Thank you for the detailed test case, rationale and security-team review of the patches! I have accepted those into bionic-proposed and added, for the time being, a block-proposed-bionic tag. I am still not sure about the severity of this bug.
As I don't work on the openssh package, I'd like to leave the decision to the Server and Security teams. Are there any other changes scheduled to be released shortly? Do you think it's worth releasing to -updates even now? From the SRU perspective I'm +0, since it always is a concern that many users will get the update, but on the other hand if a certain set of users is broken, medium prio bugs are also good to fix. If it's decided that we want it, please remove the block tag. ** Tags added: block-proposed-bionic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1863930 Title: SSH 1.99 clients fail to connect to openssh-server 1:7.6p1-4ubuntu0.3 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1863930/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
