Bug#1013451: openssh-client: double free or corruption

Chris Hofstaedtler <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <20220728004210.n25otknjymq5dqlb__45822.2022907407$1658969128$gmane$org@percival.namespace.at>
Control: reassign -1 libssl3
Control: affects -1 openssh-client

* Antonio <[email protected]>:
[..]
> #6 0x00007ffff7b2bd2cin ??() from /usr/lib/x86_64-linux-gnu/libcrypto.so.3
> #7 0x00007ffff7b1858ein BN_mod_exp_mont_consttime_x2() from
> /usr/lib/x86_64-linux-gnu/libcrypto.so.3
> #8 0x00007ffff7c77b6din ??() from /usr/lib/x86_64-linux-gnu/libcrypto.so.3
> #9 0x00007ffff7c79010in ??() from /usr/lib/x86_64-linux-gnu/libcrypto.so.3
> #10 0x00007ffff7c7d0d1in RSA_sign() from
> /usr/lib/x86_64-linux-gnu/libcrypto.so.3
> #11 0x00005555555d6ee0in ssh_rsa_sign(key=key@entry=0x5555556c89e0,
> sigp=sigp@entry=0x7fffffffc3c0,
> lenp=lenp@entry=0x7fffffffc3c8, data=data@entry=0x5555556b6e70 "",
> datalen=<optimized out>,
> alg_ident=alg_ident@entry=0x5555556b2da0 "rsa-sha2-512") at
> ../../ssh-rsa.c:206
[..]

* Andreas Tille <[email protected]>:
>   2022-06-23 10:54:50 status installed libssl3:amd64 3.0.4-1


Might have been https://github.com/openssl/openssl/issues/18625 ?
Reassigning to libssl3 so the OpenSSL maintainers can make a
decision about this bug.

Chris
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.