• Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • rhel-10.0
    • rhel-10.0
    • openssh
    • openssh-9.9p1-5.el10.1
    • No
    • Moderate
    • 1
    • rhel-sst-security-crypto
    • ssg_security
    • 23
    • 25
    • 0.5
    • False
    • Hide

      None

      Show
      None
    • No
    • Crypto25Q1
    • Hide

      AC Sanity only: Upstream patch is correctly applied and present in compose

      Show
      AC Sanity only: Upstream patch is correctly applied and present in compose
    • Pass
    • Not Needed
    • RegressionOnly
    • Release Note Not Required
    • None

      Originally raised for https://bugzilla.redhat.com/show_bug.cgi?id=2341769

      After the update today to openssh-9.9p1-1.fc41.x86_64 and openssh-clients-0:9.9p1-1.fc41.x86_64, I'm seeing the following messages relating to my ~/.ssh/config file:

      Unsupported Match attribute localnetwork=192.168.86.0/24,fe80::/96
      /home/<redacted>/.ssh/config line 74: Bad Match condition
      Unsupported Match attribute originalhost=dragvoll.trondhjem.org
      /home/<redacted>/.ssh/config line 78: Bad Match condition
      ...
      Unsupported Match attribute originalhost=.local,.lan,dragvoll
      /home/<redacted>/.ssh/config line 98: Bad Match condition
      ...
      /home/<redacted>/.ssh/config line 108: Bad Match condition
      /home/<redacted>/.ssh/config: terminating, 13 bad configuration options

      Reproducible: Always

      Steps to Reproduce:
      1.Add the following line to ~/.ssh/config

      Match !localnetwork=192.168.86.0/24,fe80::/96 originalhost=dragvoll final
      IdentitiesOnly yes

      2. Try to ssh to any destination
      Actual Results:
      See above error message.

      Expected Results:
      The ssh should have succeeded, and indeed there was no problem with openssh-0:9.8p1-3.fc41.2.x86_64.

      Both 'localnetwork' and 'originalhost' are still documented in the ssh_config manpage as being supported attributes for the 'match' condition.

              dbelyavs@redhat.com Dmitry Belyavskiy
              dbelyavs@redhat.com Dmitry Belyavskiy
              Dmitry Belyavskiy Dmitry Belyavskiy
              Miluse Bezo Konecna Miluse Bezo Konecna
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: