on Thu, 05 May 2016
Fixed in Debian in openssh/1:6.7p1-5+deb8u7
Per the Debian bug they were affected as well re-using our CVE fixes in Debian.

I think we can use the changes taken for openssh/1:6.7p1-5+deb8u7 when they are visible.
Right now I don't see more yet, so it waits to be released there.

The fix looks rather trivial (thanks for linking) and we should take a
look at this soon.

** Changed in: openssh (Ubuntu)
       Status: New => Triaged

** Tags added: server-next

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1792231

Title:
  openssh-client: 'DISPLAY "(null)" invalid; disabling X11 forwarding'

Status in openssh package in Ubuntu:
  Triaged
Status in openssh package in Debian:
  Unknown

Bug description:
   affects ubuntu/openssh

  Hi,

  This bug is present in openssh in ubuntu trusty, I haven't tested other
  releases. When X11 forwarding is enabled (via ssh_config, or via -X),
  but no DISPLAY is available, ssh client produces this warning:

  DISPLAY "(null)" invalid; disabling X11 forwarding

  
  root at ubuntu-trusty:/# unset DISPLAY ; ssh -X ubuntu at localhost 'dpkg -l openssh-client | grep ii'
  ubuntu at localhost's password: 
  DISPLAY "(null)" invalid; disabling X11 forwarding
  ii  openssh-client                  1:6.6p1-2ubuntu2.10                        amd64        secure shell (SSH) client, for secure access to remote machines

  The bug was introduced by the changes to fix CVE-2016-1908.
  This upstream change fixes it:

  https://anongit.mindrot.org/openssh.git/commit/?id=5658ef2501e785fbbdf5de2dc33b1ff7a4dca73a

  See https://bugs.debian.org/908652

  Cheers,

   -- S

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1792231/+subscriptions



More information about the foundations-bugs mailing list