ssh fails with xmalloc: zero size

Bug #277704 reported by Jeff Hanson
2
Affects Status Importance Assigned to Milestone
openssh (Debian)
Fix Released
Unknown
openssh (Ubuntu)
Fix Released
Undecided
Colin Watson

Bug Description

The latest openssh client in Intrepid (1:5.1p1-1ubuntu2) fails to connect to certain hosts such as HP ProCurve switches and dd-wrt routers. Attempting to connect to one of these systems (and possible other system types) results in the following error:

$ ssh <email address hidden>
xmalloc: zero size
$

This is a known bug that has been fixed upstream:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497026

The fix is in 5.1p1-3 (see the above bug report.)

Would it be possible to get this update in for Intrepid? Currently the only workaround is to downgrade to 4.7p1-8ubuntu1

Changed in openssh:
status: Unknown → Fix Released
Revision history for this message
Colin Watson (cjwatson) wrote :

Indeed, done:

openssh (1:5.1p1-3ubuntu1) intrepid; urgency=low

  * Resynchronise with Debian. Remaining changes:
    - Add support for registering ConsoleKit sessions on login.
    - Drop openssh-blacklist and openssh-blacklist-extra to Suggests; they
      take up a lot of CD space, and I suspect that rolling them out in
      security updates has covered most affected systems now.
    - Add ufw integration.

 -- Colin Watson <email address hidden> Mon, 13 Oct 2008 19:40:53 +0100

openssh (1:5.1p1-3) unstable; urgency=low

  * Remove unnecessary ssh-vulnkey output in non-verbose mode when no
    compromised or unknown keys were found (closes: #496495).
  * Configure with --disable-strip; dh_strip will deal with stripping
    binaries and will honour DEB_BUILD_OPTIONS (thanks, Bernhard R. Link;
    closes: #498681).
  * Fix handling of zero-length server banners (thanks, Tomas Mraz; closes:
    #497026).

 -- Colin Watson <email address hidden> Tue, 30 Sep 2008 23:09:58 +0100

Changed in openssh:
assignee: nobody → kamion
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.