[Bug 1313865] Re: Need to update 6.6p1 to 6.6.1p1

[Robie Basak]

*** This bug is a duplicate of bug 1310781 ***
    https://bugs.launchpad.net/bugs/1310781

Thank you for taking the time to report this bug and helping to make
Ubuntu better.

> Debian has updated sid to 6.6.1p1, and that should copy over to jessie
soon.

I only see 1:6.6p1-4, but this does include:

  * Apply upstream-recommended patch to fix bignum encoding for
    curve25519-sha256 at libssh.org, fixing occasional key exchange failures.

If this is the patch for which you filed this bug, then we should rename
this bug accordingly, since as far as I can tell 6.6.1p1 hasn't been
released yet, and this is confusing. It sounds like the patch itself can
be cherry-picked to Trusty.

I see 1:6.6p1-4 in utopic-proposed, so the fix should hit Utopic soon.

I see a patch here, which we can cherry-pick to Trusty:
http://sources.debian.net/src/openssh/1:6.6p1-4/debian/patches/curve25519-sha256
-bignum-encoding.patch

** Summary changed:

- Need to update 6.6p1 to 6.6.1p1
+ Bad bignum encoding for curve25519-sha256 at libssh.org

** Changed in: openssh (Ubuntu)
       Status: New => Triaged

** Changed in: openssh (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1313865

Title:
  Bad bignum encoding for curve25519-sha256 at libssh.org

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1313865/+subscriptions