[Bug 1313865] [NEW] Need to update 6.6p1 to 6.6.1p1

[James Cloos]

Public bug reported:

A patch for 6.6p1 was posted on the openssh list fixing a bug in the
25519 negotiation and changing the reported version to 6.6.1p1.

Future versions of openssh, version 6.6.1p1 itself, and other ssh
software, such as libssh, will refuse to speak 25519 to anything which
identifies itself as openssh 6.6p1or 6.5p1.

The patch was posted for the express purpose of providing an easy update
for 6.6p1 to avoid this bug.

Debian has updated sid to 6.6.1p1, and that should copy over to jessie
soon.  You can see their git for the details.

Both utopic and trusty should get this update quickly.  And in trusty
itself, not just -updates or -backports; notwithstanding the edit to the
reported version it is a bug fix for 6.6p1.

Any backports or updates repos which have 6.6p1 also should get the
update to 6.6.1p1.

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1313865

Title:
  Need to update 6.6p1 to 6.6.1p1

Status in “openssh” package in Ubuntu:
  New

Bug description:
  A patch for 6.6p1 was posted on the openssh list fixing a bug in the
  25519 negotiation and changing the reported version to 6.6.1p1.

  Future versions of openssh, version 6.6.1p1 itself, and other ssh
  software, such as libssh, will refuse to speak 25519 to anything which
  identifies itself as openssh 6.6p1or 6.5p1.

  The patch was posted for the express purpose of providing an easy
  update for 6.6p1 to avoid this bug.

  Debian has updated sid to 6.6.1p1, and that should copy over to jessie
  soon.  You can see their git for the details.

  Both utopic and trusty should get this update quickly.  And in trusty
  itself, not just -updates or -backports; notwithstanding the edit to
  the reported version it is a bug fix for 6.6p1.

  Any backports or updates repos which have 6.6p1 also should get the
  update to 6.6.1p1.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1313865/+subscriptions