summary: SSH 2.0.11 apparently doesn't have key-derivation bug class: bug: This is clearly an actual problem we want fixed. difficulty: fun: Just needs tuits, and not many of them. priority: medium: This should be fixed one day. present-in: 0.53 2002-10-07 0.53b 2003-02-14 fixed-in: 2003-02-19 2bb23257f213413feaa92edfed5f5c5b8dc669dd (0.54)
Apparently, while PuTTY believes that SSH 2.0.1[01]* have the SSH-2
key-derivation bug, 2.0.11 on Solaris/SPARC 2.5.1 doesn't, and this causes
the expected decryption failures. The current OpenSSH code suggests that
the bug is only present in versions before SSH 2.0.11. It looks
like the
fix
for
ssh2-keyderive-nonbug
had an off-by-one error.
