Arch Linux

neol09

Member

Registered: 2020-02-13

Posts: 13

The ssh breaking change may lock you out of your system

This is probably well known / understood, but not mentioned in the announcement

The last release of openssh is not linked against pam,
breaking configs that utilize 2FA/SSO via pam modules.

I'm aware of the recent disclosures in openssh ( regresshion / xz ) by means of social media,
so this is not a surprise, but still a drastic countermeasure.

edit:
pkgbuild for openssh 9.8p1-1 includes the --with-pem, however i'm getting the following:

$ pacman -Qo $(which sshd)
/usr/bin/sshd is owned by openssh 9.8p1-1

$ ldd /usr/bin/sshd
        linux-vdso.so.1 (0x00007fff423fe000)
        libcrypto.so.3 => /usr/lib/libcrypto.so.3 (0x00007f083f400000)
        libc.so.6 => /usr/lib/libc.so.6 (0x00007f083f214000)
        /lib64/ld-linux-x86-64.so.2 => /usr/lib64/ld-linux-x86-64.so.2 (0x00007f083fa81000)

Last edited by neol09 (2024-07-02 19:22:39)

cryptearth

Member

Registered: 2024-02-03

Posts: 1,216

Re: The ssh breaking change may lock you out of your system

ldd /usr/lib/ssh/sshd-session

sshd was degraded to a small fork-bomb

neol09

Member

Registered: 2020-02-13

Posts: 13

Re: The ssh breaking change may lock you out of your system

explains it, thank you

tried the setup again this evening and finally worked,
must have been human error, sorry for jumping to conclusions...