Bug 538646 – net-misc/openssh-6.7_p1: Received disconnect from UNKNOWN: 2: Packet corrupt

• Product: Gentoo Linux
• Status: RESOLVED NEEDINFO

[Description Christoph Löhr 2015-02-03 11:21:22 UTC]

Connect via Proxy to older Host will break after upgrading to 6.7_p1 was working fine until 6.6_p1-r

Reproducible: Always

Steps to Reproduce:
SSH to Solrais 10U8/U11 via proxy with older sshd
SSH to RHEL5/6 via proxy  with older sshd
SSH to Solaris <10 via proxy  with older sshd
Actual Results:  
Received disconnect from UNKNOWN: 2: Packet corrupt


Expected Results:  
Successful connection

OpenSSH_6.7p1-hpn14v5, OpenSSL 1.0.1k 8 Jan 2015
debug1: Reading configuration data /home/$(user)/.ssh/config
debug1: /home/$(user)/.ssh/config line 146: Applying options for *.$(destination)
debug1: /home/$(user)/.ssh/config line 286: Applying options for *
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Executing proxy command: exec ssh -W finalhost.$(destination):22 proxy.$(hop)
debug1: permanently_drop_suid: 1000
debug1: identity file /home/$(user)/.ssh/id_rsa type 1
debug1: key_load_public: No such file or directory
debug1: identity file /home/$(user)/.ssh/id_rsa-cert type -1
debug1: identity file /home/$(user)/.ssh/id_dsa type 2
debug1: key_load_public: No such file or directory
debug1: identity file /home/$(user)/.ssh/id_dsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/$(user)/.ssh/id_ecdsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/$(user)/.ssh/id_ecdsa-cert type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/$(user)/.ssh/id_ed25519 type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/$(user)/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.7p1-hpn14v5
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3p1-hpn13v7
debug1: match: OpenSSH_5.3p1-hpn13v7 pat OpenSSH_5* compat 0x0c000000
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: AUTH STATE IS 0
debug1: REQUESTED ENC.NAME is 'aes128-ctr'
debug1: kex: server->client aes128-ctr [e-mail] none
debug1: REQUESTED ENC.NAME is 'aes128-ctr'
debug1: kex: client->server aes128-ctr [e-mail] none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<3072<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: RSA 95:48:8f:4f:b4:d2:a9:57:5d:16:0d:19:84:f1:9e:3e
debug1: Host 'finalhost.$(destination)' is known and matches the RSA host key.
debug1: Found key in /home/$(user)/.ssh/known_hosts:24
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /home/$(user)/.ssh/id_rsa
debug1: Server accepts key: pkalg ssh-rsa blen 277
debug1: Single to Multithread CTR cipher swap - client request
debug1: Authentication succeeded (publickey).
Authenticated to finalhost.$(destination) (via proxy).
debug1: Final hpn_buffer_size = 2097152
debug1: HPN Disabled: 0, HPN Buffer Size: 2097152
debug1: channel 0: new [client-session]
debug1: Enabled Dynamic Window Scaling
debug1: Requesting [e-mail]
debug1: Entering interactive session.
debug1: need rekeying
debug1: SSH2_MSG_KEXINIT sent
debug1: rekeying in progress
debug1: Requesting authentication agent forwarding.
debug1: enqueue packet: 98
debug1: enqueue packet: 98
debug1: Sending environment.
debug1: Sending env LANG = en_US.UTF-8
debug1: enqueue packet: 98
debug1: enqueue packet: 98
Received disconnect from UNKNOWN: 2: Packet corrupt

[Comment 1 SpanKY 2015-03-17 03:30:26 UTC]

please include `emerge --info` as an attachment in every bug report

if you build openssh with USE=-hpn, does it work ?